Skip to content

Commit d641028

Browse files
author
Ankita Dutta
committed
PBI 263
1 parent 7aa1a85 commit d641028

File tree

1 file changed

+35
-35
lines changed

1 file changed

+35
-35
lines changed
Lines changed: 35 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -1,29 +1,29 @@
11
---
2-
title: Reprotect Azure VMs to the primary region with Azure Site Recovery
3-
description: Describes how to reprotect Azure VMs after failover, the secondary to primary region, using Azure Site Recovery.
2+
title: Reprotect Azure virtual machines to the primary region with Azure Site Recovery
3+
description: Describes how to reprotect Azure virtual machines after failover, the secondary to primary region, using Azure Site Recovery.
44
services: site-recovery
55
author: ankitaduttaMSFT
66
ms.service: site-recovery
77
ms.topic: tutorial
8-
ms.date: 02/27/2024
8+
ms.date: 04/08/2024
99
ms.author: ankitadutta
1010
---
1111

12-
# Reprotect failed over Azure VMs to the primary region
12+
# Reprotect failed over Azure virtual machines to the primary region
1313

14-
When you [fail over](site-recovery-failover.md) Azure VMs from one region to another using [Azure Site Recovery](site-recovery-overview.md), the VMs boot up in the secondary region, in an **unprotected** state. If you want to fail back the VMs to the primary region, do the following tasks:
14+
When you [fail over](site-recovery-failover.md) Azure virtual machines from one region to another using [Azure Site Recovery](site-recovery-overview.md), the virtual machines boot up in the secondary region, in an **unprotected** state. If you want to fail back the virtual machines to the primary region, do the following tasks:
1515

16-
1. Reprotect the VMs in the secondary region, so that they start to replicate to the primary region.
17-
1. After reprotection completes and the VMs are replicating, you can fail over from the secondary to primary region.
16+
1. Reprotect the virtual machines in the secondary region, so that they start to replicate to the primary region.
17+
1. After reprotection completes and the virtual machines are replicating, you can fail over from the secondary to primary region.
1818

1919
## Prerequisites
2020

21-
- The VM failover from the primary to secondary region must be committed.
21+
- The virtual machine failover from the primary to secondary region must be committed.
2222
- The primary target site should be available, and you should be able to access or create resources in that region.
2323

24-
## Reprotect a VM
24+
## Reprotect a virtual machine
2525

26-
1. In **Vault** > **Replicated items**, right-click the failed over VM, and select **Re-Protect**. The reprotection direction should show from secondary to primary.
26+
1. In **Vault** > **Replicated items**, right-click the failed over virtual machine, and select **Re-Protect**. The reprotection direction should show from secondary to primary.
2727

2828
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/reprotect.png" alt-text="Screenshot shows a virtual machine with a contextual menu with Re-protect selected." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/reprotect.png":::
2929

@@ -34,42 +34,42 @@ When you [fail over](site-recovery-failover.md) Azure VMs from one region to ano
3434

3535
### Customize reprotect settings
3636

37-
You can customize the following properties of the target VM during reprotection.
37+
You can customize the following properties of the target virtual machine during reprotection.
3838

3939
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/customizeblade.png" alt-text="Screenshot displays Customize on the Azure portal." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/customizeblade.png":::
4040

4141
|Property |Notes |
4242
|---------|---------|
43-
|Target resource group | Modify the target resource group in which the VM is created. As the part of reprotection, the target VM is deleted. You can choose a new resource group under which to create the VM after failover. |
43+
|Target resource group | Modify the target resource group in which the virtual machine is created. As the part of reprotection, the target virtual machine is deleted. When you reprotect a failed over virtual machine to the source virtual machine, the target resource group can't be changed. |
4444
|Target virtual network | The target network can't be changed during the reprotect job. To change the network, redo the network mapping. |
45-
|Capacity reservation | Configure a capacity reservation for the VM. You can create a new capacity reservation group to reserve capacity or select an existing capacity reservation group. [Learn more](azure-to-azure-how-to-enable-replication.md#enable-replication) about capacity reservation. |
46-
|Target storage (Secondary VM doesn't use managed disks) | You can change the storage account that the VM uses after failover. |
47-
|Replica managed disks (Secondary VM uses managed disks) | Site Recovery creates replica managed disks in the primary region to mirror the secondary VM's managed disks. |
48-
|Cache storage | You can specify a cache storage account to be used during replication. By default, a new cache storage account is created, if it doesn't exist. </br>By default, type of storage account (Standard storage account or Premium Block Blob storage account) that you have selected for the source VM in original primary location is used. For example, during replication from original source to target, if you have selected *High Churn*, during re-protection back from target to original source, Premium Block blob will be used by default. You can configure and change it for re-protection. For more information, see [Azure VM Disaster Recovery - High Churn Support](./concepts-azure-to-azure-high-churn-support.md).|
49-
|Availability set | If the VM in the secondary region is part of an availability set, you can choose an availability set for the target VM in the primary region. By default, Site Recovery tries to find the existing availability set in the primary region, and use it. During customization, you can specify a new availability set. |
45+
|Capacity reservation | Configure a capacity reservation for the virtual machine. You can create a new capacity reservation group to reserve capacity or select an existing capacity reservation group. [Learn more](azure-to-azure-how-to-enable-replication.md#enable-replication) about capacity reservation. |
46+
|Target storage (Secondary virtual machine doesn't use managed disks) | You can change the storage account that the virtual machine uses after failover. |
47+
|Replica managed disks (Secondary virtual machine uses managed disks) | Site Recovery creates replica managed disks in the primary region to mirror the secondary virtual machine's managed disks. |
48+
|Cache storage | You can specify a cache storage account to be used during replication. By default, a new cache storage account is created, if it doesn't exist. </br>By default, type of storage account (Standard storage account or Premium Block Blob storage account) that you have selected for the source virtual machine in original primary location is used. For example, during replication from original source to target, if you have selected *High Churn*, during re-protection back from target to original source, Premium Block blob will be used by default. You can configure and change it for re-protection. For more information, see [Azure virtual machine Disaster Recovery - High Churn Support](./concepts-azure-to-azure-high-churn-support.md).|
49+
|Availability set | If the virtual machine in the secondary region is part of an availability set, you can choose an availability set for the target virtual machine in the primary region. By default, Site Recovery tries to find the existing availability set in the primary region, and use it. During customization, you can specify a new availability set. |
5050

5151
### What happens during reprotection?
5252

5353
By default, the following occurs:
5454

55-
1. A cache storage account is created in the region where the failed over VM is running.
56-
1. If the target storage account (the original storage account in the primary region) doesn't exist, a new one is created. The assigned storage account name is the name of the storage account used by the secondary VM, suffixed with `asr`.
57-
1. If your VM uses managed disks, replica managed disks are created in the primary region to store the data replicated from the secondary VM's disks.
58-
1. Temporary replicas of the source disks (disks attached to the VMs in secondary region) are created with the name `ms-asr-<GUID>`, that are used to transfer / read data. The temp disks let us utilize the complete bandwidth of the disk instead of only 16% bandwidth of the original disks (that are connected to the VM). The temp disks are deleted once the reprotection completes.
55+
1. A cache storage account is created in the region where the failed over virtual machine is running.
56+
1. If the target storage account (the original storage account in the primary region) doesn't exist, a new one is created. The assigned storage account name is the name of the storage account used by the secondary virtual machine, suffixed with `asr`.
57+
1. If your virtual machine uses managed disks, replica managed disks are created in the primary region to store the data replicated from the secondary virtual machine's disks.
58+
1. Temporary replicas of the source disks (disks attached to the virtual machines in secondary region) are created with the name `ms-asr-<GUID>`, that are used to transfer / read data. The temp disks let us utilize the complete bandwidth of the disk instead of only 16% bandwidth of the original disks (that are connected to the virtual machine). The temp disks are deleted once the reprotection completes.
5959
1. If the target availability set doesn't exist, a new one is created as part of the reprotect job if necessary. If you've customized the reprotection settings, then the selected set is used.
6060

61-
**When you trigger a reprotect job, and the target VM exists, the following occurs:**
61+
**When you trigger a reprotect job, and the target virtual machine exists, the following occurs:**
6262

63-
1. The target side VM is turned off if it's running.
64-
1. If the VM is using managed disks, a copy of the original disk is created with an `-ASRReplica` suffix. The original disks are deleted. The `-ASRReplica` copies are used for replication.
65-
1. If the VM is using unmanaged disks, the target VM's data disks are detached and used for replication. A copy of the OS disk is created and attached on the VM. The original OS disk is detached and used for replication.
63+
1. The target side virtual machine is turned off if it's running.
64+
1. If the virtual machine is using managed disks, a copy of the original disk is created with an `-ASRReplica` suffix. The original disks are deleted. The `-ASRReplica` copies are used for replication.
65+
1. If the virtual machine is using unmanaged disks, the target virtual machine's data disks are detached and used for replication. A copy of the OS disk is created and attached on the virtual machine. The original OS disk is detached and used for replication.
6666
1. Only changes between the source disk and the target disk are synchronized. The differentials are computed by comparing both the disks and then transferred. Check below to find the estimated time to complete the reprotection.
6767
1. After the synchronization completes, the delta replication begins, and a recovery point is created in line with the replication policy.
6868

69-
**When you trigger a reprotect job, and the target VM and disks don't exist, the following occurs:**
69+
**When you trigger a reprotect job, and the target virtual machine and disks don't exist, the following occurs:**
7070

71-
1. If the VM is using managed disks, replica disks are created with `-ASRReplica` suffix. The `-ASRReplica` copies are used for replication.
72-
1. If the VM is using unmanaged disks, replica disks are created in the target storage account.
71+
1. If the virtual machine is using managed disks, replica disks are created with `-ASRReplica` suffix. The `-ASRReplica` copies are used for replication.
72+
1. If the virtual machine is using unmanaged disks, replica disks are created in the target storage account.
7373
1. The entire disks are copied from the failed over region to the new target region.
7474
1. After the synchronization completes, the delta replication begins, and a recovery point is created in line with the replication policy.
7575

@@ -82,15 +82,15 @@ By default, the following occurs:
8282
In most cases, Azure Site Recovery doesn't replicate the complete data to the source region. The amount of data replicated depends on the following conditions:
8383

8484
1. Azure Site Recovery doesn't support reprotection if the source virtual machine's data is deleted, corrupted, or inaccessible for some reason. For example, a resource group change or deletion. Alternatively, you can disable the previous disaster recovery protection and enable a new protection from the current region.
85-
2. If the source VM data is accessible, then differentials are computed by comparing both the disks and only the differences are transferred.
85+
2. If the source virtual machine data is accessible, then differentials are computed by comparing both the disks and only the differences are transferred.
8686
In this case, the **reprotection time** is greater than or equal to the `checksum calculation time + checksum differentials transfer time + time taken to process the recovery points from Azure Site Recovery agent + auto scale time`.
8787

8888
**Factors governing reprotection time in scenario 2**
8989

90-
The following factors affect the reprotection time when the source VM is accessible in scenario 2:
90+
The following factors affect the reprotection time when the source virtual machine is accessible in scenario 2:
9191

9292
1. **Checksum calculation time** - The time taken to complete the enable replication process from the primary to the disaster recovery location is used as a benchmark for the checksum differential calculation. Navigate to **Recovery Services vaults** > **Monitoring** > **Site Recovery jobs** to see the time taken to complete the enable replication process. This will be the minimum time required to complete the checksum calculation.
93-
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png" alt-text="Screenshot displays duration of reprotection of a VM on the Azure portal." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png":::
93+
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png" alt-text="Screenshot displays duration of reprotection of a virtual machine on the Azure portal." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png":::
9494

9595
1. **Checksum differential data transfer** happens at approximately 23% of disk throughput.
9696
1. **The time taken to process the recovery points sent from Azure Site Recovery agent** – Azure Site Recovery agent continues to send recovery points during the checksum calculation and transfer phase, as well. However, Azure Site Recovery processes them only once the checksum diff transfer is complete.
@@ -102,16 +102,16 @@ The following factors affect the reprotection time when the source VM is accessi
102102

103103
Let's take the example from the following screenshot, where Enable Replication from the primary to the disaster recovery location took an hour and 12 minutes. The Checksum calculation time would be at least an hour and 12 minutes. Assuming that the amount of data change post failover is 45 GB, and the disk has a throughput of 60 Mbps, the differential transfer will occur at 14 Mbps, and the time taken for differential transfer will be 45 GB / 14 Mbps, that is approximately 55 minutes. The time taken to process the recovery points is approximately one-fifth of the total time taken for the checksum calculation (72 minutes) and time taken for data transfer (55minutes), which is approximately 25 minutes. Additionally, it takes 20-30 minutes for auto-scaling. So, the total time for reprotection should be at least three hours.
104104

105-
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png" alt-text="Screenshot displays example duration of reprotection of a VM on the Azure portal." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png":::
105+
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png" alt-text="Screenshot displays example duration of reprotection of a virtual machine on the Azure portal." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png":::
106106

107107
The above is a simple illustration of how to estimate the reprotection time.
108108

109-
When the VM is re-protected from disaster recovery region to primary region (that is, after failing over from the primary region to disaster recovery region), the target VM (original source VM), and associated NIC(s) are deleted.
109+
When the virtual machine is re-protected from disaster recovery region to primary region (that is, after failing over from the primary region to disaster recovery region), the target virtual machine (original source virtual machine), and associated NIC(s) are deleted.
110110

111-
However, when the VM is re-protected again from the primary region to disaster recovery region after failback, we do not delete the VM and associated NIC(s) in the disaster recovery region that were created during the earlier failover.
111+
However, when the virtual machine is re-protected again from the primary region to disaster recovery region after failback, we do not delete the virtual machine and associated NIC(s) in the disaster recovery region that were created during the earlier failover.
112112

113113
## Next steps
114114

115-
After the VM is protected, you can initiate a failover. The failover shuts down the VM in the secondary region and creates and boots the VM in the primary region, with brief downtime during this process. We recommend you choose an appropriate time for this process and that you run a test failover before initiating a full failover to the primary site.
115+
After the virtual machine is protected, you can initiate a failover. The failover shuts down the virtual machine in the secondary region and creates and boots the virtual machine in the primary region, with brief downtime during this process. We recommend you choose an appropriate time for this process and that you run a test failover before initiating a full failover to the primary site.
116116

117117
[Learn more](site-recovery-failover.md) about Azure Site Recovery failover.

0 commit comments

Comments
 (0)