Azure Virtual WAN Overview

Azure Virtual WAN is a networking service that brings many networking, security, and routing functionalities together in a single operational interface. This hub-and-spoke architecture is built for hyperscale connectivity and optimized for the Microsoft Azure environment. It provides a unified global network that connects your on-premises sites, remote users, and branch offices, enabling seamless connectivity to Azure resources.

What is Azure Virtual WAN?

Azure Virtual WAN simplifies the management of your wide area network (WAN). It offers:

Branch Connectivity: Connect your on-premises branch offices to Azure securely and reliably using Site-to-Site VPNs.
Remote User Connectivity: Enable remote users to connect to Azure resources securely using Point-to-Site VPNs or Azure Virtual Desktop.
ExpressRoute Connectivity: Integrate your ExpressRoute circuits for dedicated, high-bandwidth connections.
Global Transit Network: Virtual WAN acts as a global transit network, allowing spokes (VNets) to communicate with each other, regardless of their region.
Centralized Security: Integrate with Azure Firewall and Network Security Groups (NSGs) for comprehensive security policies across your network.
Optimized Routing: Leverage intelligent routing to direct traffic efficiently between your branches, users, and Azure.

Conceptual diagram of Azure Virtual WAN architecture.

Key Components

Azure Virtual WAN consists of several key components:

Virtual WAN Hub: A Microsoft-managed network hub deployed in an Azure region. It serves as the central point of connectivity for your network.
Virtual Hub Connections: Connections that link your Virtual Networks (VNet) and on-premises sites to the Virtual WAN hub.
VPN Devices: On-premises VPN devices that establish secure tunnels to the Virtual WAN hub.
Azure VPN Client: Software installed on remote user devices for secure VPN connections.

Benefits of Using Virtual WAN

Simplified Management: A single pane of glass for managing your global WAN.
Scalability: Built for hyperscale, easily accommodating growing network needs.
Cost-Effective: Optimized traffic flow can reduce data egress costs.
Enhanced Security: Centralized security policies and integration with Azure Firewall.
Improved Performance: Intelligent routing and global backbone connectivity.

Note: Virtual WAN is designed for organizations that require a scalable, globally connected network with simplified management and centralized security.

Use Cases

Azure Virtual WAN is ideal for various scenarios:

Connecting multiple branch offices to Azure and to each other.
Enabling secure remote access for employees.
Migrating workloads to Azure while maintaining seamless on-premises connectivity.
Implementing a hub-and-spoke network topology.

Tip: For a hands-on experience, explore the deployment guide to set up your first Virtual WAN hub and connect your resources.

Next Steps

To learn more about specific functionalities and how to implement Virtual WAN, consider the following: