業務持續性和災害復原 (BCDR):Azure 配對的區域Business continuity and disaster recovery (BCDR): Azure Paired Regions

什麼是配對的區域?What are paired regions?

Azure 區域是由一組在延遲定義的周邊內部署的資料中心所組成,並透過專用的低延遲網路進行連線。An Azure region consists of a set of data centers deployed within a latency-defined perimeter and connected through a dedicated low-latency network. 這可確保 Azure 區域內的 Azure 服務能提供最佳的效能和安全性。This ensures that Azure services within an Azure region offer the best possible performance and security.

Azure 地理位置會定義世界上至少包含一個 Azure 區域的區域。An Azure geography defines an area of the world containing at least one Azure region. 地理位置定義了離散市場,通常包含兩個或多個區域,以保留資料落地和合規性界限。Geographies define a discrete market, typically containing two or more regions, that preserve data residency and compliance boundaries. 在這裡尋找 Azure 全球基礎結構的詳細資訊Find more information about Azure's global infrastructure here

區域配對是由相同地理位置內的兩個區域所組成。A regional pair consists of two regions within the same geography. Azure 會將平臺更新序列化 (預定的維護) 跨區域配對,以確保每個配對中一次只會更新一個區域。Azure serializes platform updates (planned maintenance) across regional pairs, ensuring that only one region in each pair updates at a time. 如果中斷影響到多個區域,則每個配對中至少有一個區域會優先進行復原。If an outage affects multiple regions, at least one region in each pair will be prioritized for recovery.

AzureGeography

某些 Azure 服務會進一步利用配對的區域,以確保商務持續性並防止資料遺失。Some Azure services take further advantage of paired regions to ensure business continuity and to protect against data loss. Azure 提供數種 儲存體解決方案 ,可利用配對的區域以確保資料的可用性。Azure provides several storage solutions that take advantage of paired regions to ensure data availability. 例如, Azure 異地複寫儲存體 (GRS) 會自動將資料複寫到次要區域,確保即使主要區域無法復原,資料仍會持久。For example, Azure Geo-redundant Storage (GRS) replicates data to a secondary region automatically, ensuring that data is durable even in the event that the primary region isn't recoverable.

請注意,並非所有的 Azure 服務都會自動複寫資料,而所有 Azure 服務都會自動從失敗的區域回復至其配對。Note that not all Azure services automatically replicate data, nor do all Azure services automatically fallback from a failed region to its pair. 在這種情況下,客戶必須設定復原和複寫。In such cases, recovery and replication must be configured by the customer.

我可以選取區域配對嗎?Can I select my regional pairs?

不會。No. 某些 Azure 服務依賴區域配對,例如 Azure 的 多餘儲存體Some Azure services rely upon regional pairs, such as Azure's redundant storage. 這些服務不允許您建立新的區域配對。These services don't allow you to create new regional pairings. 同樣地,因為 Azure 會控制區域配對的預定維護和復原優先順序,所以您無法定義自己的區域配對來利用這些服務。Similarly, because Azure controls planned maintenance and recovery prioritization for regional pairs, you can't define your own regional pairs to take advantage of these services. 不過,您可以建立自己的嚴重損壞修復解決方案,方法是在任意數量的區域中建立服務,並利用 Azure 服務將它們配對。However, you can create your own disaster recovery solution by building services in any number of regions and leveraging Azure services to pair them.

例如,您可以使用 Azure 服務(例如 AzCopy ),將資料備份排程至不同區域中的儲存體帳戶。For example, you can use Azure services such as AzCopy to schedule data backups to a Storage account in a different region. 使用 Azure DNS 和 Azure 流量管理員,客戶可以為其應用程式設計具有復原能力的架構,而這些應用程式將會在遺失主要區域時存活。Using Azure DNS and Azure Traffic Manager, customers can design a resilient architecture for their applications that will survive the loss of the primary region.

我是否受限於使用區域配對內的服務?Am I limited to using services within my regional pairs?

不會。No. 雖然指定的 Azure 服務可能會依賴區域配對,您仍可在滿足您商務需求的任何區域中裝載其他服務。While a given Azure service may rely upon a regional pair, you can host your other services in any region that satisfies your business needs. Azure GRS 儲存體解決方案可能會將加拿大中部中的資料與加拿大東部中的對等互連,同時使用位於美國東部的計算資源。An Azure GRS storage solution may pair data in Canada Central with a peer in Canada East while using Compute resources located in East US.

是否必須使用 Azure 區域配對?Must I use Azure regional pairs?

不會。No. 客戶可以利用 Azure 服務來設計具復原能力的服務,而不需依賴 Azure 的區域配對。Customers can leverage Azure services to architect a resilient service without relying on Azure's regional pairs. 不過,我們建議您設定商務持續性嚴重損壞修復 (BCDR) 跨區域配對,以受益于 隔離 和提高 可用性However, we recommend that you configure business continuity disaster recovery (BCDR) across regional pairs to benefit from isolation and improve availability. 對於支援多個作用中區域的應用程式,我們建議儘可能同時使用相同區域組中的兩個區域。For applications that support multiple active regions, we recommend using both regions in a region pair where possible. 這可確保應用程式的最佳可用性,並在發生損毀時將復原時間降至最低。This ensures optimal availability for applications and minimized recovery time in the event of a disaster. 可能的話,請將您的應用程式設計為可獲得最大的復原能力和簡化嚴重損壞修復Whenever possible, design your application for maximum resiliency and ease of disaster recovery.

Azure 區域配對Azure Regional Pairs

[地理位置]Geography 區域配對 ARegional Pair A 區域配對 BRegional Pair B
Asia-PacificAsia-Pacific 東亞 (香港特別行政區) East Asia (Hong Kong) 東南亞 (新加坡) Southeast Asia (Singapore)
澳大利亞Australia 澳大利亞東部Australia East 澳大利亞東南部Australia Southeast
澳洲Australia 澳大利亞中部Australia Central 澳大利亞中部 2 *Australia Central 2*
巴西Brazil 巴西南部Brazil South 美國中南部South Central US
巴西Brazil 巴西東南部 *Brazil Southeast* 巴西南部Brazil South
CanadaCanada 加拿大中部Canada Central 加拿大東部Canada East
中國China 中國北部China North 中國東部China East
中國China 中國北部 2China North 2 中國東部 2China East 2
歐洲Europe 北歐 (愛爾蘭)North Europe (Ireland) 西歐 (荷蘭)West Europe (Netherlands)
法國France 法國中部France Central 法國南部*France South*
德國Germany 德國中西部Germany West Central 德國北部 *Germany North*
印度India 印度中部Central India 印度南部South India
印度India 印度西部West India 印度南部South India
日本Japan 日本東部Japan East 日本西部Japan West
南韓Korea 南韓中部Korea Central 南韓南部Korea South
北美洲North America 美國東部East US 美國西部West US
北美洲North America 美國東部 2East US 2 美國中部Central US
北美洲North America 美國中北部North Central US 美國中南部South Central US
北美洲North America 美國西部 2West US 2 美國中西部West Central US
挪威Norway 挪威東部Norway East 挪威西部 *Norway West*
南非South Africa 南非北部South Africa North 南非西部*South Africa West*
瑞士Switzerland 瑞士北部Switzerland North 瑞士西部 *Switzerland West*
英國UK 英國西部UK West 英國南部UK South
阿拉伯聯合大公國United Arab Emirates 阿拉伯聯合大公國北部UAE North 阿拉伯聯合大公國中部*UAE Central*
美國國防部US Department of Defense US DoD 東部 *US DoD East* US DoD 中部 *US DoD Central*
美國政府US Government US Gov 亞利桑那州 *US Gov Arizona* US Gov 德克薩斯州 *US Gov Texas*
美國政府US Government US Gov 愛荷華州 *US Gov Iowa* US Gov 維吉尼亞州 *US Gov Virginia*
美國政府US Government US Gov 維吉尼亞州 *US Gov Virginia* US Gov 德克薩斯州 *US Gov Texas*

(\ * ) 某些區域受限於存取,以支援特定客戶案例,例如國家/地區的災難復原。(*) Certain regions are access restricted to support specific customer scenarios, for example in-country disaster recovery. 這些區域只有 Azure 入口網站在要求中建立新的支援要求時才可使用。These regions are available only upon request by creating a new support request in the Azure portal.

重要

  • 印度西部只會以一個方向配對。West India is paired in one direction only. 印度西部的次要地區是印度南部,但印度南部的次要區域是印度中部。West India's secondary region is South India, but South India's secondary region is Central India.
  • 巴西南部是唯一的,因為它會與地理位置以外的區域配對。Brazil South is unique because it is paired with a region outside of its geography. 巴西南部的次要地區是美國中南部。Brazil South's secondary region is South Central US. 美國中南部的次要地區不是巴西南部。South Central US's secondary region is not Brazil South.

配對的區域範例An example of paired regions

下圖說明使用區域配對進行嚴重損壞修復的假設應用程式。The image below illustrates a hypothetical application that uses the regional pair for disaster recovery. 綠色的數位強調了三項 Azure 服務的跨區域活動, (Azure 計算、儲存體和資料庫) ,以及它們如何設定為跨區域複寫。The green numbers highlight the cross-region activities of three Azure services (Azure compute, storage, and database) and how they're configured to replicate across regions. 橘色數字則強調跨配對區域部署的獨特優點。The unique benefits of deploying across paired regions are highlighted by the orange numbers.

配對區域優點概觀

圖 2 – 假設的 Azure 區域配對Figure 2 – Hypothetical Azure regional pair

跨區域活動Cross-region activities

如圖 2 所示。As referred to in figure 2.

  1. Azure 計算 (IaaS) –您必須事先布建額外的計算資源,以確保在發生嚴重損壞時可在另一個區域中使用資源。Azure Compute (IaaS) – You must provision additional compute resources in advance to ensure resources are available in another region during a disaster. 如需詳細資訊,請參閱 Azure 復原技術指導For more information, see Azure resiliency technical guidance.

  2. Azure 儲存體 -如果您使用受控磁片,請瞭解 Azure 備份的 跨區域備份 ,以及使用 Azure Site Recovery 將 vm 從一個區域複寫到另一個區域。Azure Storage - If you're using managed disks, learn about cross-region backups with Azure Backup, and replicating VMs from one region to another with Azure Site Recovery. 如果您使用的是儲存體帳戶,則在建立 Azure 儲存體帳戶時,預設會設定異地冗余儲存體 (GRS) 。If you're using storage accounts, then geo-redundant storage (GRS) is configured by default when an Azure Storage account is created. 使用 GRS 時,系統會在主要區域內將您的資料自動複寫三次,並在配對區域中複寫三次。With GRS, your data is automatically replicated three times within the primary region, and three times in the paired region. 如需詳細資訊,請參閱 Azure 儲存體備援選項For more information, see Azure Storage Redundancy Options.

  3. Azure SQL Database –有了 Azure SQL Database 異地複寫,您就可以設定將交易非同步複寫至世界各地的任何區域;不過,建議您將這些資源部署在配對區域中,以進行大部分的嚴重損壞修復案例。Azure SQL Database – With Azure SQL Database Geo-Replication, you can configure asynchronous replication of transactions to any region in the world; however, we recommend you deploy these resources in a paired region for most disaster recovery scenarios. 如需詳細資訊,請參閱 Azure SQL Database 中的異地複寫For more information, see Geo-Replication in Azure SQL Database.

  4. Azure Resource Manager:Resource Manager 原本就會提供跨區域的元件邏輯隔離。Azure Resource Manager - Resource Manager inherently provides logical isolation of components across regions. 這表示某個區域中的邏輯失敗不太可能會影響另一個區域。This means logical failures in one region are less likely to impact another.

配對區域的優點Benefits of paired regions

  1. 實體隔離 :如果可能,Azure 在區域配對中的資料中心之間偏好至少300英里的區隔,不過這在所有地理位置中都是可行或可能的。Physical isolation – When possible, Azure prefers at least 300 miles of separation between datacenters in a regional pair, although this isn't practical or possible in all geographies. 實體資料中心分隔能夠降低自然災害、社會動亂、電力中斷或實體網路中斷同時影響兩個區域的可能性。Physical datacenter separation reduces the likelihood of natural disasters, civil unrest, power outages, or physical network outages affecting both regions at once. 隔離會受限於地理位置內的條件約束 (地理位置大小、電源/網路基礎結構可用性、法規等等)。Isolation is subject to the constraints within the geography (geography size, power/network infrastructure availability, regulations, etc.).

  2. 平臺提供 的複寫:某些服務(例如 Geo-Redundant 儲存體)會提供自動複寫到配對的區域。Platform-provided replication - Some services such as Geo-Redundant Storage provide automatic replication to the paired region.

  3. 區域復原順序 :如果發生廣泛的中斷情況,則會將一個區域的復原優先于每個配對。Region recovery order – In the event of a broad outage, recovery of one region is prioritized out of every pair. 跨配對區域部署的應用程式能夠保障其中一個區域優先復原。Applications that are deployed across paired regions are guaranteed to have one of the regions recovered with priority. 如果在未配對的區域中部署應用程式,就可能會發生復原延遲的情況;最壞的情況是,這兩個選定的區域可能都不會復原。If an application is deployed across regions that are not paired, recovery might be delayed – in the worst case the chosen regions may be the last two to be recovered.

  4. 順序更新 –計畫的 Azure 系統更新會依序推出到配對的區域, (不會同時) 將停機時間、錯誤的影響,以及在不正確的更新中發生邏輯失敗的情況降到最低。Sequential updates – Planned Azure system updates are rolled out to paired regions sequentially (not at the same time) to minimize downtime, the effect of bugs, and logical failures in the rare event of a bad update.

  5. 資料 存放區:區域位於與其配對相同的地理位置內 (但巴西南部) 例外,以符合資料落地需求,以符合稅務和執法管轄區的目的。Data residency – A region resides within the same geography as its pair (with the exception of Brazil South) to meet data residency requirements for tax and law enforcement jurisdiction purposes.