Software Development, System Integration

By Author: Oakridge Infotech
Total Articles: 1
Comment this article

This architecture is suitable for hybrid applications where the traffic between on-premises hardware and the cloud is likely to be light, or it is beneficial to trade slightly extended latency for the flexibility and processing power of the cloud.
Benefits:
· Simple to configure.
Considerations:
· Requires an on-premises VPN device.
· Although Microsoft guarantee 99.9% availability for each VPN Gateway, this SLA only covers the VPN gateway, and not your network connection to the gateway.
· A VPN connection over Azure VPN Gateway currently supports a maximum of 200 Mbps bandwidth. You may need to partition your Azure virtual network across multiple VPN connections if you expect to exceed this throughput.
Using an Azure ExpressRoute connection
ExpressRoute connections are high bandwidth network connections that use a private dedicated link made through a third-party connectivity provider. The private connection extends your on-premises network into Azure providing access to your own IaaS infrastructure in Azure, public endpoints used in PaaS services, ...
... and Office365 SaaS services.
This architecture is suitable for hybrid applications with the following characteristics:
· Applications running large-scale, mission-critical workloads that require a high degree of scalability.
· Large-scale backup and restore facilities for data that must be saved off-site.
· Handling Big Data workloads.
· Using Azure as a disaster-recovery site.
Benefits of using an ExpressRoute connections:
· Much higher bandwidth available; up to 10 Gbps depending on the connectivity provider.
· Supports dynamic scaling of bandwidth to help reduce costs during periods of lower demand. However, not all connectivity providers have this option.
· May allow your organization direct access to national clouds, depending on the connectivity provider.
· 99.9% availability SLA across the entire connection.
Considerations for using an ExpressRoute connection:
· Can be complex to set up. Creating an ExpressRoute connection requires working with a third-party connectivity provider. The provider is responsible for provisioning the network connection.
· Requires high bandwidth routers on-premises.
Using Azure VPN Gateway to provide a failover connection for Azure ExpressRoute
Any network can suffer outages. If you are running mission critical services in Azure, you will require a fallback position , possibly with reduced bandwidth. For example, you can provide a VPN connection alongside an ExpressRoute circuit. Under normal circumstances, the traffic flows between the on-premises network and an Azure virtual network through the ExpressRoute connection. If there is a loss of connectivity in the ExpressRoute circuit, traffic will be routed through an IPSec VPN tunnel instead.
Benefits of using a failover VPN connection:
· High availability in the event of an ExpressRoute circuit failure, although the fallback connection is on a lower bandwidth network.
Considerations for using a failover VPN connection:
· Complex to configure. You need to set up both a VPN connection and an ExpressRoute circuit.
Requires redundant hardware (VPN appliances), and a redundant Azure VPN Gateway connection for which you pay charges.