You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/reliability/reliability-container-registry.md
+15-15Lines changed: 15 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ ms.date: 07/23/2025
14
14
15
15
This article describes reliability support in Azure Container Registry, covering intra-regional resiliency via [availability zones](#availability-zone-support) and cross-region resiliency via [geo-replication](#multi-region-support).
16
16
17
-
Container Registry is a managed container registry service used to store and manage your private Docker container images and related artifacts for your container deployments. For more information, see [What is Container Registry?](/azure/container-registry/container-registry-intro)
17
+
Container Registry is a managed container registry service used to store and manage your private Docker container images and related artifacts for your container deployments. For more information, see [Introduction to Container Registry](/azure/container-registry/container-registry-intro).
@@ -30,7 +30,7 @@ For production workloads, we recommend that you take the following actions:
30
30
31
31
## Reliability architecture overview
32
32
33
-
Container Registry is built on Azure's distributed infrastructure to provide high availability and data durability. The service consists of several key components that work together to ensure reliability. The following diagram illustrates the core service architecture.
33
+
Container Registry is built on distributed Azure infrastructure to provide high availability and data durability. The service consists of several key components that work together to ensure reliability. The following diagram illustrates the core service architecture.
34
34
35
35
<!-- :::image type="content" source="./media/reliability-acr/acr-service-architecture.png" alt-text="Diagram that shows Container Registry service architecture with client access, control plane, data plane, and storage layer components." lightbox="./media/reliability-acr/acr-service-architecture.png" border="false":::-->
36
36
@@ -54,7 +54,7 @@ As a customer, you're responsible for the following scenarios:
54
54
55
55
-*Geo-replication configuration:* Choose appropriate regions for geo-replication based on your geographic distribution, compliance, and performance requirements.
56
56
57
-
Container Registry also supports *tasks*, which can help you automate your container builds and maintenance operations. Tasks run on compute infrastructure that Microsoft manages and can be triggered to run manually based on events or based on a schedule. For more information, see [Automate container image builds and maintenance by using Container Registry tasks](/azure/container-registry/container-registry-tasks-overview).
57
+
Container Registry also supports *tasks*, which can help you automate your container builds and maintenance operations. Tasks run on Microsoft-managed compute infrastructure and support manual, event-based, or scheduled triggers. For more information, see [Automate container image builds and maintenance by using Container Registry tasks](/azure/container-registry/container-registry-tasks-overview).
58
58
59
59
> [!NOTE]
60
60
> Container Registry supports [connected registries](/azure/container-registry/intro-connected-registry), which are on-premises or remote replicas that synchronize with your cloud-based Container Registry. When you use connected registries, you're responsible for configuring them to meet your reliability requirements. Connected registries are out of scope for this article.
@@ -95,15 +95,15 @@ Zone redundancy is included with Premium tier registries at no extra cost. The P
95
95
96
96
### Configure availability zone support
97
97
98
-
-**Create a zone-redundant registry.**To create a new zone-redundant registry, see [Create a zone-redundant registry in Container Registry](/azure/container-registry/zone-redundancy).
98
+
-**Create a zone-redundant registry.**For more information, see [Create a zone-redundant registry in Container Registry](/azure/container-registry/zone-redundancy).
99
99
100
100
-**Enable zone redundancy on an existing registry.** You can only configure zone redundancy when a registry is created. To get zone redundancy, you must create a new Premium registry in a supported region and migrate your container images.
101
101
102
-
Existing Basic or Standard tier registries can be upgraded to Premium tier. However, only upgrading the tiers doesn't enable zone redundancy for existing registries, and you need to create a new registry.
102
+
Existing Basic or Standard tier registries can be upgraded to the Premium tier. However, only upgrading the tiers doesn't enable zone redundancy for existing registries. You need to create a new registry.
103
103
104
104
To migrate your artifacts between registries, you can [create a transfer pipeline](/azure/container-registry/container-registry-transfer-prerequisites). Alternatively, you can [import container images to a container registry](/azure/container-registry/container-registry-import-images).
105
105
106
-
If your registry uses [geo-replication](#multi-region-support) and zone redundancy together, you configure zone redundancy on each regional replica. For more information, see [Create a zone-redundant replica in Container Registry](/azure/container-registry/zone-redundancy-replica). You can only change the zone redundancy setting after a geo-replication is created by deleting and re-creating the replication.
106
+
If your registry uses [geo-replication](#multi-region-support) and zone redundancy together, you configure zone redundancy on each regional replica. For more information, see [Create a zone-redundant replica in Container Registry](/azure/container-registry/zone-redundancy-replica). You can only change the zone redundancy setting after a geo-replication is created by deleting and recreating the replication.
107
107
108
108
-**Disable zone redundancy.** Zone redundancy can't be disabled after it's enabled for a registry. If you need a non-zone-redundant registry, you must create a new registry and migrate your container images.
109
109
@@ -131,7 +131,7 @@ When a zone becomes unavailable, Container Registry automatically handles the fa
131
131
132
132
-**Active requests:** When an availability zone is unavailable, any requests in progress that are connected to resources in the faulty availability zone are terminated. They need to be retried.
133
133
134
-
-**Expected data loss:** Any recent writes that were made in the faulty zone might not have been replicated to other regions, which means that they might be lost until the zone recovers. The data loss is typically expected to be less than 15 minutes, but that's not guaranteed.
134
+
-**Expected data loss:** Any recent writes made in the faulty zone might not be replicated to other regions, which means that they might be lost until the zone recovers. The data loss is typically expected to be less than 15 minutes, but that's not guaranteed.
135
135
136
136
-**Expected downtime:** A small amount of downtime might occur during automatic failover as traffic is redirected to healthy zones. This downtime is typically a few seconds for most registry operations. We recommend that you follow [transient fault handling best practices](#transient-faults) to minimize the effect of zone failover on your applications.
137
137
@@ -151,11 +151,11 @@ Container Registry provides native multi-region support through geo-replication
151
151
152
152
Geo-replication enables resiliency to regional outages. If your registry is geo-replicated and a regional outage occurs, the registry data continues to be available from the other regions that you selected. If you don't enable geo-replication, then your data might become unavailable during a region outage.
153
153
154
-
You can also use geo-replication if you want local access to container images within those regions and to reduce latency for globally distributed applications.
154
+
You can also use geo-replication to get local access to container images within those regions and to reduce latency for globally distributed applications.
155
155
156
156
When you deploy Container Registry and enable geo-replication, Microsoft uses Azure Traffic Manager to distribute data plane requests between your replicas and to automatically fail over between replicas if a regional replica is unavailable.
157
157
158
-
Container Registry geo-replication doesn't rely on Azure paired regions. You have flexibility to select any combination of Azure regions for replication based on your specific geographic, performance, and compliance requirements. Each geo-replicated registry functions as a registry endpoint. It supports most registry operations, including image pushes, pulls, and management tasks.
158
+
Container Registry geo-replication doesn't rely on Azure paired regions. You can select any combination of Azure regions for replication based on your specific geographic, performance, and compliance requirements. Each geo-replicated registry functions as a registry endpoint. It supports most registry operations, including image pushes, pulls, and management tasks.
159
159
160
160
This section summarizes information about geo-replication as it relates to reliability. For more information, see [Geo-replication in Container Registry](/azure/container-registry/container-registry-geo-replication).
161
161
@@ -169,7 +169,7 @@ You must use the Premium tier to enable geo-replication.
169
169
170
170
### Considerations
171
171
172
-
-**Zoneredundant replicas:** When you use geo-replication in regions that support availability zones, you can configure zone redundancy on each replica independently.
172
+
-**Zone-redundant replicas:** When you use geo-replication in regions that support availability zones, you can configure zone redundancy on each replica independently.
173
173
174
174
-**Control plane:** The control plane runs in the home region. If the home region is unavailable, control plane operations are unavailable, and you might not be able to modify the registry's configuration.
175
175
@@ -181,13 +181,13 @@ Each geo-replicated region is billed separately according to Premium tier pricin
181
181
182
182
### Configure multi-region support
183
183
184
-
Geo-replication can be configured during registry creation or added to existing Premium registries. Geo-replication can be configured through the Azure portal, Azure CLI, Azure PowerShell, or Azure Resource Manager templates.
184
+
Geo-replication can be configured during registry creation or added to existing Premium registries. Geo-replication can be configured through the Azure portal, the Azure CLI, Azure PowerShell, or Azure Resource Manager templates.
185
185
186
186
-**Create a geo-replicated registry.** Configure geo-replication after registry creation by specifying extra regions.
187
187
188
-
-**Enable geo-replication on an existing registry.** To enable geo-replication capabilities, upgrade existing Basic or Standard tier registries to Premium tier. You can change the replication regions at any time. For more information, see [Configure geo-replication](/azure/container-registry/container-registry-geo-replication#configure-geo-replication).
188
+
-**Enable geo-replication on an existing registry.** To enable geo-replication capabilities, upgrade existing Basic or Standard tier registries to the Premium tier. You can change the replication regions at any time. For more information, see [Configure geo-replication](/azure/container-registry/container-registry-geo-replication#configure-geo-replication).
189
189
190
-
You can configure zone redundancy on each regional replica. For more information, see [Create a zone-redundant replica in Container Registry](/azure/container-registry/zone-redundancy-replica). You can only change the zone redundancy setting after a geo-replication is created by deleting and re-creating the replication.
190
+
You can configure zone redundancy on each regional replica. For more information, see [Create a zone-redundant replica in Container Registry](/azure/container-registry/zone-redundancy-replica). You can only change the zone redundancy setting after a geo-replication is created by deleting and recreating the replication.
191
191
192
192
-**Disable geo-replication.** Remove individual regional replicas through the Azure portal or command-line tools. The home region registry can't be removed.
193
193
@@ -220,7 +220,7 @@ When a region becomes unavailable, container operations can continue to use alte
220
220
221
221
-**Active requests:** Any active requests currently in flight to an unavailable region will fail and must be retried so that they can be directed to a healthy region.
222
222
223
-
-**Expected data loss:** Any recent writes that were made in the faulty region might not have been replicated to other regions. This failure means that they might be lost until the region recovers. Typically, the data loss is expected to be less than 15 minutes, but that's not guaranteed.
223
+
-**Expected data loss:** Any recent writes made in the faulty region might not be replicated to other regions. This failure means that they might be lost until the region recovers. Typically, the data loss is expected to be less than 15 minutes, but that's not guaranteed.
224
224
225
225
-**Expected downtime:** For data plane operations, a small amount of downtime is expected for data plane operations while failover completes, which typically takes 1 to 2 minutes.
226
226
@@ -230,7 +230,7 @@ When a region becomes unavailable, container operations can continue to use alte
230
230
231
231
### Failback
232
232
233
-
When a region recovers, data plane operations automatically resume for that regional endpoint through Traffic Manager routing. The service synchronizes any changes that occurred during the outage by using asynchronous replication with eventual consistency.
233
+
When a region recovers, data plane operations automatically resume for that regional endpoint through Traffic Manager routing. The service synchronizes any changes that occur during the outage by using asynchronous replication with eventual consistency.
0 commit comments