Skip to content

Commit 6f9885c

Browse files
committed
Updatess from 'kegger' meeting
1 parent 2d6f061 commit 6f9885c

File tree

4 files changed

+22
-43
lines changed

4 files changed

+22
-43
lines changed

articles/storage/common/storage-disaster-recovery-guidance.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -130,7 +130,7 @@ Although Microsoft could potentially initiate a regional failover, this only hap
130130
### Anticipate data loss and inconsistencies
131131

132132
> [!CAUTION]
133-
> Storage account failover usually involves some amount data loss, and could also potentially introduce file and data inconsistencies. In your disaster recovery plan, it's important to consider the impact that an account failover would have on your data before initiating one.
133+
> Customer-managed (unplanned) failover usually involves some amount data loss, and can also potentially introduce file and data inconsistencies. In your disaster recovery plan, it's important to consider the impact that an account failover would have on your data before initiating one.
134134
135135
Because data is written asynchronously from the primary region to the secondary region, there's always a delay before a write to the primary region is copied to the secondary. If the primary region becomes unavailable, it's possible that the most recent writes might not yet be copied to the secondary.
136136

articles/storage/common/storage-failover-customer-managed-planned.md

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,11 @@ Current: 100 (1779/0)
2020

2121
# How customer-managed planned failover (preview) works
2222

23-
Customer-managed storage account planned failover enables you to fail over your entire geo-redundant storage account to the secondary region to do disaster recovery testing. During failover, the original secondary region becomes the new primary and all storage service endpoints for blobs, tables, queues, and files are redirected to the new primary region. After testing is complete, you can perform another failover operation to *fail back* to the original primary region. A *failback* is an operation restores a storage account to its original regional configuration.
23+
Customer-managed planned failover (preview) can be used to to test your disaster recovery plan. During the planned failover process, the primnary and secondary regions are swapped. The original primary region is demoted and becomes the new secondary, while the original secondary region is promoted and becomes the new primary. After the failover completes, users can proceed to access data in the new primary region and administrators can validate their disaster recovery plan. The storage account must be available in both the primary and secondary regions before a planned failover can be initiated.
2424

25-
This article describes what happens during a customer-managed planned storage account failover and failback at every stage of the process. To understand how a failover due to an unexpected storage endpoint outage works, see [How customer-managed storage account failover to recover from an outage works](storage-failover-customer-managed-unplanned.md).
25+
Customer-managed planned failover (preview) can also be used during a partial networking or compute outage in your primary region. These outages might occur, for example, when an outage in your primary region prevents your workloads from functioning properly, but leaves your storage service endpoints available.
26+
27+
This article describes what happens during a customer-managed planned storage account failover and failback at every stage of the process. To understand how a failover due to an unexpected storage endpoint outage works, see [How customer-managed (unplanned) failover](storage-failover-customer-managed-unplanned.md).
2628

2729
> [!IMPORTANT]
2830
> Customer-managed planned failover is currently in PREVIEW. This preview version is provided without a service level agreement, and might not be suitable for production workloads. Certain features might not be supported or might have constrained capabilities.
@@ -31,7 +33,7 @@ This article describes what happens during a customer-managed planned storage ac
3133
>
3234
> To opt in to the preview, see [Set up preview features in Azure subscription](../../azure-resource-manager/management/preview-features.md) and specify `AllowSoftFailover` as the feature name.
3335
34-
## Redundancy management during failover and failback
36+
## Redundancy management during planned failover and failback
3537

3638
> [!TIP]
3739
> To understand the varying redundancy states during the storage account failover and failback process in detail, see [Azure Storage redundancy](storage-redundancy.md) for definitions of each.
@@ -59,7 +61,7 @@ The failback process is essentially the same as the failover process, except Azu
5961

6062
To learn how to initiate a failover, see [Initiate a storage account failover](storage-initiate-account-failover.md).
6163

62-
## The failover and failback process
64+
## The planned failover and failback process
6365

6466
The following diagrams show what happens during a customer-managed planned failover and failback of a storage account.
6567

@@ -69,7 +71,7 @@ Under normal circumstances, a client writes data to a storage account in the pri
6971

7072
:::image type="content" source="media/storage-failover-customer-managed-common/pre-failover-geo-redundant.png" alt-text="Diagram that shows how clients write data to the storage account in the primary region." lightbox="media/storage-failover-customer-managed-common/pre-failover-geo-redundant.png":::
7173

72-
### The failover process (GRS/RA-GRS)
74+
### The planned failover process (GRS/RA-GRS)
7375

7476
Begin disaster recovery testing by initiating a failover of your storage account to the secondary region. The following steps describe the failover process, and the subsequent image provides illustration:
7577

@@ -87,7 +89,7 @@ After the failover is complete, the original primary region becomes the new seco
8789

8890
While in the failover state, perform your disaster recovery testing.
8991

90-
### The failback process (GRS/RA-GRS)
92+
### The planned failback process (GRS/RA-GRS)
9193

9294
After testing is complete, perform another failover to failback to the original primary region. During the failover process, as shown in the following image:
9395

@@ -109,7 +111,7 @@ Under normal circumstances, a client writes data to a storage account in the pri
109111

110112
:::image type="content" source="media/storage-failover-customer-managed-common/pre-failover-geo-zone-redundant.png" alt-text="Diagram that shows how the clients write data to the storage account in the primary region." lightbox="media/storage-failover-customer-managed-common/pre-failover-geo-zone-redundant.png":::
111113

112-
### The failover process (GZRS/RA-GZRS)
114+
### The planned failover process (GZRS/RA-GZRS)
113115

114116
Begin disaster recovery testing by initiating a failover of your storage account to the secondary region. The following steps describe the failover process, and the subsequent image provides illustration:
115117

@@ -127,7 +129,7 @@ After the failover is complete, the original primary region becomes the new seco
127129

128130
While in the failover state, perform your disaster recovery testing.
129131

130-
### The failback process (GZRS/RA-GZRS)
132+
### The planned failback process (GZRS/RA-GZRS)
131133

132134
When testing is complete, perform another failover to fail back to the original primary region. The following image illustrates the steps involved in the failover process.
133135

articles/storage/common/storage-failover-customer-managed-unplanned.md

Lines changed: 5 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -17,19 +17,12 @@ Initial: 84 (2544/39)
1717
Current: 100 (2548/3)
1818
-->
1919

20-
# How customer-managed (unplanned) storage account failover works
20+
# How customer-managed (unplanned) failover works
2121

22-
Customer-managed (unplanned) failover of Azure Storage accounts enables you to fail over your entire geo-redundant storage account to the secondary region if the storage service endpoints for the primary region become unavailable. During failover, the original secondary region becomes the new primary region. All storage service endpoints are then redirected to the *new* primary region. After the storage service endpoint outage is resolved, you can perform another failover operation to fail *back* to the original primary region.
22+
Customer-managed (unplanned) failover enables you to fail over your entire geo-redundant storage account to the secondary region if the storage service endpoints for the primary region become unavailable. During failover, the original secondary region becomes the new primary region. All storage service endpoints are then redirected to the *new* primary region. After the storage service endpoint outage is resolved, you can perform another failover operation to fail *back* to the original primary region.
2323

2424
This article describes what happens during a customer-managed storage account failover and failback at every stage of the process.
2525

26-
> [!IMPORTANT]
27-
> Customer-managed (unplanned) failover is currently in PREVIEW. This preview version is provided without a service level agreement, and might not be suitable for production workloads. Certain features might not be supported or might have constrained capabilities.
28-
>
29-
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
30-
>
31-
> To opt in to the preview, see [Set up preview features in Azure subscription](../../azure-resource-manager/management/preview-features.md) and specify `AllowSoftFailover` as the feature name.
32-
3326
[!INCLUDE [updated-for-az](../../../includes/storage-failover-unplanned-hns-preview-include.md)]
3427

3528
## Redundancy management during failover and failback
@@ -54,12 +47,12 @@ The failback process is essentially the same as the failover process except Azur
5447

5548
After failback, you can reconfigure your storage account to take advantage of geo-redundancy again. If the original primary region was configured for LRS, you can configure it to be GRS or RA-GRS. If the original primary was configured as ZRS, you can configure it to be GZRS or RA-GZRS. For more options, see [Change how a storage account is replicated](redundancy-migration.md).
5649

57-
## How to initiate a failover
50+
## How to initiate an unplanned failover
5851

59-
To learn how to initiate a failover, see [Initiate a storage account failover](storage-initiate-account-failover.md).
52+
To learn how to initiate an unplanned failover, see [Initiate a storage account failover](storage-initiate-account-failover.md).
6053

6154
> [!CAUTION]
62-
> Storage account failover usually involves some data loss, and potentially file and data inconsistencies. It's important to understand the impact that an account failover would have on your data before initiating one.
55+
> Unplanned failover usually involves some data loss, and potentially file and data inconsistencies. It's important to understand the impact that an account failover would have on your data before initiating this type of failover.
6356
>
6457
> For details about potential data loss and inconsistencies, see [Anticipate data loss and inconsistencies](storage-disaster-recovery-guidance.md#anticipate-data-loss-and-inconsistencies).
6558

articles/storage/common/storage-initiate-account-failover.md

Lines changed: 6 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -44,16 +44,14 @@ Before you can perform an account failover on your storage account, make sure th
4444

4545
Review these important topics detailed in the [disaster recovery guidance](storage-disaster-recovery-guidance.md#plan-for-storage-account-failover) article before initiating a customer-managed failover.
4646

47-
- **Potential data loss**: Data loss should be expected during an uplanned storage account failover.
48-
> [!WARNING]
49-
> It is important to understand the expectations for data loss associated with an unplanned failover, and to plan for it. For details on the implications of an unplanned account failover and to how to prepare for data loss, see the [Anticipate data loss and inconsistencies](storage-disaster-recovery-guidance.md#anticipate-data-loss-and-inconsistencies) section.
50-
- **Geo-redundancy**: Before you can perform a failover, your storage account must be configured for geo-redundancy. Initial synchronization from the primary to the secondary region must also have completed before the failover process can begin. If your account isn't configured for geo-redundancy, you can change it by following the steps described within the [Change how a storage account is replicated](redundancy-migration.md) article. For more information about Azure storage redundancy options, see the [Azure Storage redundancy](storage-redundancy.md) article.
51-
- **Understand the different types of account failover**: There are **TWO** or **three** types of storage account failover. See the [Plan for storage account failover](storage-disaster-recovery-guidance.md#plan-for-storage-account-failover) article to learn about potential use cases for each type, and how they differ. *This article focuses on how to initiate a customer-managed failover to recover from the service endpoints being unavailable in the primary region, or a customer-managed **planned** failover (preview) used primarily to perform disaster recovery testing*.
47+
- **Potential data loss**: Data loss should be expected during an uplanned storage account failover. For details on the implications of an unplanned account failover and to how to prepare for data loss, see the [Anticipate data loss and inconsistencies](storage-disaster-recovery-guidance.md#anticipate-data-loss-and-inconsistencies) section.
48+
- **Geo-redundancy**: Before you can perform a failover, your storage account must be configured for geo-redundancy. Initial synchronization from the primary to the secondary region must complete before the failover process can begin. If your account isn't configured for geo-redundancy, you can change it by following the steps described within the [Change how a storage account is replicated](redundancy-migration.md) article. For more information about Azure storage redundancy options, see the [Azure Storage redundancy](storage-redundancy.md) article.
49+
- **Understand the different types of account failover**: There are two types of customer-managed failover. See the [Plan for failover](storage-disaster-recovery-guidance.md#plan-for-storage-account-failover) article to learn about potential use cases for each type, and how they differ.
5250
- **Plan for unsupported features and services**: Review the [Unsupported features and services](storage-disaster-recovery-guidance.md#unsupported-features-and-services) article and take appropriate action before initiating a failover.
5351
- **Supported storage account types**: Ensure that your storage account type can be used to initiate a failover. See [Supported storage account types](storage-disaster-recovery-guidance.md#supported-storage-account-types).
54-
- **Set your expectations for timing and cost**: The time it takes the failover process to complete after being intiated can vary, but typically takes less than one hour. A an unplanned failover results in the loss of geo-redundancy configuration. Reconfiguring GRS typically incurs extra time and cost. For more information, see the [time and cost of failing over](storage-disaster-recovery-guidance.md#the-time-and-cost-of-failing-over) section.
52+
- **Set your expectations for timing and cost**: After intiation, the time it takes the customer-managed failover process to complete can vary, but typically takes less than one hour. An unplanned failover results in the loss of geo-redundancy configuration. Reconfiguring GRS typically incurs extra time and cost. For more information, see the [time and cost of failing over](storage-disaster-recovery-guidance.md#the-time-and-cost-of-failing-over) section.
5553

56-
## Initiate the failover
54+
## Initiate the customer-managed failover
5755

5856
<!--You can initiate an account failover from the Azure portal, PowerShell, or the Azure CLI.-->
5957

@@ -76,20 +74,13 @@ Complete the following steps to initiate an account failover using the Azure por
7674

7775
:::image type="content" source="media/storage-initiate-account-failover/portal-failover-redundancy.png" alt-text="Screenshot showing redundancy and failover status." lightbox="media/storage-initiate-account-failover/portal-failover-redundancy.png":::
7876

79-
If your storage account is configured with a hierarchical namespace enabled, the following message is displayed:
80-
81-
:::image type="content" source="media/storage-initiate-account-failover/portal-failover-hns-not-supported.png" alt-text="Screenshot showing that failover isn't supported for hierarchical namespace." lightbox="media/storage-initiate-account-failover/portal-failover-hns-not-supported.png":::
82-
8377
1. Verify that your storage account is configured for geo-redundant storage (GRS, RA-GRS, GZRS or RA-GZRS). If it's not, select the desired redundancy configuration from the **Redundancy** drop-down and select **Save** to commit your change. After the geo-redundancy configuration is changed, your data is synchronized from the primary to the secondary region. This synchronization will take several minutes, and failover can't be initiated until all data has been replicated. The following message appears until the synchronization is complete:
8478

8579
:::image type="content" source="media/storage-initiate-account-failover/portal-failover-repl-in-progress.png" alt-text="Screenshot showing the location of the message indicating that synchronization is still in progress." lightbox="media/storage-initiate-account-failover/portal-failover-repl-in-progress.png":::
8680

8781
1. Select **Prepare for Customer-Managed failover** as shown in the following image:
8882

89-
:::image type="content" source="media/storage-initiate-account-failover/portal-failover-prepare.png" lightbox="media/storage-initiate-account-failover/portal-failover-prepare.png" alt-text="Screenshot showing the prepare for failover window.":::
90-
91-
> [!NOTE]
92-
> If your storage account is configured with a hierarchical namespace enabled, the `Failover` option is disabled.
83+
:::image type="content" source="media/storage-initiate-account-failover/portal-failover-redundancy.png" alt-text="Screenshot showing redundancy and failover status." lightbox="media/storage-initiate-account-failover/portal-failover-redundancy.png":::
9384

9485
1. Select the type of failover to prepare for. The confirmation page varies depending on the type of failover you select.
9586
**If you select `Unplanned Failover`**:
@@ -98,13 +89,6 @@ Complete the following steps to initiate an account failover using the Azure por
9889

9990
:::image type="content" source="media/storage-initiate-account-failover/portal-failover-prepare-failover.png" alt-text="Screenshot showing the failover option selected on the Prepare for failover window." lightbox="media/storage-initiate-account-failover/portal-failover-prepare-failover.png":::
10091

101-
For more information about potential data loss and what happens to your account redundancy configuration during failover, see:
102-
103-
> [Anticipate data loss and inconsistencies](storage-disaster-recovery-guidance.md#anticipate-data-loss-and-inconsistencies)
104-
>
105-
> [Plan for storage account failover](storage-disaster-recovery-guidance.md#plan-for-storage-account-failover)
106-
The **Last Sync Time** property indicates the last time the secondary was synchronized with the primary. The difference between **Last Sync Time** and the current time provides an estimate of the extent of data loss that you will experience after the failover is completed. For more information about checking the **Last Sync Time** property, see [Check the Last Sync Time property for a storage account](last-sync-time-get.md).
107-
10892
**If you select `Planned failover`** (preview):
10993

11094
You will see the **Last Sync Time** value, but notice in the image that follows that the failover will not occur until after all of the remaining data is synchronized to the secondary region.

0 commit comments

Comments
 (0)