Virtual network connection

In the Ultra Transcenders books

AZ-700ALZ

Each book explains Virtual network connection in context, with comparison tables and the common traps.

Terms in this definition

• VNet

  A private network belonging to a single subscription and region and covering all of that region's availability zones. A VM can only use a VNet located in the same region.

• Virtual WAN

  A networking service built around hubs that Microsoft manages. The Basic type handles only site-to-site VPN; Standard brings in ExpressRoute, point-to-site and full transit.

• Virtual hub

  Inside a Virtual WAN, a VNet managed by Microsoft that contains the hub router plus the VPN, ExpressRoute and User VPN gateways. Typically there is one per region, but several hubs can share a region.

• Geographic

  A Traffic Manager routing method that picks the endpoint according to where the user is located geographically.

• Association

  Routing setting for a Virtual WAN hub. Each connection is associated with exactly one route table, and that table determines the routes the connection learns.

• Propagation

  Setting on a Virtual WAN hub connection naming which route tables or labels receive the connection's prefixes.

• Virtual network gateway

  Lives in GatewaySubnet and comes in two types, ExpressRoute or VPN. Setting it as the next hop in a UDR routes traffic on-premises.

Related terms

• Static route (Virtual WAN)

  A route placed in a Virtual WAN hub route table or on a virtual network connection, with its next hop set to an NVA IP, Azure Firewall or a connection. It is how indirect spokes behind an NVA are reached.

• Virtual WAN static route

  Sends chosen prefixes to a next hop like an NVA's IP address in a spoke, configured on a hub route table or a virtual network connection. Put it on the connection belonging to the VNet that hosts the NVA.