Azure VPN Gateway
Azure VPN Gateway is a service that you can use to send encrypted traffic between your on-premises networks and your Azure Virtual Network, or between two or more Azure Virtual Networks. VPN Gateway can also be used to connect to other Azure services, such as Azure Bastion or Azure Kubernetes Service.
What is VPN Gateway?
VPN Gateway is a type of virtual network gateway that sends encrypted traffic across public networks. It's a managed service that allows you to establish secure site-to-site (S2S), network-to-network (N2N), or point-to-site (P2S) VPN connections.
Key Concepts
- Site-to-Site (S2S) VPN: Connects your on-premises network to Azure. This typically involves a VPN device at your on-premises location and a VPN gateway in Azure.
- Network-to-Network (N2N) VPN: Connects two or more Azure Virtual Networks together.
- Point-to-Site (P2S) VPN: Allows individual client devices to connect to your Azure Virtual Network.
- Connection Types: VPN Gateway supports both IPsec/IKE (for traditional VPN connections) and SSL/TLS (for P2S connections).
- SKUs: VPN Gateway offers various SKUs (e.g., Basic, VpnGw1, VpnGw2, etc.) that determine performance, features, and cost.
Use Cases
VPN Gateway is essential for scenarios such as:
- Hybrid Cloud Connectivity: Seamlessly extend your on-premises datacenter to Azure.
- Disaster Recovery: Establish backup connectivity to your Azure resources.
- Secure Data Transfer: Ensure sensitive data is transmitted securely over the internet.
- Global Network Connectivity: Connect geographically dispersed Azure Virtual Networks.
Creating a VPN Gateway
You can create a VPN gateway through the Azure portal, Azure CLI, or Azure PowerShell. The process typically involves:
- Creating a Virtual Network Gateway resource.
- Configuring gateway type, VPN type, and SKU.
- Associating it with a gateway subnet within your Virtual Network.
- Creating connections to other networks or sites.
VPN Gateway SKUs and Performance
The choice of SKU significantly impacts the throughput and features available. Below is a simplified overview:
| SKU | Max Tunnels | Throughput (Gbps) | Features |
|---|---|---|---|
| Basic | 10 | ~100 Mbps | Basic S2S and P2S |
| VpnGw1 | 30 | ~1.25 Gbps | Standard S2S, P2S, N2N |
| VpnGw2 | 120 | ~5 Gbps | Enhanced S2S, P2S, N2N, Active-Active |
Refer to the official Azure VPN Gateway SKU documentation for the most up-to-date details.
Monitoring and Troubleshooting
Azure Monitor provides comprehensive tools to monitor your VPN Gateway's health and performance. You can track metrics like:
- Data In/Out
- Tunnel Status
- CPU Utilization
- Packet Drops