secure hub connectivity with second secure hub for DR region is not supported with in the virtual wan. Does this connectivity work with Express Route ckt's ?

Hello @Ravichander Pinnaca , I understand that you wanted to know if Secured Hub connectivity with second Secured Hub for DR region work with Express Route circuits. I discussed this with the Azure Virtual WAN Product Group team and below is their update: Yes, but this only applies for VNET to VNET traffic and is not an architecture we recommend to customers. Kindly let us know if the above helps or you need further assistance on this issue. ---------------------------------------------------------------------------------------------------------------- Please " Accept the answer " if the information helped you. This will help us and others in the community as well.

connectivity between secure hubs for DC & DR region is not supported.

Accepted answer

GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee

2022-11-15T17:39:37.247+00:00

Hello @Ravichander Pinnaca ,

I understand that you wanted to know if Secured Hub connectivity with second Secured Hub for DR region work with Express Route circuits.

I discussed this with the Azure Virtual WAN Product Group team and below is their update:

Yes, but this only applies for VNET to VNET traffic and is not an architecture we recommend to customers.

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Ravichander Pinnaca 26 Reputation points

2022-11-15T19:57:14.687+00:00

pls share the recommended architecture. We need to regions for DC & DR. We designed to user vWAN with Secure Hub in each region. Do you recommend using same vWAN in East US 2 to create two secure hubs across regions? for DC & DR requirement ?

GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee

2022-11-17T14:03:31.343+00:00

Hello @Ravichander Pinnaca ,

I checked with the vWAN Product Group team regarding this and below is their response:

There is no recommended architecture besides using routing intent for inter-region traffic inspection.

However as mentioned in our public doc, Inter-hub inspection for Virtual WAN hubs that are in different Azure regions is available on a limited basis. For a list of available regions, please email previewinterhub@mcirosoft.com.
Refer : https://video2.skills-academy.com/en-us/azure/virtual-wan/how-to-routing-policies#troubleshooting-data-path

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Ravichander Pinnaca 26 Reputation points

2022-11-24T17:33:47.61+00:00

Same thing is supported with Traditional Hub & Spoke Setup with Azure Firewall in Hub Vnets across regions and point UDR in Firewall subnet for cross regions through azure firewall using global vnet peering between Hub Vnets. Spoke vnets to connect to Hub vnet with UDR and route propagation disabled.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

connectivity between secure hubs for DC & DR region is not supported.

0 additional answers

Your answer