What you need to know
Verify route withdrawal when a regional application becomes unavailable.
Potentially affected
Use this review for an approved anycast design with regional NVAs and Route Server. Identify the application health signal that controls each advertised prefix, the alternate destination and the owner of the routing policy.
DSE recommendation
DSE recommends writing a withdrawal criterion that reflects application readiness.
Source facts
Microsoft’s Route Server anycast guidance requires NVAs to stop advertising a route when the local application instance becomes unavailable. The intent is to avoid sending traffic to a failed instance. The same guidance warns that BGP convergence can delay failover, so route-based recovery must be assessed against the application’s recovery requirements. Microsoft Learn.
Applicability
Use this review for an approved anycast design with regional NVAs and Route Server. Identify the application health signal that controls each advertised prefix, the alternate destination and the owner of the routing policy.
DSE recommendation
DSE recommends writing a withdrawal criterion that reflects application readiness. Have the application and network teams agree what observation should remove the local route and what permits its return. Include recovery behavior and return-path requirements in the test plan. Avoid equating appliance uptime with permission to continue advertising a failed application’s address.
Verification
In a controlled rehearsal, make the local application unavailable while leaving the NVA running. Observe the health decision, route withdrawal, remote path change and application recovery timestamps. Restore the service and inspect route readvertisement. Record measured interruption and unresolved session behavior rather than promising immediate or lossless failover.
Official references
Review the official source
Anycast routing with Azure Route Server - Azure Route Server | Microsoft Learn · Verified September 17, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE