The logical link between on-premises and Microsoft, provided by a connectivity partner or through ExpressRoute Direct. A service key identifies it, and it carries both Microsoft and private peering.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains ExpressRoute circuit in context, with comparison tables and the common traps.
Terms in this definition
- Logical
Independent of any implementation. Each logical design is made real through a physical counterpart.
- ExpressRoute Direct
A pair of 10 or 100 Gbps ports connecting straight into Microsoft's edge without a connectivity provider. It is the sole circuit type offering MACsec.
- Service key
The GUID identifying an ExpressRoute circuit, which you pass to the connectivity provider. It is not a secret, and charges begin as soon as it is issued.
- Private peering
The ExpressRoute routing domain for reaching Azure VNets from on-premises networks over private addressing. Unless IPsec or MACsec is layered on, the traffic travels unencrypted.
Related terms
- Circuit authorization
Created by an ExpressRoute circuit's owner, it yields a key that a different subscription redeems to link its gateway to the circuit; each connection needs its own, and no extra circuit is required.
- Connection
Resource that attaches a virtual network gateway to its peer, which may be an ExpressRoute circuit, a second VNet gateway (Vnet2Vnet) or a local network gateway over IPsec. Resetting it recovers a single tunnel and avoids rebooting the whole gateway.
- ExpressRoute gateway
Connects a virtual network to an ExpressRoute circuit from inside GatewaySubnet. Only one is allowed per VNet, and VPN traffic needs a separate gateway.
- Geopolitical region
The set of Azure regions that a Standard ExpressRoute circuit is able to reach. Reaching beyond it, or using Global Reach across such regions, calls for ExpressRoute Premium.
- Peering location
Where, physically, an ExpressRoute circuit meets the Microsoft edge. Circuits cannot be pinned to availability zones, so stacking several at one location adds no zone resilience.
- Provider status
State of an ExpressRoute circuit as reported by the connectivity provider: Not provisioned, Provisioning or Provisioned. Peering can be set up only once it reads Provisioned.