Azure Fundamentals (AZ-900)

Last Updated: 1/1/2023

Azure Storage Redundancy

  • Azure Storage always stores multiple copies of your data so that it's protected from planned and unplanned events such as transient hardware failures, network or power outages, and natural disasters.
  • Redundancy ensures that your storage account meets its availability and durability targets even in the face of failures.
  • When deciding which redundancy option is best for your scenario, consider the tradeoffs between lower costs and higher availability.
  • The factors that help determine which redundancy option you should choose include:
    • How your data is replicated in the primary region.
    • Whether your data is replicated to a second region.
    • Whether your application requires read access to the replicated data in the secondary region if the primary region becomes unavailable.

Redundancy in the primary region

  • Data in an Azure Storage account is always replicated three times in the primary region.
  • Azure Storage offers two options for how your data is replicated in the primary region, locally redundant storage (LRS) and zone-redundant storage (ZRS).

Locally redundant storage

  • Locally redundant storage (LRS) replicates your data three times within a single data center in the primary region.
  • LRS offers durability for data objects of at least 11 nines (99.999999999%) over a given year.
  • LRS protects your data against server rack and drive failures.
  • If a disaster such as fire or flooding occurs within the data center, all replicas of a storage account using LRS may be lost or unrecoverable.

Zone-redundant storage

  • For Availability Zone-enabled Regions, zone-redundant storage (ZRS) replicates your data synchronously across three Azure availability zones in the primary region.
  • ZRS offers durability for data objects of at least 12 nines (99.9999999999%) over a given year.
  • ZRS protects your data against datacenter failures.
  • If a zone becomes unavailable, Azure undertakes networking updates, such as DNS repointing. These updates may affect your application if you access data before the updates have completed.
  • Microsoft recommends using ZRS in the primary region for scenarios that require high availability. ZRS is also recommended for restricting replication of data within a country or region to meet data governance requirements.

Redundancy in a secondary region

  • For applications requiring high durability, you can choose to additionally copy the data in your storage account to a secondary region that is hundreds of miles away from the primary region.
  • When you create a storage account, you select the primary region for the account. The paired secondary region is based on Azure Region Pairs, and can't be changed.
  • Azure Storage offers two options for copying your data to a secondary region: geo-redundant storage (GRS) and geo-zone-redundant storage (GZRS). GRS is similar to running LRS in two regions, and GZRS is similar to running ZRS in the primary region and LRS in the secondary region.
  • By default, data in the secondary region isn't available for read or write access unless there's a failover to the secondary region.
  • Because data is replicated to the secondary region asynchronously, a failure that affects the primary region may result in data loss if the primary region can't be recovered.
  • The interval between the most recent writes to the primary region and the last write to the secondary region is known as the recovery point objective (RPO).
  • The RPO indicates the point in time to which data can be recovered.
  • Azure Storage typically has an RPO of less than 15 minutes, although there's currently no SLA on how long it takes to replicate data to the secondary region.

Geo-redundant storage

  • GRS copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies your data asynchronously to a single physical location in the secondary region (the region pair) using LRS.
  • GRS offers durability for data objects of at least 16 nines (99.99999999999999%) over a given year.
  • Protects your data against regional outages

Geo-zone-redundant storage

  • Data in a GZRS storage account is copied across three Azure availability zones in the primary region (similar to ZRS) and is also replicated to a secondary geographic region, using LRS, for protection from regional disasters.
  • GRS offers durability for data objects of at least 16 nines (99.99999999999999%) over a given year.
  • Protects your data against regional outages
  • Microsoft recommends using GZRS for applications requiring maximum consistency, durability, and availability, excellent performance, and resilience for disaster recovery.

Read Access

  • Data is available to be read only if the customer or Microsoft initiates a failover from the primary to secondary region.
  • If you enable read access to the secondary region, your data is always available, even when the primary region is running optimally.
  • For read access to the secondary region, enable read-access geo-redundant storage (RA-GRS) or read-access geo-zone-redundant storage (RA-GZRS).