Azure VPN Gateway

Connect your on-premises networks securely to Azure virtual networks through a VPN tunnel. Azure VPN Gateway provides a highly available and scalable solution for hybrid cloud connectivity.

Key Features and Benefits

Secure Hybrid Connectivity

Establish encrypted connections between your on-premises infrastructure and Azure, ensuring data privacy and integrity.

Scalability and Performance

Choose from a range of gateway SKUs to match your performance and throughput requirements, from basic to high-performance options.

High Availability

Benefit from built-in redundancy with active-active and active-standby configurations to ensure continuous connectivity.

Global Reach

Leverage Azure's global network to connect your resources across different geographical regions.

Site-to-Site, Point-to-Site, and VNet-to-VNet VPNs

Support for various VPN scenarios to cater to diverse connectivity needs.

Common Use Cases

Hybrid Cloud Integration: Seamlessly extend your on-premises data center to Azure.
Disaster Recovery: Create a resilient architecture with your primary site on-premises and a secondary site in Azure.
Secure Data Transfer: Transmit sensitive data between your environments with end-to-end encryption.
Remote Access: Allow employees to securely connect to Azure resources from anywhere.

Getting Started

Learn how to deploy and configure your Azure VPN Gateway:

Create a VPN Gateway Tutorial VPN Gateway Documentation

Configuration Examples

Here's a basic example of defining a VPN gateway resource in ARM templates:


{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "vpnGatewayName": {
            "type": "string",
            "metadata": {
                "description": "Name of the VPN Gateway."
            }
        },
        "location": {
            "type": "string",
            "defaultValue": "[resourceGroup().location]",
            "metadata": {
                "description": "Location for the VPN Gateway."
            }
        },
        "virtualNetworkGatewayType": {
            "type": "string",
            "defaultValue": "Vpn",
            "allowedValues": [
                "Vpn",
                "ExpressRoute"
            ],
            "metadata": {
                "description": "The type of the virtual network gateway."
            }
        },
        "vpnGatewaySku": {
            "type": "string",
            "defaultValue": "VpnGw1",
            "metadata": {
                "description": "The SKU of the VPN Gateway."
            }
        }
    },
    "resources": [
        {
            "type": "Microsoft.Network/virtualNetworkGateways",
            "apiVersion": "2021-03-01",
            "name": "[parameters('vpnGatewayName')]",
            "location": "[parameters('location')]",
            "properties": {
                "ipConfigurations": [
                    {
                        "name": "vnetGatewayConfig",
                        "properties": {
                            "subnet": {
                                "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('vnetName'), parameters('gatewaySubnetName'))]"
                            },
                            "publicIPAddress": {
                                "id": "[resourceId('Microsoft.Network/publicIPAddresses', parameters('publicIpName'))]"
                            }
                        }
                    }
                ],
                "gatewayType": "[parameters('virtualNetworkGatewayType')]",
                "sku": {
                    "name": "[parameters('vpnGatewaySku')]",
                    "tier": "[parameters('vpnGatewaySku')]"
                },
                "enableBgp": false,
                "activeActive": false
            }
        }
    ],
    "outputs": {
        "vpnGatewayId": {
            "type": "string",
            "value": "[resourceId('Microsoft.Network/virtualNetworkGateways', parameters('vpnGatewayName'))]"
        }
    }
}

Learn More

Explore related Azure networking services: