{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "slug": "dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts", "url": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/" }, "title": "Account for zonal upgrade sequencing in Service Fabric timeouts", "summary": "Hierarchical and Parallel zonal modes group upgrade domains differently; faster cross-zone progression is not equivalent to zone-by-zone rollout.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:27:05+00:00", "modified_at": "2026-09-10T01:23:49+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 279, "potentially_affected": "Azure Service Fabric node types configured to span multiple Availability Zones.", "dse_recommendation": "Review upgrade-domain grouping and timeout budgets together, retaining zone-by-zone progression where the design requires it.", "primary_source": { "name": "Deploy a cluster across Availability Zones - Azure Service Fabric | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cross-availability-zones", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

For a multi-zone Service Fabric node type, sfZonalUpgradeMode set to Hierarchical, also used when the setting is omitted, groups nodes into up to fifteen upgrade domains: five in each of three zones. It completes one zone’s domains before moving to the next.

\n

Parallel mode instead uses five upgrade domains across zones and upgrades them without preserving that zonal sequence. Microsoft discourages it for safe-deployment reasons. The guidance also warns that hierarchical grouping slows cluster and application deployments, requiring timeout-policy review.

\n

sfZonalUpgradeMode cannot be changed once a multi-zone node type exists. It controls Service Fabric application and code upgrades, not the underlying scale-set upgrades; vmssZonalUpgradeMode governs the latter separately. Microsoft Learn.

\n

Applicability

\n

Confirm the existing multi-zone configuration and supported cluster prerequisites. For a new design, select the grouping before creation; this article does not provide a migration procedure or authorize changing an immutable property.

\n

DSE recommendation

\n

DSE recommends documenting the configured upgrade-domain progression before reviewing timeout budgets. Compare application health gates and cluster code-upgrade timing with that progression. Do not propose Parallel merely to hide a timeout; assess any different design through a supported migration plan. Set an approved time budget and stopping conditions based on the intended model and a representative test.

\n

Verification

\n

Observe a controlled upgrade and retain domain order, zone membership, health decisions and elapsed time. Check that the expected sequence actually occurred, not just that the final version was reached. Investigate a timeout by locating the delayed domain and health gate. Approve a revised budget only after it supports the intended progression without discarding the checks that make the rollout acceptable.

\n

Official references

\n

Microsoft Learn: Deploy a cluster across Availability Zones. Source retrieved September 9, 2026.

", "content_text": "Source facts\nFor a multi-zone Service Fabric node type, sfZonalUpgradeMode set to Hierarchical, also used when the setting is omitted, groups nodes into up to fifteen upgrade domains: five in each of three zones. It completes one zone’s domains before moving to the next.\nParallel mode instead uses five upgrade domains across zones and upgrades them without preserving that zonal sequence. Microsoft discourages it for safe-deployment reasons. The guidance also warns that hierarchical grouping slows cluster and application deployments, requiring timeout-policy review.\nsfZonalUpgradeMode cannot be changed once a multi-zone node type exists. It controls Service Fabric application and code upgrades, not the underlying scale-set upgrades; vmssZonalUpgradeMode governs the latter separately. Microsoft Learn.\nApplicability\nConfirm the existing multi-zone configuration and supported cluster prerequisites. For a new design, select the grouping before creation; this article does not provide a migration procedure or authorize changing an immutable property.\nDSE recommendation\nDSE recommends documenting the configured upgrade-domain progression before reviewing timeout budgets. Compare application health gates and cluster code-upgrade timing with that progression. Do not propose Parallel merely to hide a timeout; assess any different design through a supported migration plan. Set an approved time budget and stopping conditions based on the intended model and a representative test.\nVerification\nObserve a controlled upgrade and retain domain order, zone membership, health decisions and elapsed time. Check that the expected sequence actually occurred, not just that the final version was reached. Investigate a timeout by locating the delayed domain and health gate. Approve a revised budget only after it supports the intended progression without discarding the checks that make the rollout acceptable.\nOfficial references\nMicrosoft Learn: Deploy a cluster across Availability Zones. Source retrieved September 9, 2026.", "content_markdown": "## Source facts\n\nFor a multi-zone Service Fabric node type, sfZonalUpgradeMode set to Hierarchical, also used when the setting is omitted, groups nodes into up to fifteen upgrade domains: five in each of three zones. It completes one zone’s domains before moving to the next.\n\nParallel mode instead uses five upgrade domains across zones and upgrades them without preserving that zonal sequence. Microsoft discourages it for safe-deployment reasons. The guidance also warns that hierarchical grouping slows cluster and application deployments, requiring timeout-policy review.\n\nsfZonalUpgradeMode cannot be changed once a multi-zone node type exists. It controls Service Fabric application and code upgrades, not the underlying scale-set upgrades; vmssZonalUpgradeMode governs the latter separately. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cross-availability-zones).\n\n## Applicability\n\nConfirm the existing multi-zone configuration and supported cluster prerequisites. For a new design, select the grouping before creation; this article does not provide a migration procedure or authorize changing an immutable property.\n\n## DSE recommendation\n\nDSE recommends documenting the configured upgrade-domain progression before reviewing timeout budgets. Compare application health gates and cluster code-upgrade timing with that progression. Do not propose Parallel merely to hide a timeout; assess any different design through a supported migration plan. Set an approved time budget and stopping conditions based on the intended model and a representative test.\n\n## Verification\n\nObserve a controlled upgrade and retain domain order, zone membership, health decisions and elapsed time. Check that the expected sequence actually occurred, not just that the final version was reached. Investigate a timeout by locating the delayed domain and health gate. Approve a revised budget only after it supports the intended progression without discarding the checks that make the rollout acceptable.\n\n## Official references\n\n[Microsoft Learn: Deploy a cluster across Availability Zones](https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cross-availability-zones). Source retrieved September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "url": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Account for zonal upgrade sequencing in Service Fabric timeouts", "item": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "url": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/", "headline": "Account for zonal upgrade sequencing in Service Fabric timeouts", "description": "Hierarchical and Parallel zonal modes group upgrade domains differently; faster cross-zone progression is not equivalent to zone-by-zone rollout.", "abstract": "Hierarchical and Parallel zonal modes group upgrade domains differently; faster cross-zone progression is not equivalent to zone-by-zone rollout.", "articleBody": "Source facts\nFor a multi-zone Service Fabric node type, sfZonalUpgradeMode set to Hierarchical, also used when the setting is omitted, groups nodes into up to fifteen upgrade domains: five in each of three zones. It completes one zone’s domains before moving to the next.\nParallel mode instead uses five upgrade domains across zones and upgrades them without preserving that zonal sequence. Microsoft discourages it for safe-deployment reasons. The guidance also warns that hierarchical grouping slows cluster and application deployments, requiring timeout-policy review.\nsfZonalUpgradeMode cannot be changed once a multi-zone node type exists. It controls Service Fabric application and code upgrades, not the underlying scale-set upgrades; vmssZonalUpgradeMode governs the latter separately. Microsoft Learn.\nApplicability\nConfirm the existing multi-zone configuration and supported cluster prerequisites. For a new design, select the grouping before creation; this article does not provide a migration procedure or authorize changing an immutable property.\nDSE recommendation\nDSE recommends documenting the configured upgrade-domain progression before reviewing timeout budgets. Compare application health gates and cluster code-upgrade timing with that progression. Do not propose Parallel merely to hide a timeout; assess any different design through a supported migration plan. Set an approved time budget and stopping conditions based on the intended model and a representative test.\nVerification\nObserve a controlled upgrade and retain domain order, zone membership, health decisions and elapsed time. Check that the expected sequence actually occurred, not just that the final version was reached. Investigate a timeout by locating the delayed domain and health gate. Approve a revised budget only after it supports the intended progression without discarding the checks that make the rollout acceptable.\nOfficial references\nMicrosoft Learn: Deploy a cluster across Availability Zones. Source retrieved September 9, 2026.", "datePublished": "2026-09-10T00:27:05+00:00", "dateModified": "2026-09-10T01:23:49+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-291-account-for-zonal-upgrade-sequencing-in-service-fabric-timeouts/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Account for zonal upgrade sequencing in Service Fabric timeouts" }, "articleSection": [ "Cybersecurity", "Networks & Infrastructure" ], "keywords": [ "Cybersecurity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 279, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Deploy a cluster across Availability Zones - Azure Service Fabric | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cross-availability-zones" } } ] } }