Skip to content

Commit dbd6143

Browse files
Merge pull request #292323 from ankitaduttaMSFT/eeeasr
EEE 2312 tasks
2 parents e92284d + e430404 commit dbd6143

6 files changed

+38
-24
lines changed

articles/site-recovery/azure-to-azure-architecture.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,19 +3,16 @@ title: Azure to Azure disaster recovery architecture in Azure Site Recovery
33
description: Overview of the architecture used when you set up disaster recovery between Azure regions for Azure VMs, using the Azure Site Recovery service.
44
ms.service: azure-site-recovery
55
ms.topic: concept-article
6-
ms.date: 02/29/2024
6+
ms.date: 12/23/2024
77
ms.author: ankitadutta
88
author: ankitaduttaMSFT
99
---
1010

11-
1211
# Azure to Azure disaster recovery architecture
1312

14-
1513
This article describes the architecture, components, and processes used when you deploy disaster recovery for Azure virtual machines (VMs) using the [Azure Site Recovery](site-recovery-overview.md) service. With disaster recovery setup, Azure VMs continuously replicate to a different target region. If an outage occurs, you can fail over VMs to the secondary region, and access them from there. When everything's running normally again, you can fail back and continue working in the primary location.
1614

1715

18-
1916
## Architectural components
2017

2118
The components involved in disaster recovery for Azure VMs are summarized in the following table.

articles/site-recovery/azure-to-azure-common-questions.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Common questions about Azure virtual machine disaster recovery with Azure
33
description: This article answers common questions about Azure virtual machine disaster recovery when you use Azure Site Recovery.
44
ms.author: ankitadutta
55
author: ankitaduttaMSFT
6-
ms.date: 11/25/2024
6+
ms.date: 12/23/2024
77
ms.topic: faq
88
ms.service: azure-site-recovery
99

@@ -295,6 +295,12 @@ You can start failover. Site Recovery doesn't need connectivity from the primary
295295

296296
Site Recovery has an RTO SLA of [one hours](https://azure.microsoft.com/support/legal/sla/site-recovery/v1_2/). Most of the time, Site Recovery fails over virtual machines within minutes. To calculate the RTO, review the failover job, which shows the time it took to bring up a virtual machine.
297297

298+
### Are the extensions replicated to failover VM in target region?
299+
300+
Extensions aren't replicated to the failover VM in the target region, so we need to install them manually after failover.
301+
302+
**For SQL VM zonal replication:** In the case of a SQL VM, it'll not be shown if we don't have the corresponding IaaS SQL Extension installed. After installing the `SqlIaasExtension`, the `SQL virtual machine` is created automatically. [Learn more](https://learn.microsoft.com/azure/azure-sql/virtual-machines/windows/sql-agent-extension-manually-register-single-vm?view=azuresql&tabs=azure-powershell#register-with-extension).
303+
298304
## Recovery plans
299305

300306
### What's a recovery plan?
@@ -352,6 +358,12 @@ While Site Recovery makes a best effort to ensure that capacity is available in
352358

353359
Yes, you can purchase [reserved Azure virtual machines](https://azure.microsoft.com/pricing/reserved-vm-instances/) in the disaster recovery region, and Site Recovery failover operations use them. No additional configuration is needed.
354360

361+
### Where do we see the VM mapping to the reservation group when we enable capacity reservation for our VMs in ASR on the target region?
362+
363+
When we enable capacity reservation for our VMs in Azure Site Recovery on the target region, the VM maps to the reservation group during replication. Since the target VM is not created until a test failover or actual failover is performed, we see the mapping under *Recovery Services Vault* > **Compute** > **Capacity Reservation** settings.
364+
365+
The VM associated option under the capacity reservation group populates only when the target VMs are created during a test failover or actual failover. [Learn more](https://learn.microsoft.com/azure/virtual-machines/capacity-reservation-overview#capacity-reservation-lifecycle).
366+
355367
## Security
356368

357369
### Is replication data sent to the Site Recovery service?

articles/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.md

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -5,15 +5,12 @@ author: ankitaduttaMSFT
55
ms.author: ankitadutta
66
ms.service: azure-site-recovery
77
ms.topic: how-to
8-
ms.date: 09/03/2024
8+
ms.date: 12/23/2024
99
ms.custom: references_regions, subject-rbac-steps, engagement-fy23
1010
---
1111
# Replicate machines with private endpoints
1212

13-
Azure Site Recovery allows you to use
14-
[Azure Private Link](../private-link/private-endpoint-overview.md) private endpoints for replicating
15-
your machines from inside an isolated virtual network. Private endpoint access to
16-
a recovery vault is supported in all Azure Commercial & Government regions.
13+
Azure Site Recovery allows you to use [Azure Private Link](../private-link/private-endpoint-overview.md) private endpoints for replicating your machines from inside an isolated virtual network. Private endpoint access to a recovery vault is supported in all Azure Commercial & Government regions.
1714

1815
This article provides instructions for you to perform the following steps:
1916

@@ -27,7 +24,7 @@ This article provides instructions for you to perform the following steps:
2724
access for storage as needed. Creation of a private endpoint for accessing storage isn't mandatory
2825
for Azure Site Recovery.
2926

30-
Below is a reference architecture on how the replication workflow changes with private endpoints.
27+
Following is a reference architecture on how the replication workflow changes with private endpoints.
3128

3229
:::image type="content" source="./media/azure-to-azure-how-to-enable-replication-private-endpoints/architecture.png" alt-text="Reference architecture for Site Recovery with private endpoints.":::
3330

@@ -44,7 +41,7 @@ Below is a reference architecture on how the replication workflow changes with p
4441
outbound access from the secured network. You can also use network security group tag "Azure
4542
Active Directory" and Azure Firewall tags for allowing access to Microsoft Entra ID, as
4643
applicable.
47-
- **At least seven IP addresses are required** in the subnets of both your source machines and your
44+
- **At least nine IP addresses are required** in the subnets of both your source machines and your
4845
recovery machines. When you create a private endpoint for the vault, Site Recovery creates five
4946
private links for access to its microservices. Further, when you enable the replication, it adds
5047
two additional private links for the source and target region pairing.

articles/site-recovery/azure-to-azure-how-to-enable-zone-to-zone-disaster-recovery.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,9 @@
22
title: Enable zone-to-zone disaster recovery for Azure virtual machines
33
description: This article describes when and how to use zone-to-zone disaster recovery for Azure virtual machines.
44
author: ankitaduttaMSFT
5-
manager: aravindang
65
ms.service: azure-site-recovery
76
ms.topic: tutorial
8-
ms.date: 10/28/2024
7+
ms.date: 12/23/2024
98
ms.author: ankitadutta
109
ms.custom: references_regions
1110
---
@@ -44,7 +43,7 @@ Learn more about [Azure regions with availability zones](../reliability/availabi
4443
> [!NOTE]
4544
> Zone-to-zone disaster recovery isn't supported for VMs that have managed disks via zone-redundant storage (ZRS).
4645
>
47-
>Regions that don't support Azure availability zones also don't support Azure Site Recovery zone-to-zone replication. For Azure Site Recovery zone-to-zone replication to work, the region must support availability zones.
46+
> Regions that don't support Azure availability zones also don't support Azure Site Recovery zone-to-zone replication. For Azure Site Recovery zone-to-zone replication to work, the region must support availability zones.
4847
4948
## Using availability zones for disaster recovery
5049

@@ -119,7 +118,7 @@ Pricing for zone-to-zone disaster recovery is identical to the pricing for Azure
119118
The egress charges in zone-to-zone disaster recovery are lower than the egress charges in region-to-region disaster recovery. For information about data transfer charges between availability zones, see the [bandwidth pricing page](https://azure.microsoft.com/pricing/details/bandwidth/).
120119

121120
**What is the SLA for RTO and RPO?**
122-
The service-level agreement (SLA) for recovery time objective (RTO) is the same as the SLA for Site Recovery overall. We promise an RTO of up to two hours. There's no defined SLA for RPO.
121+
The service-level agreement (SLA) for recovery time objective (RTO) is the same as the SLA for Site Recovery overall. We promise an RTO of up to one hour. There's no defined SLA for RPO.
123122

124123
**Is capacity guaranteed in the secondary zone?**
125124
The Site Recovery team and the Azure capacity management team plan for sufficient infrastructure capacity. When you start a failover, the teams also help ensure that VM instances protected by Site Recovery deploy to the target zone. For more FAQs on capacity, check the [common questions about Azure-to-Azure disaster recovery](./azure-to-azure-common-questions.md#capacity).

articles/site-recovery/azure-to-azure-how-to-reprotect.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -104,11 +104,7 @@ Let's take the example from the following screenshot, where Enable Replication f
104104

105105
:::image type="content" source="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png" alt-text="Screenshot displays example duration of reprotection of a virtual machine on the Azure portal." lightbox="./media/site-recovery-how-to-reprotect-azure-to-azure/estimated-reprotection.png":::
106106

107-
The above is a simple illustration of how to estimate the reprotection time.
108-
109-
When the virtual machine is re-protected from disaster recovery region to primary region (that is, after failing over from the primary region to disaster recovery region), the target virtual machine (original source virtual machine), and associated NIC(s) are deleted.
110-
111-
However, when the virtual machine is re-protected again from the primary region to disaster recovery region after failback, we do not delete the virtual machine and associated NIC(s) in the disaster recovery region that were created during the earlier failover.
107+
The above is a simple illustration of how to estimate the reprotection time. When customer failover to target region and reprotect, the source virtual machine and associated resources are **not deleted**. When customer *failback* to primary region and reprotect, the VM (in the target / disaster recovery region) and associated resources are then deleted.
112108

113109
## Next steps
114110

articles/site-recovery/vmware-azure-common-questions.md

Lines changed: 16 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -210,16 +210,29 @@ Site Recovery generates crash-consistent recovery points every 5 minutes.
210210

211211
### Can I change an already replicating machine from one to another Recovery Services vault?
212212

213-
Switching Recovery Services vaults, when the replication is already ongoing, isn't supported. To do so, replication needs to be disabled and enabled again. Additionally, the mobility service agent, installed on the source machine, will need to be unconfigured so that it can be configured to a new vault. Use the below commands to perform the unregistration -
213+
Switching Recovery Services vaults, when the replication is already ongoing, isn't supported. To do so, replication needs to be disabled and enabled again. Additionally, the mobility service agent, installed on the source machine, must be un-configured so that it can be configured to a new vault. Use the following commands to perform the unregistration:
214214

215-
For Windows machines -
215+
*For Windows machines:*
216216

217217
`C:\Program Files (x86)\Microsoft Azure Site Recovery\agent\UnifiedAgentConfigurator.exe /Unconfigure true`
218218

219-
For Linux machines -
219+
*For Linux machines:*
220220

221221
`/usr/local/ASR/Vx/bin/UnifiedAgentConfigurator.sh -q -U true -c CSPrime`
222222

223+
### Can I change an already replicating machine from one region to another region?
224+
225+
Switching region, when the replication is already ongoing isn't supported. To do so, replication needs to be disabled and enabled again. Additionally, to avoid reboot there is no need to uninstall the mobility agent, mobility agent installed on the source machine, must be un-configured using the commands mentioned. Use the following commands to perform the unregistration:
226+
227+
*For Windows machines:*
228+
229+
`C:\Program Files (x86)\Microsoft Azure Site Recovery\agent\UnifiedAgentConfigurator.exe /Unconfigure true`
230+
231+
*For Linux machines:*
232+
233+
`/usr/local/ASR/Vx/bin/UnifiedAgentConfigurator.sh -q -U true -c CSPrime`
234+
235+
223236
## Component upgrade
224237

225238
### My version of the Mobility services agent or configuration server is old, and my upgrade failed. What do I do?

0 commit comments

Comments
 (0)