Resource that attaches a virtual network gateway to its peer, which may be an ExpressRoute circuit, a second VNet gateway (Vnet2Vnet) or a local network gateway over IPsec. Resetting it recovers a single tunnel and avoids rebooting the whole gateway.
Also called virtual network gateway connection.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Connection in context, with comparison tables and the common traps.
Terms in this definition
- Virtual network gateway
Lives in GatewaySubnet and comes in two types, ExpressRoute or VPN. Setting it as the next hop in a UDR routes traffic on-premises.
- ExpressRoute circuit
The logical link between on-premises and Microsoft, provided by a connectivity partner or through ExpressRoute Direct. A service key identifies it, and it carries both Microsoft and private peering.
- VNet
A private network belonging to a single subscription and region and covering all of that region's availability zones. A VM can only use a VNet located in the same region.
- VNet-to-VNet connection
An IPsec/IKE link joining two Azure VPN gateways. Turning on BGP for it lets chained VNets and sites exchange their prefixes.
- Local network gateway
Represents the on-premises site in Azure, recording the VPN device's public IP and the address prefixes behind it, for use by site-to-site VPN connections. Point-to-site doesn't use it.
- OVER
Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.
- IPsec
Internet Protocol Security is the set of protocols that negotiates and encrypts the tunnels used by VNet-to-VNet and site-to-site VPNs.
Related terms
- Association
Routing setting for a Virtual WAN hub. Each connection is associated with exactly one route table, and that table determines the routes the connection learns.
- AWS IAM
Amazon's service for controlling who can sign in and what they may do across AWS. OneLake's Amazon S3 shortcuts depend on it: the cloud connection behind such a shortcut stores an IAM user's secret access key and its key ID.
- azure-ai-projects
Python SDK for Microsoft Foundry; its AIProjectClient opens a connection to a project, and
telemetry.get_application_insights_connection_string()fetches the connection string of the Application Insights resource linked to that project. - BGP peering with the virtual hub
Virtual WAN capability where a network virtual appliance in a spoke connected directly to the hub runs a BGP session with the hub's router; the spoke's VNet connection must be associated with
defaultRouteTable. - Bindings
Lets an Azure Function receive data from, or send data to, other services just by declaring it (for example reading a blob or putting a message on a queue) rather than writing connection logic. Triggers are really a special case of input binding.
- BingGroundingToolDefinition
In the classic C# agents SDK, the tool definition you create from a Bing connection ID; supply it in the tools list of CreateAgentAsync rather than through ToolResources.
- Circuit authorization
Created by an ExpressRoute circuit's owner, it yields a key that a different subscription redeems to link its gateway to the circuit; each connection needs its own, and no extra circuit is required.
- Codeless Connector Framework
Lets you create SaaS data connectors for Microsoft Sentinel without writing code, by defining four things in sequence: the custom output table, the DCR, the connector's UI and its connection rules.