Performing a Planned Failover

A planned failover changes the disaster recovery direction of a protection group. After the planned failover, data synchronization continues, but the DR direction is changed from the DR site to the production site. Perform planned failovers based on your planned outages to ensure no data loss. For example, if the production site (AZ 2) is going to encounter a power failure, you can perform a planned failover to switch the services in AZ 2 to the DR site (AZ 3). The planned failover will not affect data synchronization of the protection group.

SDRS will migrate NICs on the server during the planned failover. After the planned failover, the IP, EIP, and MAC addresses of the production site server will be migrated to the DR site server, so that the IP, EIP, and MAC addresses remain the same.

• Ensure that all the servers in the protection group are stopped before the planned failover.
• During the planned failover, do not start the servers in the protection group. Otherwise, the planned failover may fail.
• Once a planned failover is complete, data synchronization will not stop, only the synchronization direction will reverse.
• After the planned failover is complete, the status of the protection group changes to Protecting. Switch to the protected instance details page and start the server at the production site.

1. Log in to the ECS management console and stop the target server at the production site.

   

2. Log in to the Storage Disaster Recovery Service page, click the protected group for which you want to perform a planned failover, and check the synchronization result and whether the server in the protected group is stopped.

   

3. Click Execute Planned Failover.

   

4. Select the protected instance for which you want to perform a planned failover and click Execute Planned Failover.

   

5. Check the protection group status.

6. Check whether the failover is complete. (The failover usually takes several minutes. The time required depends on the actual situation.)

   

   After the failover, the previous production site becomes the new DR site, the previous DR site becomes the new production site, and the status of the protected group and protected instance changes from Planned failover in progress to Protected.

7. Log in to the ECS management console and view server details at the new production site and DR site.

   

Compare the ECS details before and after the failover. It is found that the private and public IP addresses of the production site server before the failover are the same as the private and public IP address of the DR site server after the failover. In this case, manually start the new DR server. (Note that the server at the DR site cannot be manually started. Only the server at the production site can be manually started.)