You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-desktop/disaster-recovery-concepts.md
+7-5Lines changed: 7 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -65,7 +65,7 @@ The disaster recovery methods we recommend are:
65
65
66
66
- For personal host pools with dedicated VMs, [replicate VMs using Azure Site Recovery](../site-recovery/azure-to-azure-how-to-enable-replication.md) to another region.
67
67
68
-
- Configure a separate "disaster recovery" host pool in the secondary region and use FSLogix Cloud Cache to replicate the user profile. During a disaster, you can switch users over to the secondary region.
68
+
- Configure a separate "disaster recovery" host pool in the secondary region. During a disaster, you can switch users over to the secondary region.
69
69
70
70
We'll go into more detail about the two main methods you can achieve these methods with for shared and personal host pools in the following sections.
71
71
@@ -75,7 +75,7 @@ In this section, we'll discuss shared (or "pooled") host pools using an active-p
75
75
76
76
The following diagram shows an example of a deployment with redundant infrastructure in a secondary region. "Redundant" means that a copy of the original infrastructure exists in this other region, and is standard in deployments to provide resiliency for all components. Beneath a single Azure Active Directory, there are two regions: West US and East US. Each region has two session hosts running a multi-session operating system (OS), A server running Azure AD Connect, an Active Directory Domain Controller, an Azure Files Premium File share for FSLogix profiles, a storage account, and a virtual network (VNET). In the primary region, West US, all resources are turned on. In the secondary region, East US, the session hosts in the host pool are either turned off or in drain mode, and the Azure AD Connect server is in staging mode. The two VNETs in both regions are connected by peering.
77
77
78
-
:::image type="content" source="media/shared-host-pool-recovery.png" alt-text="A diagram of a deployment using the recommended shared host pool disaster recovery strategy described in the previous paragraph.":::
78
+
:::image type="content" source="media/shared-host-pool-recovery-new.png" alt-text="A diagram of a deployment using the recommended shared host pool disaster recovery strategy described in the previous paragraph.":::
79
79
80
80
In most cases, if a component fails or the primary region isn't available, then the only action the customer needs to perform is to turn on the hosts or remove drain mode in the secondary region to enable end-user connections. This scenario focuses on reducing downtime. However, a redundancy-based disaster recovery plan may cost more due to having to maintain those extra components in the secondary region.
81
81
@@ -97,15 +97,15 @@ When using this disaster recovery strategy, it's important to keep the following
97
97
98
98
- Having multiple session hosts online across many regions can impact user experience. The managed network load balancer doesn't account for geographic proximity, instead treating all hosts in a host pool equally.
99
99
100
-
-Having multiple active user sessions across regions using the same FSLogix cloud cache can corrupt user profiles. We recommend you have only one active Azure Virtual Desktop session using the same FSLogix cloud cache at a time. The service evaluates RemoteApps as multi-session occurrences, and desktops as single-session occurrences, which means you should avoid multiple connections to the same FSLogix profile.
100
+
-During a disaster, users will be creating new profiles in the secondary region. You should store any business- or mission-critical data in OneDrive ([using known folder redirection](/sharepoint/redirect-known-folders)) or Sharepoint. Storing data here will give users quick access to their applications with minor disruption to the user experience.
101
101
102
102
- Make sure that you configure your virtual machines (VMs) exactly the same way within your host pool. Also, make sure all VMs within your host pool are the same size. If your VMs aren't the same, the managed network load balancer will distribute user connections evenly across all available VMs. The smaller VMs may become resource-constrained earlier than expected compared to larger VMs, resulting in a negative user experience.
103
103
104
104
- Region availability affects data or workspace monitoring. If a region isn't available, the service may lose all historical monitoring data during a disaster. We recommend using a custom export or dump of historical monitoring data.
105
105
106
106
- We recommend you update your session hosts at least once every month. This recommendation applies to session hosts you keep turned off for extended periods of time.
107
107
108
-
- Test your deployment by running a controlled failover at least once every six months.
108
+
- Test your deployment by running a controlled failover at least once every six months. Part of the controlled failover could mean your secondary location becomes primary until the next controlled failover. Changing your secondary location to primary allows users to have nearly identical profiles during a real disaster.
109
109
110
110
The following table lists deployment recommendations for host pool disaster recovery strategies:
111
111
@@ -114,7 +114,7 @@ The following table lists deployment recommendations for host pool disaster reco
114
114
| Network | Create and deploy a secondary virtual network in another region and configure [Azure Peering](../virtual-network/virtual-network-manage-peering.md) with your primary virtual network. |
115
115
| Session hosts |[Create and deploy an Azure Virtual Desktop shared host pool](create-host-pools-azure-marketplace.md) with multi-session OS SKU and include VMs from other availability zones and another region. |
116
116
| Storage | Create storage accounts in multiple regions using premium-tier accounts. |
117
-
| User profile data | Create separate [FSLogix cloud cache GPOs](/fslogix/configure-cloud-cache-tutorial) pointing at separate Azure Files SMB locations using Azure storage accounts in different regions. |
117
+
| User profile data | Create SMB storage locations in multiple regions. |
118
118
| Identity | Active Directory Domain Controllers from the same directory. |
119
119
120
120
## Disaster recovery for personal host pools
@@ -148,6 +148,8 @@ When using this disaster recovery strategy, it's important to keep the following
148
148
149
149
- We recommend you avoid using FSLogix when using a personal host pool configuration.
150
150
151
+
- Virtual machine provisioning isn't guaranteed in the failover region.
152
+
151
153
- Run [controlled failover](../site-recovery/azure-to-azure-tutorial-dr-drill.md) and [failback](../site-recovery/azure-to-azure-tutorial-failback.md) tests at least once every six months.
152
154
153
155
The following table lists deployment recommendations for host pool disaster recovery strategies:
Copy file name to clipboardExpand all lines: articles/virtual-desktop/disaster-recovery.md
-91Lines changed: 0 additions & 91 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -87,97 +87,6 @@ There are three ways to keep the domain controller available:
87
87
- Use an on-premises Active Directory Domain Controller
88
88
- Replicate Active Directory Domain Controller using [Azure Site Recovery](../site-recovery/site-recovery-active-directory.md)
89
89
90
-
## Replicating user and app profile data
91
-
92
-
If you're using profile containers, the next step is to set up data replication to the secondary location.
93
-
94
-
You have five options to store FSLogix profiles:
95
-
96
-
- Storage Spaces Direct (S2D)
97
-
- Network drives (VM with extra drives)
98
-
- Azure Files
99
-
- Azure NetApp Files
100
-
- Third-party storage services available on the Azure Marketplace
101
-
102
-
For more information, check out [Storage options for FSLogix profile containers in Azure Virtual Desktop](store-fslogix-profile.md).
103
-
104
-
If you're setting up disaster recovery for user profiles, then you'll need to either use the storage service to replicate the data to another region or use FSLogix Cloud Cache to manage the replication without using the underlying storage service to replicate the data.
105
-
106
-
Let's go over the five options for user profile disaster recovery plans in more detail in the following sections.
107
-
108
-
### Native Azure replication
109
-
110
-
One way you can set up disaster recovery is to set up native Azure replication. For example, you can set up native replication with Azure Files Standard storage account replication, Azure NetApp Files replication, or Azure File Sync for file servers.
111
-
112
-
>[!NOTE]
113
-
>NetApp replication is automatic after you first set it up. With Azure Site Recovery plans, you can add pre-scripts and post-scripts to fail over non-VM resources replicate Azure Storage resources.
114
-
115
-
### Storage Spaces Direct
116
-
117
-
Another option you can use is Storage Spaces Direct. Since Storage Spaces Direct handles replication across regions internally, you don't need to manually set up the secondary path.
118
-
119
-
### Network drives (VM with extra drives)
120
-
121
-
You can use VMs with extra drives for disaster recovery, too. If you replicate the network storage VMs using Azure Site Recovery like the session host VMs, then the recovery keeps the same path, which means you don't need to reconfigure FSLogix.
122
-
123
-
### Azure Files
124
-
125
-
Azure Files supports cross-region asynchronous replication that you can specify when you create the storage account. If the asynchronous nature of Azure Files already covers your disaster recovery goals, then you don't need to do extra configuration.
126
-
127
-
If you need synchronous replication to minimize data loss, then we recommend you use FSLogix Cloud Cache instead.
128
-
129
-
>[!NOTE]
130
-
>This section doesn't cover the failover authentication mechanism for Azure Files.
131
-
132
-
### Azure NetApp Files
133
-
134
-
You can also use Azure NetApp Files to replicate your Azure resources. Learn more about Azure NetApp Files at [Create replication peering for Azure NetApp Files](../azure-netapp-files/cross-region-replication-create-peering.md).
135
-
136
-
### FSLogix configuration
137
-
138
-
The FSLogix agent can support multiple profile locations using the standard [VHDLocations](/fslogix/profile-container-configuration-reference#vhd-locations) option. This method doesn't have anything to do with the Cloud Cache, so if you'd rather use the cache, skip ahead to [FSLogix Cloud Cache](#fslogix-cloud-cache). This option also doesn't replicate data, but instead allows you access to multiple storage providers that the FSLogix agent can look in to find or create your user profile. This option separately requires storage replication so that the profile can be made available in the secondary region.
139
-
140
-
To configure the registry entries:
141
-
142
-
1. Open the **Registry Editor**.
143
-
2. Go to **Computer** > **HKEY_LOCAL_MACHINE** > **SOFTWARE** > **FSLogix** > **Profiles**.
144
-
145
-
> [!div class="mx-imgBorder"]
146
-
> 
147
-
148
-
3. Right-click on **VHDLocations** and select **Edit Multi-String**.
149
-
150
-
> [!div class="mx-imgBorder"]
151
-
> 
152
-
153
-
4. In the **Value Data** field, enter the locations you want to use.
154
-
5. When you're done, select **OK**.
155
-
156
-
If the first location is unavailable, the FSLogix agent will automatically fail over to the second, and so on.
157
-
158
-
We recommend you configure the FSLogix agent VHDLocation registry setting with both storage locations in both of the Azure locations you've deployed them. To configure the VHDLocation registry setting, you'll need to set up two different group policies. The first group policy is for the session hosts located in the primary region with the corresponding storage locations ordered with the primary first and the secondary second. The second group policy would be for the session hosts in the secondary location with the storage options reversed, so that the secondary storage location is listed first for only the VMs in the secondary or failover site.
159
-
160
-
For example, let's say your primary session host VMs are in the Central US region, and the profile container is also in the Central US region for performance reasons. In this case, you'd configure the FSLogix agent with a path to the storage in the Central US region listed first. Next, you'd configure the storage service you used in the previous example to replicate to the West US region. Once the path to Central US fails, the agent will try to load the profile in West US instead.
161
-
162
-
### VHDLocations
163
-
164
-
VHDLocations contributes to business continuity, but this setting wasn't only designed to be one part of a complete high availability or disaster recovery solution. The VHDLocations setting enables users to use a replicated or new profile in the event of a disaster, keeping users productive even in the event of an outage.
165
-
166
-
Here's how VHDLocations works, as well as some things you should consider if you plan to make VHDLocations part of your disaster recovery strategy:
167
-
168
-
- If the primary storage is unavailable for whatever reason and a user signs in, the FSLogix agent won't be able to access the existing user profile from that primary share. The user can still sign in, but FSLogix will either use the profile it finds in the secondary storage location (if you've already replicated it with storage replication) or it'll create a new profile on the secondary share. Because the user is now using either a replicated or new profile, they won’t be using their original profile. When they use this secondary profile, any updates they make will apply only to the secondary profile. They won't be able to access their original profile until the primary storage becomes available again and they sign back in.
169
-
170
-
- Once the primary storage is available again, the user won't be able to merge changes they made in the secondary or new profile back into the original profile. When a user signs in after the primary share is available again, they will return to using their original profile as it was before the disaster. Any changes they made in the secondary or new profile during the disaster will be lost.
171
-
172
-
### FSLogix Cloud cache
173
-
174
-
FSLogix supports replicating user and Office containers from the agent running on the session host itself. While you'll need to deploy multiple storage providers in multiple regions to store the replicated profiles, you won't need to configure the storage service's replication capabilities with multiple entries like you did with the VHDLocations settings in the previous section. However, before you start configuring FSLogix Cloud cache, you should be aware this method requires extra processing and storage space on the session host itself. Make sure you review [Cloud Cache to create resiliency and availability](/fslogix/cloud-cache-resiliency-availability-cncpt) before you get started.
175
-
176
-
You can configure FSLogix Cloud Cache directly in the registry based on the VHDLocations example in the previous section. However, we recommend you configure the cloud cache using a group policy instead. To create or edit a group policy object, go to **Computer Configuration** > **Administrative Templates** > **FSLogix** > **Profiles Containers (and Office 365 Containers, if necessary) > Cloud Cache - Cloud Cache Locations**. Once you've created or edited your policy object, you'll need to enable it, then list all storage provider locations you want the FSLogix to replicate it to, as shown in the following image.
177
-
178
-
> [!div class="mx-imgBorder"]
179
-
> 
180
-
181
90
## Back up your data
182
91
183
92
You also have the option to back up your data. You can choose one of the following methods to back up your Azure Virtual Desktop data:
0 commit comments