Skip to content

Commit cad44dc

Browse files
committed
quick edits
1 parent 5c83686 commit cad44dc

File tree

3 files changed

+40
-29
lines changed

3 files changed

+40
-29
lines changed

articles/reliability/includes/reliability-availability-zone-description-include.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,4 +11,4 @@
1111

1212
Availability zones are physically separate groups of datacenters within each Azure region. When one zone fails, services can fail over to one of the remaining zones.
1313

14-
For more information on availability zones in Azure, see [What are availability zones?](/azure/reliability/availability-zones-overview)
14+
For more information, see [Availability zones](/azure/reliability/availability-zones-overview).

articles/reliability/includes/reliability-shared-responsibility-include.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,4 @@
99
ms.custom: include file
1010
---
1111

12-
Reliability is a shared responsibility between you and Microsoft. You can use this guide to find out which reliability options fulfill your specific business objectives and uptime goals.
12+
Reliability is a shared responsibility between you and Microsoft. You can use this guide to determine which reliability options fulfill your specific business objectives and uptime goals.

articles/reliability/reliability-virtual-network.md

Lines changed: 38 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ ms.author: allensu
66
ms.topic: reliability-article
77
ms.custom: subject-reliability
88
ms.service: azure-virtual-network
9-
ms.date: 05/20/2025
10-
#Customer intent: As an engineer responsible for business continuity, I want to understand who need to understand the details of how Azure Virtual Network works from a reliability perspective and plan disaster recovery strategies in alignment with the exact processes that Azure services follow during different kinds of situations.
9+
ms.date: 05/20/2025s
10+
#Customer intent: As an engineer responsible for business continuity, I want to understand who needs to understand the details of how Azure Virtual Network works from a reliability perspective and plan disaster recovery strategies in alignment with the exact processes that Azure services follow during different kinds of situations.
1111
---
1212

1313
# Reliability in Azure Virtual Network
@@ -16,85 +16,94 @@ This article describes reliability support in Azure Virtual Network, covering in
1616

1717
[!INCLUDE [Shared responsibility description](includes/reliability-shared-responsibility-include.md)]
1818

19-
A virtual network is a logical representation of your network in the cloud. With a virtual network, you can define your own private IP address space and segment the network into subnets. Virtual networks serve as a trust boundary to host your compute resources such as Azure Virtual Machines and load balancers. A virtual network allows direct private IP communication between the resources that are hosted in it. To enable hybrid cloud scenarios and securely extend your datacenter into Azure, you can link a virtual network to an on-premises network through a VPN Gateway or ExpressRoute,
19+
A virtual network is a logical representation of your network in the cloud. You can use a virtual network to define your own private IP address space and segment the network into subnets. Virtual networks serve as a trust boundary to host your compute resources such as Azure Virtual Machines and load balancers. A virtual network allows direct private IP communication between the resources that are hosted in it. To enable hybrid cloud scenarios and securely extend your datacenter into Azure, you can link a virtual network to an on-premises network through a VPN Gateway or Azure ExpressRoute.
2020

2121
## Production deployment recommendations
2222

23-
As you build your virtual network in Azure, it's important to improve the reliability of your solution, by keeping in mind the following universal design principles:
23+
As you build your virtual network in Azure, it's important to improve the reliability of your solution by keeping in mind the following universal design principles:
24+
25+
- Ensure that address spaces don't overlap. Ensure that your virtual network address space (classless inter-domain routing block) doesn't overlap with your organization's other network ranges.
2426

25-
- Ensure address spaces don't overlap. Make sure your virtual network address space (CIDR block) doesn't overlap with your organization's other network ranges.
2627
- Your subnets shouldn't cover the entire address space of the virtual network. Plan ahead and reserve some address space for the future.
28+
2729
- To reduce management overhead, use a few large virtual networks instead of multiple small ones.
28-
- Secure your virtual networks by assigning Network Security Groups (NSGs) to the subnets beneath them.
2930

30-
To learn more about how to design your Azure virtual network with reliability principles in mind, as well as other important best practices, see [Architecture best practices for Azure Virtual Network](/azure/well-architected/service-guides/virtual-network).
31+
- Secure your virtual networks by assigning network security groups (NSGs) to the subnets beneath them.
32+
33+
For more information about how to design your Azure virtual network with reliability principles in mind, see [Architecture best practices for Virtual Network](/azure/well-architected/service-guides/virtual-network).
3134

3235
## Reliability architecture overview
3336

3437
A virtual network is one of several core networking components in Azure. When you create a virtual network, you create a set of resources that collectively define your networking configuration. These resources include:
3538

36-
- Network security groups (NSGs) and application security groups (ASGs), which restrict communication between parts of your network.
39+
- NSGs and application security groups, which restrict communication between parts of your network.
40+
3741
- User-defined routes, which control how traffic flows.
42+
3843
- Load balancers, which distribute traffic within your network.
44+
3945
- Public IP addresses, which provide connectivity to and from the internet.
40-
- Network interface cards (NICs), which provide network connectivity to Azure virtual machines.
46+
47+
- Network interface cards, which provide network connectivity to Azure virtual machines (VMs).
48+
4149
- Private endpoints, which provide private connectivity to Azure services and to resources outside of your own virtual network.
4250

4351
You might also deploy *appliances*, such as ExpressRoute gateways, VPN gateways, and firewalls. Appliances provide services to support your networking requirements, such as connecting to on-premises environments or providing sophisticated controls on traffic flow.
4452

45-
Finally, you deploy your own components, like virtual machines that run applications or databases, as well as other Azure services that provide virtual network integration.
53+
Finally, you deploy your own components, like VMs that run applications or databases, and other Azure services that provide virtual network integration.
4654

4755
> [!IMPORTANT]
48-
> This guide focuses on Azure virtual networks, which are just one component in your network architecture.
56+
> This guide focuses on Azure virtual networks, which are only one component in your network architecture.
4957
>
50-
> From a reliability perspective, it's important that you consider each component in your solution individually as well as how they behave together. Many core Azure networking services provide high resiliency by default, but you might need to consider how other network appliances, virtual machines, and other components can support your reliability needs. Review the [reliability guides for each Azure service](./overview-reliability-guidance.md) you use to understand how that service supports reliability.
58+
> From a reliability perspective, it's important that you consider each component in your solution individually and how they operate together. Many core Azure networking services provide high resiliency by default. However, you might need to consider how other network appliances, VMs, and other components can support your reliability needs. For more information about how services support reliability, see [Azure service reliability guides](./overview-reliability-guidance.md).
5159
52-
To learn more about networking in Azure, see [Networking architecture design](/azure/architecture/networking/).
60+
For more information about networking in Azure, see [Networking architecture design](/azure/architecture/networking/).
5361

5462
## Transient faults
5563

5664
[!INCLUDE [Transient fault description](includes/reliability-transient-fault-description-include.md)]
5765

58-
Virtual networks themselves aren't usually affected by transient faults. However, transient faults might affect resources deployed within a virtual network. Review the [reliability guide for each resource](./overview-reliability-guidance.md) you use to understand their transient fault handling behaviors.
66+
Transient faults don't usually affect virtual networks. However, transient faults might affect resources deployed within a virtual network. For more information about transient fault handling behaviors, see [Azure service reliability guides](./overview-reliability-guidance.md).
5967

6068
## Availability zone support
6169

6270
[!INCLUDE [AZ support description](includes/reliability-availability-zone-description-include.md)]
6371

64-
A virtual network, as well as the subnets within that virtual network, spans across all availability zones within the region in which it's deployed. You do not have to configure anything to enable this support.
65-
You don't need to divide your virtual networks or subnets by availability zones to accommodate zonal resources. For example, if you configure a zonal VM, you don't have to take into consideration the virtual network when selecting the availability zone for the VM. The same is true for other zonal resources.
72+
A virtual network and its subnets span all availability zones within the region where it's deployed. You don't have to configure anything to enable this support.
73+
74+
You don't need to divide your virtual networks or subnets by availability zones to accommodate zonal resources. For example, if you configure a zonal VM, you don't have to consider the virtual network when you select the availability zone for the VM. The same is true for other zonal resources.
6675

6776
### Region support
6877

6978
Zone-redundant virtual networks can be deployed in [any region that supports availability zones](./regions-list.md).
7079

7180
### Cost
7281

73-
There is no extra cost for zone redundancy for Azure Virtual Networks.
82+
There's no extra cost for zone redundancy for Azure virtual networks.
7483

7584
### Configure availability zone support
7685

7786
Zone redundancy is configured automatically when a virtual network is deployed in a region that supports availability zones.
7887

7988
### Zone-down experience
8089

81-
Azure virtual networks are designed to be resilient to zone failures. When a zone becomes unavailable, Azure Virtual Network automatically reroutes virtual network requests to the remaining zones. This process is seamless and doesn't require any action from you.
90+
Azure virtual networks are designed to be resilient to zone failures. When a zone becomes unavailable, Virtual Network automatically reroutes virtual network requests to the remaining zones. This process is seamless and doesn't require any action from you.
8291

83-
However, any resources within the virtual network need to be considered individually, because each resource might have a different set of behaviors during the loss of an availability zone. Consult the [reliability guide for each resource(./overview-reliability-guidance.md) you use to understand their availability zone support and behavior when a zone is unavailable.
92+
However, any resources within the virtual network need to be considered individually, because each resource might have a different set of behaviors during the loss of an availability zone. Consult the [reliability guide for each resource](./overview-reliability-guidance.md) that you use to understand their availability zone support and behavior when a zone is unavailable.
8493

8594
### Failback
8695

8796
When the zone recovers, Microsoft initiates a failback process to ensure that virtual networks continue to work in the recovered zone. The failback process is automatic and doesn't require any action from you.
8897

89-
However, you should verify the failback behaviors of any resources you deploy within the virtual network. For more information, consult the [reliability guide for each resource(./overview-reliability-guidance.md).
98+
However, you should verify the failback behaviors of any resources you deploy within the virtual network. For more information, see the [reliability guide for each resource](./overview-reliability-guidance.md).
9099

91100
### Testing for zone failures
92101

93-
The Azure Virtual Network platform manages traffic routing, failover, and failback for virtual networks across availability zones. Because this feature is fully managed, you don't need to validate availability zone failure processes.
102+
The Virtual Network platform manages traffic routing, failover, and failback for virtual networks across availability zones. Because this feature is fully managed, you don't need to validate availability zone failure processes.
94103

95104
## Multi-region support
96105

97-
Azure Virtual Network is a single-region service. If the region becomes unavailable, your virtual network is also unavailable.
106+
Virtual Network is a single-region service. If the region becomes unavailable, your virtual network is also unavailable.
98107

99108
### Alternative multi-region approaches
100109

@@ -110,17 +119,19 @@ By creating virtual networks and other resources in multiple regions, you can be
110119

111120
- **IP address space:** You need to decide how to allocate IP addresses when you create multiple virtual networks. You can create multiple virtual networks using the same private IP address space in different regions. However, you can't peer (connect) two virtual networks with the same address space to your on-premises network, as it would cause routing issues. If you plan to create a multi-network design, IP address planning is an important consideration.
112121

113-
Virtual networks are fairly lightweight resources. You can invoke Azure APIs to create a virtual network with the same address space in a different region. However, to recreate the same environment that was present in the affected region, you must redeploy the virtual machines and other resources. If you have on-premises connectivity, such as in a hybrid deployment, you have to deploy a new VPN Gateway, and connect to your on-premises network.
122+
Virtual networks are fairly lightweight resources. You can invoke Azure APIs to create a virtual network with the same address space in a different region. However, to recreate the same environment that was present in the affected region, you must redeploy the VMs and other resources. If you have on-premises connectivity, such as in a hybrid deployment, you have to deploy a new VPN Gateway, and connect to your on-premises network.
114123

115-
For an example of a multi-region networking architecture for web applications, see [Multi-region load balancing with Traffic Manager, Azure Firewall, and Application Gateway](/azure/architecture/high-availability/reference-architecture-traffic-manager-application-gateway).
124+
For more information about a multi-region networking architecture for web applications, see [Multi-region load balancing with Traffic Manager, Azure Firewall, and Application Gateway](/azure/architecture/high-availability/reference-architecture-traffic-manager-application-gateway).
116125

117126
## Backups
118127

119-
Azure virtual networks don't store any data that would require backup. However, you can use Bicep, ARM templates, or Terraform to take a snapshot of the configuration of a virtual network in case you need to recreate it. To learn more, see [Quickstart: Create an Azure Virtual Network](../virtual-network/quickstart-create-virtual-network.md).
128+
Azure virtual networks don't store any data that would require backup. However, you can use Bicep, Azure Resource Manager templates, or Terraform to take a snapshot of the configuration of a virtual network if you need to recreate it. To learn more, see [Quickstart: Create an Azure virtual network](../virtual-network/quickstart-create-virtual-network.md).
129+
120130
## Service-level agreement
121131

122-
Due to the nature of the service provided, there isn't a defined SLA for Azure Virtual Network.
132+
Because of the nature of the service provided, there isn't a defined service-level agreement for Virtual Network.
123133

124134
## Related content
125135

126-
[What are availability zones?](/azure/reliability/availability-zones-overview)
136+
[Availability zones](availability-zones-overview.md)
137+

0 commit comments

Comments
 (0)