|
2 | 2 | title: Azure Backup support matrix
|
3 | 3 | description: Provides a summary of support settings and limitations for the Azure Backup service.
|
4 | 4 | ms.topic: conceptual
|
5 |
| -ms.date: 08/16/2022 |
| 5 | +ms.date: 10/14/2022 |
6 | 6 | ms.custom: references_regions
|
| 7 | +author: v-amallick |
| 8 | +ms.service: backup |
| 9 | +ms.author: v-amallick |
7 | 10 | ---
|
8 | 11 |
|
9 | 12 | # Support matrix for Azure Backup
|
@@ -34,7 +37,6 @@ The following table describes the features of Recovery Services vaults:
|
34 | 37 | **Move vaults** | You can [move vaults](./backup-azure-move-recovery-services-vault.md) across subscriptions or between resource groups in the same subscription. However, moving vaults across regions isn't supported.
|
35 | 38 | **Move data between vaults** | Moving backed-up data between vaults isn't supported.
|
36 | 39 | **Modify vault storage type** | You can modify the storage replication type (either geo-redundant storage or locally redundant storage) for a vault before backups are stored. After backups begin in the vault, the replication type can't be modified.
|
37 |
| -**Zone-redundant storage (ZRS)** | Supported in preview in UK South, South East Asia, Australia East, North Europe, Central US, East US 2, Brazil South, South Central US, Korea Central, Norway East, France Central, West Europe, East Asia, Sweden Central, Canada Central, India Central, South Africa North, West US 2, Japan East, East US, US Gov Virginia and West US 3. |
38 | 40 | **Private Endpoints** | See [this section](./private-endpoints.md#before-you-start) for requirements to create private endpoints for a recovery service vault.
|
39 | 41 |
|
40 | 42 | ## On-premises backup support
|
@@ -100,13 +102,13 @@ Azure Backup supports encryption for in-transit and at-rest data.
|
100 | 102 |
|
101 | 103 | ### Network traffic to Azure
|
102 | 104 |
|
103 |
| -- Backup traffic from servers to the Recovery Services vault is encrypted by using Advanced Encryption Standard 256. |
| 105 | +- The backup traffic from servers to the Recovery Services vault is encrypted by using Advanced Encryption Standard 256. |
104 | 106 | - Backup data is sent over a secure HTTPS link.
|
105 | 107 |
|
106 | 108 | ### Data security
|
107 | 109 |
|
108 | 110 | - Backup data is stored in the Recovery Services vault in encrypted form.
|
109 |
| -- When data is backed up from on-premises servers with the MARS agent, data is encrypted with a passphrase before upload to Azure Backup and decrypted only after it's downloaded from Azure Backup. |
| 111 | +- When data is backed-up from on-premises servers with the MARS agent, data is encrypted with a passphrase before upload to the Azure Backup service and decrypted only after it's downloaded from Azure Backup. |
110 | 112 | - When you're backing up Azure VMs, you need to set up encryption *within* the virtual machine.
|
111 | 113 | - Azure Backup supports Azure Disk Encryption, which uses BitLocker on Windows virtual machines and **dm-crypt** on Linux virtual machines.
|
112 | 114 | - On the back end, Azure Backup uses [Azure Storage Service Encryption](../storage/common/storage-service-encryption.md), which protects data at rest.
|
@@ -164,6 +166,39 @@ The resource health check functions in following conditions:
|
164 | 166 | | **Supported Regions** | East US, East US 2, Central US, South Central US, North Central US, West Central US, West US, West US 2, West US 3, Canada East, Canada Central, North Europe, West Europe, UK West, UK South, France Central, France South, Sweden Central, Sweden South, East Asia, South East Asia, Japan East, Japan West, Korea Central, Korea South, Australia East, Australia Central, Australia Central 2, Australia South East, South Africa North, South Africa West, UAE North, UAE Central, Brazil South East, Brazil South, Switzerland North, Switzerland West, Norway East, Norway West, Germany North, Germany West Central, West India, Central India, South India, Jio India West, Jio India Central. |
|
165 | 167 | | **For unsupported regions** | The resource health status is shown as "Unknown". |
|
166 | 168 |
|
| 169 | +## Zone-redundant storage support |
| 170 | + |
| 171 | +Azure Backup now supports zone-redundant storage (ZRS). |
| 172 | + |
| 173 | +### Supported regions |
| 174 | + |
| 175 | +- Azure Backup currently supports ZRS for all workloads, except Azure Disk, in the following regions: UK South, South East Asia, Australia East, North Europe, Central US, East US 2, Brazil South, South Central US, Korea Central, Norway East, France Central, West Europe, East Asia, Sweden Central, Canada Central, India Central, South Africa North, West US 2, Japan East, East US, US Gov Virginia, Switzerland North, Qatar, UAE North, and West US 3. |
| 176 | + |
| 177 | +- ZRS support for Azure Disk is generally available in the following regions: UK South, Southeast Asia, Australia East, North Europe, Central US, South Central US, West Europe, West US 2, Japan East, East US, US Gov Virginia, Qatar, and West US 3. |
| 178 | + |
| 179 | +### Supported scenarios |
| 180 | + |
| 181 | +Here's the list of scenarios supported even if zone gets unavailable in the supported regions: |
| 182 | + |
| 183 | +- Create/List/Update Policy |
| 184 | +- List backup jobs |
| 185 | +- List of protected items |
| 186 | +- Update vault config |
| 187 | +- Create vault |
| 188 | +- Get vault credential file |
| 189 | + |
| 190 | +### Supported operations |
| 191 | + |
| 192 | +The following table lists the workload specific operations supported even if zone gets unavailable in the supported regions: |
| 193 | + |
| 194 | +| Protected workload | Supported Operations | |
| 195 | +| --- | --- | |
| 196 | +| **IAAS VM** | - Backups are successful, if the protected VM is in an active zone. <br><br> - Original location recovery (OLR) is successful, if the protected VM is in an active zone. <br><br> - Alternate location restores (ALR) to an active zone is successful. | |
| 197 | +| **SQL/ SAP HANA database in Azure VM** | - Backups are successful, if the protected workload is in an active zone. <br><br> - Original location recovery (OLR) is successful, if the protected workload is in an active zone. <br><br> - Alternate location restores (ALR) to an active zone is successful. | |
| 198 | +| **Azure Files** | Backups, OLR, and ALR are successful, if the protected file share is in a ZRS account. | |
| 199 | +| **Blob** | Recovery is successful, if the protected storage account is in ZRS. | |
| 200 | +| **Disk** | - Backups are successful, if the protected disk is in an active zone. <br><br> - Restore to an active zone is successful. | |
| 201 | +| **MARS** | Backups and restores are successful. | |
167 | 202 |
|
168 | 203 | ## Next steps
|
169 | 204 |
|
|
0 commit comments