What you need to know
How should active and standby gateway membership be reviewed in an SDN RAS pool?
Potentially affected
Use this review for an SDN multitenant gateway design.
DSE recommendation
Document which active gateway failures the proposed standby allocation must cover.
Source facts
Microsoft describes multitenant RAS Gateway as routing traffic between virtual and physical networks for enterprises or service providers. Gateway pools use M active virtual gateways with N standby gateways; N cannot exceed M. In the documented deployment, pools sit behind a software load balancer, and a tenant can have connections ending on different pools or gateways. Microsoft documentation.
Applicability
Use this review for an SDN multitenant gateway design. Identify the intended gateway function, pool membership, and tenant connection paths. Confirm the current supported deployment requirements before applying the architectural example.
DSE recommendation
Document which active gateway failures the proposed standby allocation must cover. Name the tenant connections that would be included in a controlled failover exercise and the acceptable interruption for each. Ask the network owner to review placement and available capacity alongside the gateway count. Preserve the original pool design and assign responsibility for restoring standby capacity after an incident.
Verification
During an approved exercise, record active and standby membership before and after the selected failure. Test representative tenant connections and compare the interruption with the approved objective. Check the restored steady state separately from initial recovery. Retain unsuccessful connections and capacity concerns as findings requiring follow-up.
Official references
Microsoft Learn: RAS Gateway High Availability. Source reviewed September 8, 2026.
Review the official source
RAS Gateway High Availability · Verified September 8, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE