{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "slug": "dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state", "url": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/" }, "title": "Do not schedule a full Service Fabric shutdown around ephemeral cluster state", "summary": "Why can stopping every Service Fabric node make a later restart unrecoverable?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:28:57+00:00", "modified_at": "2026-09-10T00:55:36+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 242, "potentially_affected": "Service Fabric clusters storing state on local ephemeral disks.", "dse_recommendation": "DSE recommends excluding these stateful clusters from blanket all-node shutdown schedules.", "primary_source": { "name": "Common questions about Microsoft Azure Service Fabric - Azure Service Fabric | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-common-questions", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft warns against routinely stopping every node in a Service Fabric cluster whose state resides on local ephemeral disks. If a VM returns on another host, its local state does not follow it. A replacement node normally catches up from other nodes, but stopping them all can leave too many restarted nodes without the state needed to recover the cluster. Microsoft Learn.

\n

Applicability

\n

Check the actual state location and shutdown scope before applying a VM scheduling rule. This question is about losing the cluster’s surviving state copies together, not whether an individual guest can perform an orderly operating-system shutdown. Do not infer recoverability from a list of powered-off VM resources.

\n

DSE recommendation

\n

DSE recommends excluding these stateful clusters from blanket all-node shutdown schedules. Have the cluster owner review the proposed operating model and documented maintenance path. For disposable application testing, consider the source’s approach of creating test clusters through the delivery pipeline instead of relying on a stopped cluster to retain state. Keep any retained application data and recovery requirements explicit.

\n

Verification

\n

Review the scheduler’s target inventory and confirm that the exception covers every relevant node type. Rehearse replacement and recovery only in a disposable cluster with appropriate test data. Validate the application’s state after reconstruction and retain the result. Do not test the warning by stopping an entire production cluster, and do not report an untested restart plan as a recovery capability.

\n

Official references

\n

Microsoft Learn. Source retrieved September 9, 2026.

", "content_text": "Source facts\nMicrosoft warns against routinely stopping every node in a Service Fabric cluster whose state resides on local ephemeral disks. If a VM returns on another host, its local state does not follow it. A replacement node normally catches up from other nodes, but stopping them all can leave too many restarted nodes without the state needed to recover the cluster. Microsoft Learn.\nApplicability\nCheck the actual state location and shutdown scope before applying a VM scheduling rule. This question is about losing the cluster’s surviving state copies together, not whether an individual guest can perform an orderly operating-system shutdown. Do not infer recoverability from a list of powered-off VM resources.\nDSE recommendation\nDSE recommends excluding these stateful clusters from blanket all-node shutdown schedules. Have the cluster owner review the proposed operating model and documented maintenance path. For disposable application testing, consider the source’s approach of creating test clusters through the delivery pipeline instead of relying on a stopped cluster to retain state. Keep any retained application data and recovery requirements explicit.\nVerification\nReview the scheduler’s target inventory and confirm that the exception covers every relevant node type. Rehearse replacement and recovery only in a disposable cluster with appropriate test data. Validate the application’s state after reconstruction and retain the result. Do not test the warning by stopping an entire production cluster, and do not report an untested restart plan as a recovery capability.\nOfficial references\nMicrosoft Learn. Source retrieved September 9, 2026.", "content_markdown": "## Source facts\n\nMicrosoft warns against routinely stopping every node in a Service Fabric cluster whose state resides on local ephemeral disks. If a VM returns on another host, its local state does not follow it. A replacement node normally catches up from other nodes, but stopping them all can leave too many restarted nodes without the state needed to recover the cluster. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-common-questions).\n\n## Applicability\n\nCheck the actual state location and shutdown scope before applying a VM scheduling rule. This question is about losing the cluster’s surviving state copies together, not whether an individual guest can perform an orderly operating-system shutdown. Do not infer recoverability from a list of powered-off VM resources.\n\n## DSE recommendation\n\nDSE recommends excluding these stateful clusters from blanket all-node shutdown schedules. Have the cluster owner review the proposed operating model and documented maintenance path. For disposable application testing, consider the source’s approach of creating test clusters through the delivery pipeline instead of relying on a stopped cluster to retain state. Keep any retained application data and recovery requirements explicit.\n\n## Verification\n\nReview the scheduler’s target inventory and confirm that the exception covers every relevant node type. Rehearse replacement and recovery only in a disposable cluster with appropriate test data. Validate the application’s state after reconstruction and retain the result. Do not test the warning by stopping an entire production cluster, and do not report an untested restart plan as a recovery capability.\n\n## Official references\n\n[Microsoft Learn](https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-common-questions). Source retrieved September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "url": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Do not schedule a full Service Fabric shutdown around ephemeral cluster state", "item": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "url": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/", "headline": "Do not schedule a full Service Fabric shutdown around ephemeral cluster state", "description": "Why can stopping every Service Fabric node make a later restart unrecoverable?", "abstract": "Why can stopping every Service Fabric node make a later restart unrecoverable?", "articleBody": "Source facts\nMicrosoft warns against routinely stopping every node in a Service Fabric cluster whose state resides on local ephemeral disks. If a VM returns on another host, its local state does not follow it. A replacement node normally catches up from other nodes, but stopping them all can leave too many restarted nodes without the state needed to recover the cluster. Microsoft Learn.\nApplicability\nCheck the actual state location and shutdown scope before applying a VM scheduling rule. This question is about losing the cluster’s surviving state copies together, not whether an individual guest can perform an orderly operating-system shutdown. Do not infer recoverability from a list of powered-off VM resources.\nDSE recommendation\nDSE recommends excluding these stateful clusters from blanket all-node shutdown schedules. Have the cluster owner review the proposed operating model and documented maintenance path. For disposable application testing, consider the source’s approach of creating test clusters through the delivery pipeline instead of relying on a stopped cluster to retain state. Keep any retained application data and recovery requirements explicit.\nVerification\nReview the scheduler’s target inventory and confirm that the exception covers every relevant node type. Rehearse replacement and recovery only in a disposable cluster with appropriate test data. Validate the application’s state after reconstruction and retain the result. Do not test the warning by stopping an entire production cluster, and do not report an untested restart plan as a recovery capability.\nOfficial references\nMicrosoft Learn. Source retrieved September 9, 2026.", "datePublished": "2026-09-10T00:28:57+00:00", "dateModified": "2026-09-10T00:55:36+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-179-do-not-schedule-a-full-service-fabric-shutdown-around-ephemeral-cluster-state/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Do not schedule a full Service Fabric shutdown around ephemeral cluster state" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 242, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Common questions about Microsoft Azure Service Fabric - Azure Service Fabric | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-common-questions" } } ] } }