ExpressRoute
Establishes a private connection to Azure via a carrier or connectivity provider. It becomes central when core systems, stable bandwidth, and on-premises integration matter.
Landing Zone Network Guide
2 WAN / Connectivity: ER, VPN, vWAN
ExpressRoute, VPN, and Virtual WAN are all connectivity options, but their purposes differ. What matters is deciding the entry point based on the number of sites, bandwidth, SLA, and operational structure.
Key points of this chapter
- ExpressRoute is for private, production-critical use
- VPN suits small-scale, temporary, and auxiliary uses
- Virtual WAN suits consolidating connectivity and route management
Explanation note
First explain the flow with a diagram, then supplement only the key points in text. For those unfamiliar with networking, showing where traffic flows before terminology is effective.
VPN
A method of establishing an encrypted tunnel over the internet. It is convenient for small-scale connections, short-term connections, migration periods, and backup paths.
Virtual WAN
Consolidates ExpressRoute, VPN, P2S, and VNet connections around a vHub. Consider it when standardizing management across many sites and regions.