You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/site-recovery/azure-vm-disaster-recovery-with-expressroute.md
+29-29Lines changed: 29 additions & 29 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,21 +8,21 @@ ms.date: 12/14/2023
8
8
ms.author: ankitadutta
9
9
10
10
---
11
-
# Integrate ExpressRoute with disaster recovery for Azure VMs
11
+
# Integrate ExpressRoute with disaster recovery for Azure virtual machines
12
12
13
13
14
-
This article describes how to integrate Azure ExpressRoute with [Azure Site Recovery](site-recovery-overview.md), when you set up disaster recovery for Azure VMs to a secondary Azure region.
14
+
This article describes how to integrate Azure ExpressRoute with [Azure Site Recovery](site-recovery-overview.md), when you set up disaster recovery for Azure virtual machines to a secondary Azure region.
15
15
16
-
Site Recovery enables disaster recovery of Azure VMs by replicating Azure VM data to Azure.
16
+
Site Recovery enables disaster recovery of Azure virtual machines by replicating Azure virtual machine data to Azure.
17
17
18
-
- If Azure VMs use [Azure managed disks](/azure/virtual-machines/managed-disks-overview), VM data is replicated to a replicated managed disk in the secondary region.
19
-
- If Azure VMs don't use managed disks, VM data is replicated to an Azure storage account.
20
-
- Replication endpoints are public, but replication traffic for Azure VMs doesn't cross the internet.
18
+
- If Azure virtual machines use [Azure managed disks](/azure/virtual-machines/managed-disks-overview), virtual machine data is replicated to a replicated managed disk in the secondary region.
19
+
- If Azure virtual machines don't use managed disks, virtual machine data is replicated to an Azure storage account.
20
+
- Replication endpoints are public, but replication traffic for Azure virtual machines doesn't cross the internet.
21
21
22
22
ExpressRoute enables you to extend on-premises networks into the Microsoft Azure cloud over a private connection, facilitated by a connectivity provider. If you have ExpressRoute configured, it integrates with Site Recovery as follows:
23
23
24
-
-**During replication between Azure regions**: Replication traffic for Azure VM disaster recovery is within Azure only, and ExpressRoute isn't needed or used for replication. However, if you're connecting from an on-premises site to the Azure VMs in the primary Azure site, there are many issues to be aware of when you're setting up disaster recovery for those Azure VMs.
25
-
-**Failover between Azure regions**: When outages occur, you fail over Azure VMs from the primary to secondary Azure region. After failing over to a secondary region, there are many steps to take in order to access the Azure VMs in the secondary region using ExpressRoute.
24
+
-**During replication between Azure regions**: Replication traffic for Azure virtual machine disaster recovery is within Azure only, and ExpressRoute isn't needed or used for replication. However, if you're connecting from an on-premises site to the Azure virtual machines in the primary Azure site, there are many issues to be aware of when you're setting up disaster recovery for those Azure virtual machines.
25
+
-**Failover between Azure regions**: When outages occur, you fail over Azure virtual machines from the primary to secondary Azure region. After failing over to a secondary region, there are many steps to take in order to access the Azure virtual machines in the secondary region using ExpressRoute.
26
26
27
27
28
28
## Before you begin
@@ -32,44 +32,44 @@ Before you begin, make sure you understand the following concepts:
- How to [set up replication](azure-to-azure-tutorial-enable-replication.md) for Azure virtual machines.
37
+
- How to [fail over](azure-to-azure-tutorial-failover-failback.md) Azure virtual machines.
38
38
39
39
40
40
## General recommendations
41
41
42
42
For best practice, and to ensure efficient Recovery Time Objectives (RTOs) for disaster recovery, we recommend you do the following when you set up Site Recovery to integrate with ExpressRoute:
43
43
44
44
- Provision networking components before failover to a secondary region:
45
-
- When you enable replication for Azure VMs, Site Recovery can automatically deploy networking resources such as networks, subnets, and gateways in the target Azure region, based on source network settings.
45
+
- When you enable replication for Azure virtual machines, Site Recovery can automatically deploy networking resources such as networks, subnets, and gateways in the target Azure region, based on source network settings.
46
46
- Site Recovery can't automatically set up networking resources such as VNet gateways.
47
-
- We recommend you provision these additional networking resources before failover. A small downtime is associated with this deployment, and it can impact the overall recovery time, if you didn't account for it during deployment planning.
47
+
- We recommend you provision these extra networking resources before failover. A small downtime is associated with this deployment, and it can impact the overall recovery time, if you didn't account for it during deployment planning.
48
48
- Run regular disaster recovery drills:
49
49
- A drill validates your replication strategy without data loss or downtime, and doesn't affect your production environment. It helps avoid last-minute configuration issues that can adversely impact RTO.
50
-
- When you run a test failover for the drill, we recommend that you use a separate Azure VM network, instead of the default network that's set up when you enable replication.
50
+
- When you run a test failover for the drill, we recommend that you use a separate Azure virtual machine network, instead of the default network that's set up when you enable replication.
51
51
- Use different IP address spaces if you have a single ExpressRoute circuit.
52
52
- We recommend that you use a different IP address space for the target virtual network. This avoids issues when establishing connections during regional outages.
53
53
- If you can't use a separate address space, be sure to run the disaster recovery drill test failover on a separate test network with different IP addresses. You can’t connect two VNets with overlapping IP address space to the same ExpressRoute circuit.
54
54
55
-
## Replicate Azure VMs when using ExpressRoute
55
+
## Replicate Azure virtual machines when using ExpressRoute
56
56
57
57
58
-
If you want to set up replication for Azure VMs in a primary site, and you're connecting to these VMs from your on-premises site over ExpressRoute, here's what you need to do:
58
+
If you want to set up replication for Azure virtual machines in a primary site, and you're connecting to these virtual machines from your on-premises site over ExpressRoute, here's what you need to do:
59
59
60
-
1.[Enable replication](azure-to-azure-tutorial-enable-replication.md) for each Azure VM.
60
+
1.[Enable replication](azure-to-azure-tutorial-enable-replication.md) for each Azure virtual machine.
61
61
2. Optionally let Site Recovery set up networking:
62
62
- When you configure and enable replication, Site Recovery sets up networks, subnets, and gateway subnets in the target Azure region, to match those in the source region. Site Recovery also maps between the source and target virtual networks.
63
63
- If you don't want Site Recovery to do this automatically, create the target-side network resources before you enable replication.
64
64
3. Create other networking elements:
65
65
- Site Recovery doesn't create route tables, VNet gateways, VNet gateway connections, VNet peering, or other networking resources and connections in the secondary region.
66
-
- You need to create these additional networking elements in the secondary region, anytime before running a failover from the primary region.
66
+
- You need to create these extra networking elements in the secondary region, anytime before running a failover from the primary region.
67
67
- You can use [recovery plans](site-recovery-create-recovery-plans.md) and automation scripts to set up and connect these networking resources.
68
68
1. If you have a network virtual appliance (NVA) deployed to control the flow of network traffic:
69
-
- Azure's default system route for Azure VM replication is 0.0.0.0/0.
69
+
- Azure's default system route for Azure virtual machine replication is 0.0.0.0/0.
70
70
- Typically, NVA deployments also define a default route (0.0.0.0/0) that forces outbound Internet traffic to flow through the NVA. The default route is used when no other specific route configuration can be found.
71
71
- If so, the NVA might be overloaded if all replication traffic passes through the NVA.
72
-
- The same limitation also applies when using default routes for routing all Azure VM traffic to on-premises deployments.
72
+
- The same limitation also applies when using default routes for routing all Azure virtual machine traffic to on-premises deployments.
73
73
- In this scenario, we recommend that you [create a network service endpoint](azure-to-azure-about-networking.md#create-network-service-endpoint-for-storage) in your virtual network for the Microsoft.Storage service, so that the replication traffic doesn't leave Azure boundary.
74
74
75
75
## Replication example
@@ -119,17 +119,17 @@ Hub to spoke | Use remove gateways | Disabled
119
119
120
120
### Example steps
121
121
122
-
In our example, the following should happen when enabling replication for Azure VMs in the source network:
122
+
In our example, the following should happen when enabling replication for Azure virtual machines in the source network:
123
123
124
-
1. You [enable replication](azure-to-azure-tutorial-enable-replication.md) for a VM.
124
+
1. You [enable replication](azure-to-azure-tutorial-enable-replication.md) for a virtual machine.
125
125
2. Site Recovery creates replica vNets, subnets, and gateway subnets in the target region.
126
126
3. Site Recovery creates mappings between the source networks and the replica target networks it creates.
127
127
4. You manually create virtual network gateways, virtual network gateway connections, virtual network peering, or any other networking resources or connections.
128
128
129
129
130
-
## Fail over Azure VMs when using ExpressRoute
130
+
## Fail over Azure virtual machines when using ExpressRoute
131
131
132
-
After you fail Azure VMs over to the target Azure region using Site Recovery, you can access them using ExpressRoute [private peering](../expressroute/expressroute-circuit-peerings.md#privatepeering).
132
+
After you fail Azure virtual machines over to the target Azure region using Site Recovery, you can access them using ExpressRoute [private peering](../expressroute/expressroute-circuit-peerings.md#privatepeering).
133
133
134
134
- You need to connect ExpressRoute to the target vNet with a new connection. The existing ExpressRoute connection isn't automatically transferred.
135
135
- The way in which you set up your ExpressRoute connection to the target vNet depends on your ExpressRoute topology.
@@ -142,7 +142,7 @@ After you fail Azure VMs over to the target Azure region using Site Recovery, yo
142
142
This configuration helps protect ExpressRoute circuits against regional disaster. If your primary peering location goes down, connections can continue from the other location.
143
143
144
144
- The circuit connected to the production environment is usually the primary. The secondary circuit typically has lower bandwidth, which can be increased if a disaster occurs.
145
-
- After failover, you can establish connections from the secondary ExpressRoute circuit to the target vNet. Alternatively, you can have connections set up and ready in case of disaster, to reduce overall recovery time.
145
+
- After failover, you can establish connections from the secondary ExpressRoute circuit to the target vNet. Alternatively, you can have connections set up and ready in disaster, to reduce overall recovery time.
146
146
- With simultaneous connections to both primary and target vNets, make sure that your on-premises routing only uses the secondary circuit and connection after failover.
147
147
- The source and target vNets can receive new IP addresses, or keep the same ones, after failover. In both cases, the secondary connections can be established prior to failover.
148
148
@@ -165,7 +165,7 @@ In this configuration there's only one Expressroute circuit. Although the circui
165
165
- In a regional failure, if the primary region is inaccessible, the disconnect operation could fail. This could impact connection creation to the target region.
166
166
- If you created the connection in the target region, and primary region recovers later, you might experience packet drops if two simultaneous connections attempt to connect to the same address space.
167
167
- To prevent this, terminate the primary connection immediately.
168
-
- After VM failback to the primary region, the primary connection can again be established, after you disconnect the secondary connection.
168
+
- After virtual machine failback to the primary region, the primary connection can again be established, after you disconnect the secondary connection.
169
169
- If a different address space is used on the target vNet, you can simultaneously connect to the source and target vNets from the same ExpressRoute circuit.
170
170
171
171
@@ -174,7 +174,7 @@ In this configuration there's only one Expressroute circuit. Although the circui
174
174
In our example, we're using the following topology:
175
175
176
176
- Two different ExpressRoute circuits in two different peering locations.
177
-
- Retain private IP addresses for the Azure VMs after failover.
177
+
- Retain private IP addresses for the Azure virtual machines after failover.
178
178
- The target recovery region is Azure SouthEast Asia.
179
179
- A secondary ExpressRoute circuit connection is established through a partner edge in Singapore.
180
180
@@ -184,7 +184,7 @@ For a simple topology that uses a single ExpressRoute circuit, with same IP addr
184
184
To automate recovery in this example, here's what you need to do:
185
185
186
186
1. Follow the steps to set up replication.
187
-
2.[Fail over the Azure VMs](azure-to-azure-tutorial-failover-failback.md), with these additional steps during or after the failover.
187
+
2.[Fail over the Azure virtual machines](azure-to-azure-tutorial-failover-failback.md), with these extra steps during or after the failover.
188
188
189
189
a. Create the Azure ExpressRoute Gateway in the target region hub VNet. This is need to connect the target hub vNet to the ExpressRoute circuit.
190
190
@@ -202,7 +202,7 @@ The above steps can be scripted as part of a [recovery plan](site-recovery-creat
202
202
203
203
#### After recovery
204
204
205
-
After recovering the VMs and completing connectivity, the recovery environment is as follows.
205
+
After recovering the virtual machines and completing connectivity, the recovery environment is as follows.
206
206
207
207

0 commit comments