Performing a Planned Failover¶
Scenarios¶
After you perform a planned failover, services at the production site are failed over to the DR site, and services at the DR site are failed over to the production site. Table 1 shows the direction change.
| Production Site | DR Site |
|---|---|---|
Before | AZ1 | AZ2 |
After | AZ2 | AZ1 |
After the planned failover, data synchronization continues, but the DR direction is changed (from the DR site to the production site). You can perform a planned failover when you are certain that the production site will encounter an interruption. For example, if the production site (AZ1) is going to encounter a power failure, you can perform a planned failover to fail over services in AZ1 to the DR site (AZ2). The planned failover will not affect data synchronization of the protection group.
SDRS will migrate NICs on the server during the planned failover. After the planned failover, the IP, EIP, and MAC addresses of the production site server will be migrated to the DR site server, so that the IP, EIP, and MAC addresses remain the same.
Note
Check the status to ensure that all the servers in the protection group are stopped before the planned failover.
During the planned failover, do not start the servers in the protection group. Otherwise, the planned failover may fail.
Once a planned failover is complete, data synchronization will not stop, only the synchronization direction will reverse.
After the planned failover is complete, the status of the protection group changes to Protecting. Then, you need to switch to the protected instance details page and start the production site server.
Figure 1 Performing a planned failover¶
Notes¶
For Linux servers with Cloud-Init installed, if you have changed hostname of the production site server before you perform a planned failover for the first time, this modification will not synchronize to the DR site server.
To resolve this problem, see What Can I Do If hostname of the Production Site Server and DR Site Server Are Different After a Planned Failover or Failover?
Prerequisites¶
All the servers in the protection group are stopped.
The protection group has replication pairs.
Protection is enabled for the protection group, and the protection group is in the Protecting or Planned failover failed state.
Procedure¶
Log in to the management console.
Click Service List and choose Storage > Storage Disaster Recovery Service.
The Storage Disaster Recovery Service page is displayed.
In the pane of the desired protection group, click Protected Instances.
On the operation page of the protection group, click Execute Planned Failover in the upper right corner.
In the displayed dialog box, check whether all the servers in this protection group are stopped.
If yes, go to step 6.
If no, select the servers to be stopped and click Stop.
In the Execute Planned Failover dialog box, click Execute Planned Failover.
Note
During the planned failover, do not start the servers in the protection group. Otherwise, the planned failover may fail.