Soru

Zorluk: OrtaDisaster Recovery and Business Continuity Execution

An online retail platform experiences a catastrophic regional failure in its primary region (us-central1). The application architecture consists of an active Managed Instance Group (MIG) and Cloud SQL primary in us-central1, with a scaled-down warm standby MIG and a cross-region Cloud SQL read replica in us-east4. Place the operational disaster recovery failover steps in the correct order to restore full production traffic in us-east4 with minimal data inconsistency.

  1. 1Promote the cross-region Cloud SQL read replica in us-east4 to a standalone primary database instance.
  2. 2Update application configuration settings in us-east4 to reference the connection endpoint of the newly promoted database instance.
  3. 3Scale up the warm standby Managed Instance Group (MIG) in us-east4 to full production capacity.
  4. 4Update Cloud DNS routing policies to direct production domain traffic to the us-east4 External HTTP(S) Load Balancer.

Cevap

The correct operational sequence is: 1) Promote the cross-region Cloud SQL read replica in us-east4 to a standalone primary database instance, 2) Update application configuration settings in us-east4 to reference the connection endpoint of the newly promoted database instance, 3) Scale up the warm standby Managed Instance Group (MIG) in us-east4 to full production capacity, and 4) Update Cloud DNS routing policies to direct production domain traffic to the us-east4 External HTTP(S) Load Balancer.
Executing disaster recovery requires prioritizing data write availability first, followed by application binding, compute scaling, and finally DNS traffic cutover. Promoting the database replica ensures a writable backend. Rebinding application instances ensures writes hit the new primary database. Scaling up the compute tier ensures sufficient capacity. Switching Cloud DNS last prevents sending live user requests to an unready or under-provisioned environment.

Adım Adım Çözüm

1
Promote the cross-region Cloud SQL read replica in us-east4.
The read replica becomes an independent, writable database instance in the failover region.
Promoting the database first ensures that write operations can be accepted immediately when application instances initiate connections.
2
Update application configurations to point to the promoted database endpoint.
The application workload in us-east4 is successfully linked to the new primary database.
Application instances must target the active writable database rather than the former read replica endpoint.
3
Scale up the Managed Instance Group (MIG) in us-east4.
The compute tier reaches full production serving capacity.
Warm standby compute instances must be scaled out to handle production load prior to accepting public internet traffic, avoiding resource exhaustion.
4
Update Cloud DNS routing policy to fail over traffic to us-east4.
Global ingress traffic is redirected to the healthy, provisioned load balancer in us-east4.
DNS failover should always be executed last after backend data integrity and compute capacity are completely ready to process user requests.

Anahtar Kavram

Disaster Recovery Failover Sequencing
Bu soruyu puanla