Skip to content

Commit

Permalink
[DOC-7938][DOC-8747][DOC-7934][DOC-7935] Update Dedicated on Azure co…
Browse files Browse the repository at this point in the history
…ntent: (#17671)

- Remove managed-service backup limitation
- Remove multi-region limitation
- Add additional regions
- Update VM instance family
- Update isolation info
- Update Dedicated variable references to add CockroachDB
- Copyedit FAQ titles to remove excessive redundant references to 'CockroachDB Dedicated on Azure'
- Release notes for associated changes
  • Loading branch information
mdlinville authored Sep 8, 2023
1 parent 2d497e7 commit 41f321c
Show file tree
Hide file tree
Showing 6 changed files with 95 additions and 49 deletions.
1 change: 1 addition & 0 deletions src/current/_data/cloud_releases.csv
Original file line number Diff line number Diff line change
Expand Up @@ -61,3 +61,4 @@ date,sha
2023-08-16,null
2023-08-22,null
2023-09-01,null
2023-09-08,null
25 changes: 25 additions & 0 deletions src/current/_includes/releases/cloud/2023-09-08.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
## September 8, 2023

<h3 id="2023-09-08-general-changes"> General changes </h3>

- [Managed-service backups](https://www.cockroachlabs.com/docs/cockroachcloud/use-managed-service-backups?filters=dedicated) are now available for [CockroachDB {{ site.data.products.dedicated }} clusters on Azure (Limited Access)](https://cockroachlabs.com/docs/{{site.versions["cockroachcloud"]}}/cockroachdb-dedicated-on-azure).

- New CockroachDB {{ site.data.products.dedicated }} clusters on Azure now use [Dsv4-series VMs](https://learn.microsoft.com/azure/virtual-machines/dv4-dsv4-series).

- You can now create new [multi-region](https://www.cockroachlabs.com/docs/stable/multiregion-overview) CockroachDB {{ site.data.products.dedicated }} clusters on Azure.

{% capture regions_list %}
- `australiaeast`
- `canadacentral`
- `centralus`
- `eastasia`
- `eastus`
- `germanywestcentral`
- `northeurope`
- `uksouth`
- `westus2`
{% endcapture %}

- New CockroachDB {{ site.data.products.dedicated }} clusters on Azure can be created in additional [cloud regions](https://www.cockroachlabs.com/docs/cockroachcloud/regions?filters=dedicated#azure-regions):

{{regions_list}}
77 changes: 45 additions & 32 deletions src/current/cockroachcloud/cockroachdb-dedicated-on-azure.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ toc_not_nested: true
docs_area: deploy
---

This page provides information about CockroachDB {{ site.data.products.dedicated }} clusters on Microsoft Azure, including frequently asked questions and limitations during [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability). To create a CockroachDB {{ site.data.products.dedicated }} cluster, refer to [Create Your Cluster]({% link cockroachcloud/create-your-cluster.md %}).
This page provides information about CockroachDB {{ site.data.products.dedicated }} clusters on Microsoft Azure, including frequently asked questions and limitations during [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability). To create a cluster, refer to [Create Your Cluster]({% link cockroachcloud/create-your-cluster.md %}).

{{site.data.alerts.callout_info}}
{% include feature-phases/azure-limited-access.md %}
Expand All @@ -18,8 +18,21 @@ During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud

### Regions

- Multi-region clusters are not yet available.
- Single-region clusters can be created in the following regions: `eastus2` (US East Coast - Virginia) and `westeurope` (Netherlands)
{% capture regions_list %}
- `australiaeast`
- `canadacentral`
- `centralus`
- `eastasia`
- `eastus`
- `germanywestcentral`
- `northeurope`
- `uksouth`
- `westus2`
{% endcapture %}

- Clusters can be created in the following [regions]({% link cockroachcloud/regions.md %}?filters=dedicated#azure-regions):

{{regions_list}}

### Editing and scaling

Expand Down Expand Up @@ -49,82 +62,82 @@ During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud

## FAQs

### What does limited access refer to regarding the availability of CockroachDB {{ site.data.products.dedicated }} on Azure?
The following sections provide more details about CockroachDB {{ site.data.products.dedicated }} on Azure.

CockroachDB {{ site.data.products.dedicated }} on Azure is fully managed, just like CockroachDB {{ site.data.products.dedicated }} on GCP or AWS. During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability), your CockroachDB {{ site.data.products.cloud }} organization must be enrolled before you can start using CockroachDB {{ site.data.products.dedicated }} on Azure.
### What is Limited Access and how does it relate to CockroachDB {{ site.data.products.dedicated }} on Azure?

CockroachDB {{ site.data.products.dedicated }} on Azure is fully managed, like on GCP or AWS. During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability), your {{ site.data.products.db }} organization must be enrolled before you can deploy CockroachDB {{ site.data.products.dedicated }} clusters on Azure.

The clusters created during this period are recommended for proof-of-concept and testing, and are not suitable for production. The [CockroachDB {{ site.data.products.cloud }} Service Level Agreement (SLA)](https://cockroachlabs.com/cloud-terms-and-conditions/cockroachcloud-technical-service-level-agreement/) is not applicable to Azure clusters during limited access. Azure clusters are excluded from premium support agreements during limited access, and technical support is only available during business hours.

### Can we create multi-region dedicated clusters on Azure?
### Are multi-region clusters supported?

Not yet. During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability), a cluster can be created only in a single region, and a cluster must have three or more nodes. A cluster's nodes are automatically placed in different [availability zones](https://learn.microsoft.com/en-us/azure/reliability/availability-zones-overview) to ensure resiliency to failure of a single availability zone.
Yes.

### Is it possible to horizontally scale a dedicated cluster on Azure?
### Is horizontal scaling supported?

Not yet.

### What Azure regions can we choose to create the dedicated clusters?
### What Azure regions can we choose?

You can create a cluster in `eastus2` (US East Coast - Virginia) or `westeurope` (Netherlands) during the limited access period. Contact your account team to express interest in other regions.
Refer to [Azure Regions]({% link cockroachcloud/regions.md %}?filters=dedicated#azure-regions).

### What kind of compute and storage resources are used for the dedicated clusters on Azure?
### What kind of compute and storage resources are used?

CockroachDB {{ site.data.products.dedicated }} clusters on Azure use [Dasv5-series VMs](https://learn.microsoft.com/azure/virtual-machines/dasv5-dadsv5-series) and [Premium SSDs](https://learn.microsoft.com/azure/virtual-machines/disks-types#premium-ssds). This configuration was selected for its optimum price-performance ratio after thorough performance testing across VM families and storage types.
{{ site.data.products.dedicated }} clusters on Azure use [Dsv4-series VMs](https://learn.microsoft.com/azure/virtual-machines/dv4-dsv4-series) and [Premium SSDs](https://learn.microsoft.com/azure/virtual-machines/disks-types#premium-ssds). This configuration was selected for its optimum price-performance ratio after thorough performance testing across VM families and storage types.

### We use CockroachDB {{ site.data.products.cloud }} credits to pay for our usage on AWS or GCP. Is it possible to use those same credits for CockroachDB {{ site.data.products.dedicated }} clusters on Azure?
### Can we use {{ site.data.products.db }} credits to pay for clusters on Azure?

Yes, existing CockroachDB {{ site.data.products.cloud }} customers can pay for the usage of CockroachDB {{ site.data.products.dedicated }} clusters on Azure with their available credits. To add additional credits to your CockroachDB {{ site.data.products.cloud }} organization, contact your Cockroach Labs account team.

### Does the CockroachDB {{ site.data.products.cloud }} technical SLA cover the dedicated clusters on Azure?
### Does the CockroachDB {{ site.data.products.cloud }} technical SLA cover clusters on Azure?

During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability), the [CockroachDB {{ site.data.products.cloud }} technical SLA](https://cockroachlabs.com/cloud-terms-and-conditions/cockroachcloud-technical-service-level-agreement/) does not apply to CockroachDB {{ site.data.products.dedicated }} clusters on Azure. For more details about the roadmap, contact your Cockroach Labs account team.

### Are backups available for CockroachDB {{ site.data.products.dedicated }} clusters on Azure? Can we take our own backups to Azure storage in our tenant?

Customers can [take and restore from their own backups on Azure storage]({% link cockroachcloud/take-and-restore-customer-owned-backups.md %}) ([Blob Storage](https://azure.microsoft.com/products/storage/blobs) or [ADLS Gen 2](https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-introduction)). Refer to the blog post [CockroachDB locality-aware Backups for Azure Blob](https://www.cockroachlabs.com/blog/locality-aware-backups-azure-blob/) for an example.
### What backup and restore options are available for clusters on Azure?

[Managed service backups]({% link cockroachcloud/use-managed-service-backups.md %}?filters=dedicated) are not available during the limited access period.
[Managed-service backups]({% link cockroachcloud/use-managed-service-backups.md %}?filters=dedicated) automatically back up clusters on Azure, and customers can [take and restore from manual backups to Azure storage]({% link cockroachcloud/take-and-restore-customer-owned-backups.md %}) ([Blob Storage](https://azure.microsoft.com/products/storage/blobs) or [ADLS Gen 2](https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-introduction)). Refer to the blog post [CockroachDB locality-aware Backups for Azure Blob](https://www.cockroachlabs.com/blog/locality-aware-backups-azure-blob/) for an example.

### Is it possible to take encrypted backups for dedicated clusters in Azure?
### Is it possible to take encrypted backups?

Yes, customers can [take and restore from their own encrypted backups]({% link cockroachcloud/take-and-restore-customer-owned-backups.md %}) on Azure storage by using an RSA key stored in [Azure Key Vault](https://learn.microsoft.com/azure/key-vault/keys/about-keys).
Yes, customers can [take and restore from encrypted backups]({% link cockroachcloud/take-and-restore-customer-owned-backups.md %}) on Azure storage by using an RSA key stored in [Azure Key Vault](https://learn.microsoft.com/azure/key-vault/keys/about-keys).

### Are changefeeds available for dedicated clusters in Azure?
### Are changefeeds available?

Yes, customers can create and configure [changefeeds](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/changefeed-messages) to send data events in real-time from a CockroachDB {{ site.data.products.dedicated }} cluster to a [downstream sink](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/changefeed-sinks.html) such as Kafka, Azure storage, or Webhook. [Azure Event Hubs](https://learn.microsoft.com/azure/event-hubs/azure-event-hubs-kafka-overview) provides an Azure-native service that can be used with a Kafka endpoint as a sink.

### Can we export logs and metrics from a dedicated cluster on Azure to Azure Monitor or a third-party observability service?
### Can we export logs and metrics from a cluster on Azure to Azure Monitor or a third-party observability service?

During [limited access](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/cockroachdb-feature-availability), exporting metrics to Datadog is supported. Refer to [Export Metrics From a CockroachDB {{ site.data.products.dedicated }} Cluster]({% link cockroachcloud/export-metrics.md %}). It’s not possible to export cluster logs or metrics to Azure Monitor or to another third-party observability service during the limited access period. To express interest in this feature, contact your Cockroach Labs account team.

### Are CockroachDB user-defined functions available for dedicated clusters in Azure?
### Are CockroachDB user-defined functions available for clusters on Azure?

Yes, [user-defined functions](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/user-defined-functions) are supported for CockroachDB {{ site.data.products.dedicated }} clusters on Azure. The same CockroachDB binaries are used across CockroachDB {{ site.data.products.cloud }} deployment environments, and all SQL features behave the same on Azure as on GCP or AWS, with the exception of multi-region capabilities during the limited access period.
Yes, [user-defined functions](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/user-defined-functions) are supported for CockroachDB {{ site.data.products.dedicated }} clusters on Azure. The same CockroachDB binaries are used across CockroachDB {{ site.data.products.cloud }} deployment environments, and all SQL features behave the same on Azure as on GCP or AWS.

### Can we use CockroachDB {{ site.data.products.dedicated }} on Azure if we are coming from PostgreSQL?
### Can we migrate from PostgreSQL to CockroachDB {{ site.data.products.dedicated }} on Azure?

CockroachDB supports the [PostgreSQL wire protocol](https://www.postgresql.org/docs/current/protocol.html) and the majority of PostgreSQL syntax. Refer to [Supported SQL Feature Support](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/sql-feature-support). The same CockroachDB binaries are used across CockroachDB {{ site.data.products.cloud }} deployment environments, and all SQL features behave the same on Azure as on GCP or AWS, with the exception of multi-region capabilities during the limited access period.
CockroachDB supports the [PostgreSQL wire protocol](https://www.postgresql.org/docs/current/protocol.html) and the majority of PostgreSQL syntax. Refer to [Supported SQL Feature Support](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/sql-feature-support). The same CockroachDB binaries are used across CockroachDB {{ site.data.products.cloud }} deployment environments, and all SQL features behave the same on Azure as on GCP or AWS.

### How are CockroachDB {{ site.data.products.dedicated }} clusters on Azure isolated from each other? Do they follow a similar approach like on AWS and GCP?
### How are clusters on Azure isolated from each other? Do they follow a similar approach as on AWS and GCP?

We follow a similar tenant isolation approach on Azure as on GCP and AWS. During the limited access period, each CockroachDB {{ site.data.products.dedicated }} cluster is created its own unique Azure subscription on a [AKS cluster](https://azure.microsoft.com/products/kubernetes-service) in a unique [VNet](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview). Implementation details are subject to change.
CockroachDB {{ site.data.products.cloud }} follows a similar tenant isolation approach on Azure as on GCP and AWS. During the limited access period, each {{ site.data.products.dedicated }} cluster is created on an [AKS cluster](https://azure.microsoft.com/products/kubernetes-service) in a unique [VNet](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview). Implementation details are subject to change.

### Can we use Single-Sign On to sign-in to CockroachDB {{ site.data.products.cloud }} and manage CockroachDB {{ site.data.products.dedicated }} clusters on Azure?
### Can we use Single-Sign On to sign-in to {{ site.data.products.db }} and manage clusters on Azure?

Yes, [Cloud Organization SSO]({% link cockroachcloud/cloud-org-sso.md %}) is supported. This feature is unrelated to the cluster's deployment environment.

### Is it possible to use a secure and centralized authentication method for CockroachDB {{ site.data.products.dedicated }} clusters on Azure?
### What secure and centralized authentication methods are available for {{ site.data.products.dedicated }} clusters on Azure?

Human users can connect using [Cluster SSO]({% link cockroachcloud/cloud-sso-sql.md %}), [client certificates](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/authentication.html#using-digital-certificates-with-cockroachdb), or the [`ccloud` command]({% link cockroachcloud/ccloud-get-started.md %}) or SQL clients.

Application users can connect using [JWT tokens](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/sso-sql) or [client certificates](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/authentication.html#using-digital-certificates-with-cockroachdb).

### What is the encryption posture for data stored in a CockroachDB {{ site.data.products.dedicated }} cluster on Azure?
### How is data encrypted at rest in a cluster on Azure?

Customer data at rest on cluster disks is encrypted using [server-side encryption of Azure disk storage](https://learn.microsoft.com/azure/virtual-machines/disk-encryption). CockroachDB’s [file-based encryption at rest](https://www.cockroachlabs.com/docs/{{ site.current_cloud_version }}/security-reference/encryption#cockroachdb-self-hosted-clusters) and [Customer-Managed Encryption Keys (CMEK)]({% link cockroachcloud/cmek.md %}) are not available during the limited access period. To express interest, contact your Cockroach Labs account team.

All client connections to a CockroachDB {{ site.data.products.dedicated }} cluster on Azure, as well as connections between nodes, are encrypted using TLS.

### Are private connectivity methods, such as Private Link, available to securely connect to a CockroachDB {{ site.data.products.dedicated }} cluster on Azure?
### Can we use private connectivity methods, such as Private Link, to securely connect to a cluster on Azure?

You can configure IP allowlisting to limit the IP addresses or CIDR ranges that can access a CockroachDB {{ site.data.products.dedicated }} cluster on Azure. [Azure Private Link](https://learn.microsoft.com/azure/private-link/private-link-overview) is not available during the limited access period. To express interest, contact your Cockroach Labs account team.
18 changes: 13 additions & 5 deletions src/current/cockroachcloud/regions.md
Original file line number Diff line number Diff line change
Expand Up @@ -83,10 +83,18 @@ Western Europe | `eu-central-1` | Frankfurt

CockroachDB {{ site.data.products.cloud }} clusters can be deployed in the following [Azure regions](https://learn.microsoft.com/azure/reliability/availability-zones-overview#regions):

Geographic Area | Region Name | Location
----------------|-----------------|---------
North America | `eastus2` | East Coast - Virginia
Western Europe | `westeurope` | Netherlands
Geographic Area | Region Name | Location
----------------|----------------------|---------
Asia Pacific | `australiaeast` | New South Wales
| `eastasia` | Hong Kong
North America | `centralcanada` | Toronto
| `centralus` | Iowa
| `westus2` | Washington
| `eastus` | Virginia
| `eastus2` | Virginia
Western Europe | `germanywestcentral` | Frankfurt
| `uksouth` | London
| `westeurope` | Netherlands

## GCP regions

Expand Down Expand Up @@ -122,5 +130,5 @@ Western Europe | `europe-central2` | Warsaw
| `europe-west3` | Frankfurt
| `europe-west4` | Eemshaven
| `europe-west6` | Zürich

</section>
Loading

0 comments on commit 41f321c

Please sign in to comment.