What are the steps and the procedure for VNET peering to avoid bringing down the entire network?

EnterpriseArchitect 5,036 Reputation points
2023-10-09T12:17:10.7666667+00:00

Folks,

I require some help and guidance to perform the VNET peering of my Azure VM, Azure SQL DBs and Web Apps Private Endpoint with the existing ExpressRoute VNET.

My existing corporate network and the production data centre OnPremises are connected via the ExpressRoute circuit, so I wonder what the caveats to take before peering with this hub VNET?

Thank you.

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,267 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
484 questions
Azure Network Watcher
Azure Network Watcher
An Azure service that is used to monitor, diagnose, and gain insights into network performance and health.
161 questions
Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
342 questions
0 comments
Accepted answer
  1. GitaraniSharma-MSFT 49,261 Reputation points Microsoft Employee
    2023-10-13T15:45:50.81+00:00

    Hello @EnterpriseArchitect ,

    I understand that you need some help and guidance to perform the VNET peering of my Azure VM, Azure SQL DBs and Web Apps Private Endpoint with the existing ExpressRoute VNET.

    You can setup the environment with Hub and Spoke architecture.

    In this case, you can configure the Vnet peering as per the below recommendation:

    https://video2.skills-academy.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#spoke-connections-to-remote-networks-through-a-hub-gateway

    https://video2.skills-academy.com/en-us/azure/expressroute/expressroute-faqs#how-are-virtual-networks-advertised-on-expressroute-private-peeringenter image description here

    You must make sure that the address spaces don't overlap across cross-premises locations and Azure locations.

    Refer: https://video2.skills-academy.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#private-ip-address-costs

    Other things to note:

    Requirements and constraints of Vnet peering:

    https://video2.skills-academy.com/en-us/azure/virtual-network/virtual-network-manage-peering?tabs=peering-portal#requirements-and-constraints

    You can't specify a virtual network gateway created as type ExpressRoute in a user-defined route because with ExpressRoute, you must use BGP for custom routes. You can't specify Virtual Network Gateways if you have VPN and ExpressRoute coexisting connections either.

    Refer: https://video2.skills-academy.com/en-us/azure/virtual-network/virtual-network-manage-peering?tabs=peering-portal#create-a-peering

    https://video2.skills-academy.com/en-us/azure/virtual-network/virtual-networks-udr-overview#user-defined

    And then use a Private Endpoint to restrict the Static Web app traffic to only from your On-premises network via the ExpressRoute circuit.

    Refer: https://video2.skills-academy.com/en-us/azure/private-link/private-endpoint-dns#virtual-network-and-on-premises-workloads-using-a-dns-forwarder

    Kindly let us know if the above helps or you need further assistance on this issue.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JimmySalian-2011 42,071 Reputation points
    2023-10-10T13:49:26.9466667+00:00

    Hi,

    As you already have ER and I will suggest you setup the environment with Hub and Spoke architecture using the best and recommended approach suggested by Microsoft, usually I follow this approach and over here you can review the configuration process - https://video2.skills-academy.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli

    Hope this helps.

    JS

    ==

    Please Accept the answer if the information helped you. This will help us and others in the community as well.