Skip to content

Commit cd5b5e4

Browse files
authored
Update multi-region-replication.md
1 parent bddaebf commit cd5b5e4

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/key-vault/managed-hsm/multi-region-replication.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Multi-region replication allows you to extend a managed HSM pool from one Azure
1818

1919
:::image type="content" source="../media/multi-region-replication.png" alt-text="Architecture diagram of managed HSM Multi-Region Replication." lightbox="../media/multi-region-replication.png":::
2020

21-
When multi-region replication is enabled on a managed HSM, a second managed HSM pool, with three load-balanced HSM partitions, is created in an extended region. When requests are issued to the Traffic Manager global DNS endpoint `<hsm-name>.managedhsm.azure.net`, the closest available region receives and fulfills the request. While each region individually maintains regional high-availability due to the distribution of HSMs across the region, the traffic manager ensures that even if all partitions of a managed HSM in one region are unavailable due to a catastrophe, requests can still be served by the secondary managed HSM pool.
21+
When multi-region replication is enabled on a managed HSM, a second managed HSM pool, with three load-balanced HSM partitions, is created in an extended region. When requests are issued to the Traffic Manager global DNS endpoint `<hsm-name>.managedhsm.azure.net`, the closest available region receives and fulfills the request. While each region individually maintains regional high-availability due to the distribution of HSMs across the region, the traffic manager ensures that even if all partitions of a managed HSM in one region are unavailable due to a catastrophe, requests can still be served by the managed HSM pool in the extended region.
2222

2323
## Replication latency
2424

@@ -30,8 +30,8 @@ Failover occurs when one of the regions in a multi-region Managed HSM becomes un
3030

3131
| Affected Region | Reads Allowed | Writes Allowed |
3232
|--|--|--|
33-
| Secondary | Yes | Yes |
34-
| Primary | Yes | Maybe |
33+
| Extended Region | Yes | Yes |
34+
| Primary Region | Yes | Maybe |
3535

3636
If an extended region becomes unavailable, read operations (get key, list keys, all crypto operations, list role assignments) are available if the primary region is alive. Write operations (create and update keys, create and update role assignments, create and update role definitions) are also available.
3737

@@ -98,7 +98,7 @@ The [Managed HSM soft-delete feature](soft-delete-overview.md) allows recovery o
9898

9999
## Private link behavior with Multi-region replication
100100

101-
The [Azure Private Link feature](private-link.md) allows you to access the Managed HSM service over a private endpoint in your virtual network. You would configure private endpoint on the Managed HSM in the primary region just as you would when not using the multi-region replication feature. For the Managed HSM in the extended region, it is recommended to create another private endpoint and private DNS zone once the Managed HSM in the primary region is replicated to the Managed HSM in the extended region. This will redirect client requests to the Managed HSM closest to the client location.
101+
The [Azure Private Link feature](private-link.md) allows you to access the Managed HSM service over a private endpoint in your virtual network. You would configure private endpoint on the Managed HSM in the primary region just as you would when not using the multi-region replication feature. For the Managed HSM in an extended region, it is recommended to create another private endpoint and private DNS zone once the Managed HSM in the primary region is replicated to the Managed HSM in an extended region. This will redirect client requests to the Managed HSM closest to the client location.
102102

103103
Some scenarios below with examples: Managed HSM in a primary region (UK South) and another Managed HSM in an extended region (US West Central).
104104

0 commit comments

Comments
 (0)