Skip to content

Commit 595ad19

Browse files
authored
Merge pull request #167118 from tamram/tamram21-0727
clarify that primary can be restored to original config after failback
2 parents 56a6ab5 + 40c0f41 commit 595ad19

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/storage/common/storage-disaster-recovery-guidance.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ The customer initiates the account failover to the secondary endpoint. The failo
8282
Write access is restored for geo-redundant accounts once the DNS entry has been updated and requests are being directed to the new primary endpoint. Existing storage service endpoints for blobs, tables, queues, and files remain the same after the failover.
8383

8484
> [!IMPORTANT]
85-
> After the failover is complete, the storage account is configured to be either locally redundant or zone-redundant at the new primary endpoint, depending on whether the original primary was configured for GRS/RA-GRS or GZRS/RA-GZRS. To resume replication to the new secondary, configure the account for geo-redundancy again.
85+
> After the failover is complete, the storage account is configured to be locally redundant in the new primary endpoint. To resume replication to the new secondary, configure the account for geo-redundancy again.
8686
>
8787
> Keep in mind that converting a locally redundant storage account to use geo-redundancy incurs both cost and time. For more information, see [Important implications of account failover](storage-initiate-account-failover.md#important-implications-of-account-failover).
8888
@@ -93,7 +93,7 @@ Write access is restored for geo-redundant accounts once the DNS entry has been
9393
9494
Because data is written asynchronously from the primary region to the secondary region, there is always a delay before a write to the primary region is copied to the secondary region. If the primary region becomes unavailable, the most recent writes may not yet have been copied to the secondary region.
9595

96-
When you force a failover, all data in the primary region is lost as the secondary region becomes the new primary region. If the primary was configured for GRS or RA-GRS, then the new primary will be locally redundant (LRS) after failover. If the primary was configured for GZRS or RA-GZRS, then the new primary will be zone-redundant (ZRS) after failover.
96+
When you force a failover, all data in the primary region is lost as the secondary region becomes the new primary region. The new primary region is configured to be locally redundant after the failover.
9797

9898
All data already copied to the secondary is maintained when the failover happens. However, any data written to the primary that has not also been copied to the secondary is lost permanently.
9999

@@ -105,12 +105,14 @@ For more information about checking the **Last Sync Time** property, see [Check
105105

106106
### Use caution when failing back to the original primary
107107

108-
After you fail over from the primary to the secondary region, your storage account is configured to be either locally redundant or zone-redundant in the new primary region, depending on whether the original configuration was GRS/RA-GRS or GZRS/RA-GZRS. You can then configure the account for geo-redundancy again. When the account is configured for geo-redundancy again after a failover, the new primary region immediately begins copying data to the new secondary region, which was the primary before the original failover. However, it may take some time before existing data in the primary is fully copied to the new secondary.
108+
After you fail over from the primary to the secondary region, your storage account is configured to be locally redundant in the new primary region. You can then configure the account in the new primary region for geo-redundancy. When the account is configured for geo-redundancy after a failover, the new primary region immediately begins copying data to the new secondary region, which was the primary before the original failover. However, it may take some time before existing data in the new primary is fully copied to the new secondary.
109109

110-
After the storage account is reconfigured for geo-redundancy, it's possible to initiate another failover from the new primary back to the new secondary. In this case, the original primary region prior to the failover becomes the primary region again, and is configured to be either locally redundant or zone-redundant, depending on whether the original primary configuration was GRS/RA-GRS or GZRS/RA-GZRS. All data in the post-failover primary region (the original secondary) is then lost. If most of the data in the storage account has not been copied to the new secondary before you fail back, you could suffer a major data loss.
110+
After the storage account is reconfigured for geo-redundancy, it's possible to initiate a fail back from the new primary back to the new secondary. In this case, the original primary region prior to the failover becomes the primary region again, and is configured to be either locally redundant or zone-redundant, depending on whether the original primary configuration was GRS/RA-GRS or GZRS/RA-GZRS. All data in the post-failover primary region (the original secondary) is lost during the failback. If most of the data in the storage account has not been copied to the new secondary before you fail back, you could suffer a major data loss.
111111

112112
To avoid a major data loss, check the value of the **Last Sync Time** property before failing back. Compare the last sync time to the last times that data was written to the new primary to evaluate expected data loss.
113113

114+
After a failback operation, you can configure the new primary region to be geo-redundant again. If the original primary was configured for LRS, you can configure it to be GRS or RA-GRS. If the original primary was configured for ZRS, you can configure it to be GZRS or RA-GZRS. For additional options, see [Change how a storage account is replicated](redundancy-migration.md).
115+
114116
## Initiate an account failover
115117

116118
You can initiate an account failover from the Azure portal, PowerShell, Azure CLI, or the Azure Storage resource provider API. For more information on how to initiate a failover, see [Initiate an account failover](storage-initiate-account-failover.md).

0 commit comments

Comments
 (0)