You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/common/storage-disaster-recovery-guidance.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,21 +23,21 @@ Microsoft strives to ensure that Azure services are always available. However, u
23
23
-[Failover](#plan-for-storage-account-failover)
24
24
-[Designing applications for high availability](#design-for-high-availability)
25
25
26
-
This article focuses on failover for globally-redundant storage accounts (GRS, GZRS, and RA-GZRS), and how to design your applications to be highly available if there's an outage and subsequent failover.
26
+
This article focuses on failover for globallyredundant storage accounts (GRS, GZRS, and RA-GZRS), and how to design your applications to be highly available if there's an outage and subsequent failover.
27
27
28
28
## Choose the right redundancy option
29
29
30
30
Azure Storage maintains multiple copies of your storage account to ensure durability and high availability. Which redundancy option you choose for your account depends on the degree of resiliency you need for your applications.
31
31
32
-
With locally-redundant storage (LRS), three copies of your storage account are automatically stored and replicated within a single datacenter. With zone-redundant storage (ZRS), a copy is stored and replicated in each of three separate availability zones within the same region. For more information about availability zones, see [Azure availability zones](../../availability-zones/az-overview.md).
32
+
With locallyredundant storage (LRS), three copies of your storage account are automatically stored and replicated within a single datacenter. With zone-redundant storage (ZRS), a copy is stored and replicated in each of three separate availability zones within the same region. For more information about availability zones, see [Azure availability zones](../../availability-zones/az-overview.md).
33
33
34
34
Recovery of a single copy of a storage account occurs automatically with LRS and ZRS.
35
35
36
-
### Globally-redundant storage and failover
36
+
### globally redundant storage and failover
37
37
38
-
With globally-redundant storage (GRS, GZRS, and RA-GZRS), Azure copies your data asynchronously to a secondary geographic region at least hundreds of miles away. This allows you to recover your data if there's an outage in the primary region. A feature that distinguishes globally-redundant storage from LRS and ZRS is the ability to fail over to the secondary region if there's an outage in the primary region. The process of failing over updates the DNS entries for your storage account service endpoints such that the endpoints for the secondary region become the new primary endpoints for your storage account. Once the failover is complete, clients can begin writing to the new primary endpoints.
38
+
With globallyredundant storage (GRS, GZRS, and RA-GZRS), Azure copies your data asynchronously to a secondary geographic region at least hundreds of miles away. This allows you to recover your data if there's an outage in the primary region. A feature that distinguishes globallyredundant storage from LRS and ZRS is the ability to fail over to the secondary region if there's an outage in the primary region. The process of failing over updates the DNS entries for your storage account service endpoints such that the endpoints for the secondary region become the new primary endpoints for your storage account. Once the failover is complete, clients can begin writing to the new primary endpoints.
39
39
40
-
RA-GRS and RA-GZRS redundancy configurations provide geo-redundant storage with the added benefit of read access to the secondary endpoint if there is an outage in the prinary region. If an outage occurs in the primary endpoint, applications configured for read access to the secondary region and designed for high availability can continue to read from the secondary endpoint. Microsoft recommends RA-GZRS for maximum availability and durability of your storage accounts.
40
+
RA-GRS and RA-GZRS redundancy configurations provide geo-redundant storage with the added benefit of read access to the secondary endpoint if there is an outage in the primary region. If an outage occurs in the primary endpoint, applications configured for read access to the secondary region and designed for high availability can continue to read from the secondary endpoint. Microsoft recommends RA-GZRS for maximum availability and durability of your storage accounts.
41
41
42
42
For more information about redundancy in Azure Storage, see [Azure Storage redundancy](storage-redundancy.md).
Copy file name to clipboardExpand all lines: articles/storage/common/storage-failover-customer-managed-unplanned.md
+16-16Lines changed: 16 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -84,25 +84,25 @@ The following diagrams show what happens during customer-managed failover and fa
84
84
85
85
Under normal circumstances, a client writes data to a storage account in the primary region via storage service endpoints (1). The data is then copied asynchronously from the primary region to the secondary region (2). The following image shows the normal state of a storage account configured as GRS when the primary endpoints are available:
86
86
87
-

87
+
:::image type="content" source="media/storage-failover-customer-managed-common/pre-failover-grs.png" alt-text="Image showing how clients write data to the storage account in the primary region." lightbox="media/storage-failover-customer-managed-common/pre-failover-grs.png":::
88
88
89
89
### The storage service endpoints become unavailable in the primary region (GRS/RA-GRS)
90
90
91
91
If the primary storage service endpoints become unavailable for any reason (1), the client is no longer able to write to the storage account. Depending on the underlying cause of the outage, replication to the secondary region may no longer be functioning (2), so [some data loss should be expected](storage-disaster-recovery-guidance.md#anticipate-data-loss-and-inconsistencies). The following image shows the scenario where the primary endpoints have become unavailable, but no recovery has occurred yet:
92
92
93
-

93
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/primary-unavailable-before-failover-grs.png" alt-text="Image showing how the primary is unavailable, so clients cannot write data." lightbox="media/storage-failover-customer-managed-unplanned/primary-unavailable-before-failover-grs.png":::
94
94
95
95
### The failover process (GRS/RA-GRS)
96
96
97
97
To restore write access to your data, you can [initiate a failover](storage-initiate-account-failover.md). The storage service endpoint URIs for blobs, tables, queues, and files remain the same but their DNS entries are changed to point to the secondary region (1) as show in this image:
98
98
99
-

99
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/failover-to-secondary-grs.png" alt-text="Image showing how the customer initiates account failover to secondary endpoint." lightbox="media/storage-failover-customer-managed-unplanned/failover-to-secondary-grs.png":::
100
100
101
101
Customer-managed failover typically takes about an hour.
102
102
103
103
After the failover is complete, the original secondary becomes the new primary (1) and the copy of the storage account in the original primary is deleted (2). The storage account is configured as LRS in the new primary region and is no longer geo-redundant. Users can resume writing data to the storage account (3) as shown in this image:
104
104
105
-

105
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failover-grs.png" alt-text="Image showing how the storage account status post-failover to secondary region." lightbox="media/storage-failover-customer-managed-unplanned/post-failover-grs.png":::
106
106
107
107
To resume replication to a new secondary region, reconfigure the account for geo-redundancy.
108
108
@@ -111,7 +111,7 @@ To resume replication to a new secondary region, reconfigure the account for geo
111
111
112
112
After re-configuring the account as GRS, Azure begins copying your data asynchronously to the new secondary region (1) as shown in this image:
113
113
114
-

114
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failover-grs-geo.png" alt-text="Image showing how the storage account status post-failover to secondary region as GRS." lightbox="media/storage-failover-customer-managed-unplanned/post-failover-grs-geo.png":::
115
115
116
116
Read access to the new secondary region will not become available again until the issue causing the original outage has been resolved.
117
117
@@ -128,11 +128,11 @@ Once the issue causing the original outage has been resolved, you can initiate a
128
128
1. With customer-initiated failover and failback, your data is not allowed to finish replicating to the secondary region during the failback process. Therefore, it is important to check the value of the [**Last Sync Time**](last-sync-time-get.md) property before failing back.
129
129
1. The DNS entries for the storage service endpoints are changed such that those for the secondary region become the new primary endpoints for your storage account.
130
130
131
-

131
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/failback-to-primary-grs.png" alt-text="Image showing how the customer initiates account failback to original primary region." lightbox="media/storage-failover-customer-managed-unplanned/failback-to-primary-grs.png":::
132
132
133
133
After the failback is complete, the original primary region becomes the current one again (1) and the copy of the storage account in the original secondary is deleted (2). The storage account is configured as locally redundant in the primary region and is no longer geo-redundant. Users can resume writing data to the storage account (3) as shown in this image:
134
134
135
-

135
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failback-grs.png" alt-text="Image showing how Post-failback status." lightbox="media/storage-failover-customer-managed-unplanned/post-failback-grs.png":::
136
136
137
137
To resume replication to the original secondary region, configure the account for geo-redundancy again.
138
138
@@ -141,33 +141,33 @@ To resume replication to the original secondary region, configure the account fo
141
141
142
142
After re-configuring the account as GRS, replication to the original secondary region resumes as shown in this image:
143
143
144
-

144
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failback-grs-geo.png" alt-text="Image showing how the redundancy configuration returns to its original state." lightbox="media/storage-failover-customer-managed-unplanned/post-failback-grs-geo.png":::
145
145
146
146
## [GZRS/RA-GZRS](#tab/gzrs-ra-gzrs)
147
147
148
148
### Normal operation (GZRS/RA-GZRS)
149
149
150
150
Under normal circumstances, a client writes data to a storage account in the primary region via storage service endpoints (1). The data is then copied asynchronously from the primary region to the secondary region (2). The following image shows the normal state of a storage account configured as GZRS when the primary endpoints are available:
151
151
152
-

152
+
:::image type="content" source="media/storage-failover-customer-managed-common/pre-failover-gzrs.png" alt-text="Image showing how the clients write data to the storage account in the primary region." lightbox="media/storage-failover-customer-managed-common/pre-failover-gzrs.png":::
153
153
154
154
### The storage service endpoints become unavailable in the primary region (GZRS/RA-GZRS)
155
155
156
156
If the primary storage service endpoints become unavailable for any reason (1), the client is no longer able to write to the storage account. Depending on the underlying cause of the outage, replication to the secondary region may no longer be functioning (2), [so some data loss should be expected](storage-disaster-recovery-guidance.md#anticipate-data-loss-and-inconsistencies). The following image shows the scenario where the primary endpoints have become unavailable, but no recovery has occurred yet:
157
157
158
-

158
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/primary-unavailable-before-failover-gzrs.png" alt-text="Image showing how the primary is unavailable, so clients cannot write data." lightbox="media/storage-failover-customer-managed-unplanned/primary-unavailable-before-failover-gzrs.png":::
159
159
160
160
### The failover process (GZRS/RA-GZRS)
161
161
162
162
To restore write access to your data, you can [initiate a failover](storage-initiate-account-failover.md). The storage service endpoint URIs for blobs, tables, queues, and files remain the same but their DNS entries are changed to point to the secondary region (1) as show in this image:
163
163
164
-

164
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/failover-to-secondary-gzrs.png" alt-text="Image showing how the customer initiates account failover to the secondary endpoint." lightbox="media/storage-failover-customer-managed-unplanned/failover-to-secondary-gzrs.png":::
165
165
166
166
The failover typically takes about an hour.
167
167
168
168
After the failover is complete, the original secondary becomes the new primary (1) and the copy of the storage account in the original primary is deleted (2). The storage account is configured as LRS in the new primary region and is no longer geo-redundant. Users can resume writing data to the storage account (3) as shown in this image:
169
169
170
-

170
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failover-grs.png" alt-text="Image showing the storage account status post-failover to secondary region." lightbox="media/storage-failover-customer-managed-unplanned/post-failover-grs.png":::
171
171
172
172
To resume replication to a new secondary region, reconfigure the account for geo-redundancy.
173
173
@@ -178,7 +178,7 @@ Since the account was originally configured as GZRS, reconfiguring geo-redundanc
178
178
179
179
After re-configuring the account as GRS, Azure begins copying your data asynchronously to the new secondary region (1) as shown in this image:
180
180
181
-

181
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failover-gzrs-geo.png" alt-text="Image showing the storage account status post-failover to secondary region as GRS." lightbox="media/storage-failover-customer-managed-unplanned/post-failover-gzrs-geo.png":::
182
182
183
183
Read access to the new secondary region will not become available again until the issue causing the original outage has been resolved.
184
184
@@ -195,11 +195,11 @@ Once the issue causing the original outage has been resolved, you can initiate a
195
195
1. With customer-initiated failover and failback, your data is not allowed to finish replicating to the secondary region during the failback process. Therefore, it is important to check the value of the [**Last Sync Time**](last-sync-time-get.md) property before failing back.
196
196
1. The DNS entries for the storage service endpoints are changed such that those for the secondary region become the new primary endpoints for your storage account.
197
197
198
-

198
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/failback-to-primary-gzrs.png" alt-text="Image showing the customer initiates account failback to original primary region." lightbox="media/storage-failover-customer-managed-unplanned/failback-to-primary-gzrs.png":::
199
199
200
200
After the failback is complete, the original primary region becomes the current one again (1) and the copy of the storage account in the original secondary is deleted (2). The storage account is configured as ZRS in the primary region and is no longer geo-redundant. Users can resume writing data to the storage account (3) as shown in this image:
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failback-gzrs.png" alt-text="Image showing the post-failback status." lightbox="media/storage-failover-customer-managed-unplanned/post-failback-gzrs.png":::
203
203
204
204
To resume replication to the original secondary region, configure the account for geo-redundancy again.
205
205
@@ -208,7 +208,7 @@ To resume replication to the original secondary region, configure the account fo
208
208
209
209
After re-configuring the account as GZRS, replication to the original secondary region resumes as shown in this image:
210
210
211
-

211
+
:::image type="content" source="media/storage-failover-customer-managed-unplanned/post-failback-gzrs-geo.png" alt-text="Image showing the redundancy configuration returns to its original state." lightbox="media/storage-failover-customer-managed-unplanned/post-failback-gzrs-geo.png":::
0 commit comments