Virtual WAN Service Limits
The following tables outline the current limits for Azure Virtual WAN resources. Limits are subject to change; consult the official Azure documentation for the most up‑to‑date information.
Hub Limits
| Resource | Limit | Notes |
|---|
| Virtual WAN hubs per subscription | 200 | Can be increased via support request. |
| Virtual hubs per Virtual WAN | 150 | |
| IPSec tunnels per hub | 1,000 | |
| Branch connections per hub | 5,000 | |
| Site-to-site VPN tunnels per hub | 1,000 | |
| Max hub size (Standard SKUs) | 250 GB | |
Site Limits
| Resource | Limit | Notes |
|---|
| Sites (branches) per subscription | 5,000 | |
| Sites per hub | 5,000 | |
| VPN device configuration profiles per site | 5 | |
Connection Limits
| Connection Type | Limit | Notes |
|---|
| VPN (IPSec) connections per hub | 4,000 | |
| ExpressRoute connections per hub | 10 | |
| VNet peering per hub | 1,000 | |
| Point‑to‑site VPN users per hub | 500 | Enterprise SKU supports up to 5,000. |
Other Limits
| Resource | Limit | Notes |
|---|
| Route tables per hub | 200 | |
| Custom BGP community tags per hub | 100 | |
| Maximum policy rules per hub | 1,000 | |
| Azure Firewall policies per hub (Standard) | 50 | |
| Azure Firewall policies per hub (Premium) | 100 | |
For detailed guidance on increasing limits, see Requesting limit increases.