Reader small image

You're reading from  Designing and Implementing Microsoft Azure Networking Solutions

Product typeBook
Published inAug 2023
PublisherPackt
ISBN-139781803242033
Edition1st Edition
Tools
Concepts
Right arrow
Author (1)
David Okeyode
David Okeyode
author image
David Okeyode

David is the EMEA Azure CTO at Palo Alto Networks. Before that, he was an independent consultant helping companies secure their Azure environments through private expert level trainings and assessments. He has authored two books on Azure security - "Penetration Testing Azure for Ethical Hackers" and "Microsoft Azure Security Technologies Certification and Beyond. He has also authored multiple cloud computing courses for popular platforms like LinkedIn Learning. He holds over 15 cloud certifications and has over a decade of experience in Cybersecurity (consultancy, design, implementation). David is married to a lovely girl who makes the best banana cake in the world. They love travelling the world together!
Read more about David Okeyode

Right arrow

Connecting VNets using a VPN gateway connection

The second option for connecting two VNets is to use a VPN gateway connection. This option uses Azure VPN Gateway to provide a secure IPsec/IKE tunnel to the target VNet. It is not as easy to implement, as it requires a VPN gateway with a public IP to be deployed in the VNets (Figure 4.8). Deploying the gateway could take around 40 minutes.

Also, unlike VNet peering, the traffic is routed over the public internet and not privately via the Microsoft backbone:

Figure 4.8 – Traffic is routed over the public internet

Figure 4.8 – Traffic is routed over the public internet

So why would we use this option if it is more complex to implement and if it is routed over the public internet? The main advantage of this option is that the traffic flow between the VNets is encrypted using IKE, and this may be a security or compliance requirement for specific use cases that we have.

When implementing the VPN gateway to connect two VNets, there are two connection types...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
Designing and Implementing Microsoft Azure Networking Solutions
Published in: Aug 2023Publisher: PacktISBN-13: 9781803242033

Author (1)

author image
David Okeyode

David is the EMEA Azure CTO at Palo Alto Networks. Before that, he was an independent consultant helping companies secure their Azure environments through private expert level trainings and assessments. He has authored two books on Azure security - "Penetration Testing Azure for Ethical Hackers" and "Microsoft Azure Security Technologies Certification and Beyond. He has also authored multiple cloud computing courses for popular platforms like LinkedIn Learning. He holds over 15 cloud certifications and has over a decade of experience in Cybersecurity (consultancy, design, implementation). David is married to a lovely girl who makes the best banana cake in the world. They love travelling the world together!
Read more about David Okeyode