ASR Replication

Question

Hello,

When we build ASR to replicate disk from onprem to azure, can we use private ip using site-2-site connection, or the replication can only work using internet connection?

Answer 1

Hello @Handian Sudianto Thank you for posting your question on Microsoft Q&A plaform. Happy to answer any question you may have!

I see that you want to use private IP to replication your on-premise disks to Azure.

Short answer: ASR replicates data over public endpoints. For your requirement I suggest you can use Private Endpoints. Refer to the document - https://learn.microsoft.com/en-us/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints

Azure Site Recovery replicates data to an Azure storage account or managed disks, over a public endpoint However, replication can be performed over Site-to-Site VPN as well. Site-to-Site VPN connectivity allows organizations to connect existing networks to Azure, or Azure networks to each other. Site-to-Site VPN occurs over IPSec tunneling over the internet, leveraging existing on-premises edge network equipment and network appliances in Azure, either native features like Azure Virtual Private Network (VPN) Gateway or 3rd party options such as Check Point CloudGaurd, Palo Alto NextGen Firewall. Replicating to Azure with site-to-site VPN is only supported when using private endpoints.

Hope this answers your question. Please write back to us if you have any further questions!

---

If the response helped, do "Accept Answer" and up-vote it

Answer 2

Hi Handian Sudianto,

Azure Site Recovery replicates data to an Azure storage account or managed disks, over a public endpoint. However, replication can be performed over Site-to-Site VPN as well.

• Recovery Service Vaults needs to be configured for security with Private Endpoints
• No SLA and potentially higher latency
• Requires an on-premises VPN device availability
• Additional overhead for VPN

https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-faq#can-i-replicate-over-a-site-to-site-vpn-to-azure-

https://learn.microsoft.com/en-us/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints

Please Click "Accept as answer" if this helps.