Before we can five deeper into Azure Networking it is important to understand how the overall Azure Network is set-up and working.
As already discussed in the [BASIC] Azure Regions article there is a difference between Production Sites and Edge Sites. So have a look into this one to understand the differences.
Today we want to go a bit deeper…
How does Azure Networking work?!
One thing you really have to know is, that all Networking Resources you will use as a customer in Microsoft Azure are Software-Defined. You will never use a physical Firewall or LoadBalancer. For a customer in Azure everything is Software-Defined.
This is key to the separation of customer workloads, as with Software-Defined Networks you can easily separate customers using the same hardware. This also results in some behavior you would not expect … but let’s check this out in a later post.
The whole operation of the global network has been made available by Microsoft via project SONiC (Software for Open Networking in the Cloud)
But for sure … under the hood there are physical layers … so let’s see…
What is the physical layer?
As you can imagine running a global network for more than 50 regions is not the easiest thing to do. The overall structure of the global Azure Network is based on the ability to grow above and beyond:
multiple Data Centers together are building a region
every Data Center has a connection to Regional Network Gateways (RNG)
Those gateways allow in region communication and also are bundling the outgoing bandwidth
a region is connected with 1.6 Pbps bandwidth
those RNGs are connected to the Microsoft Global WAN
the WAN has connection points into the Edge Sites
In the Edge Site you find aggregators for things like ExpressRoute, Azure Front Door and all Internet Traffic
from here the connection to customers is established
That mean, when you access any Azure Resource you always connect through an edge site. From here you are directed into the desired region. But at the same time you can see, that if all regions are connected to the MS WAN you could also use this. And this is why Microsoft states “Our network is your network“
So if you are in Europe and you want to access a resource in the US you could go via Public Internet to the US … or you could use your Azure Connection and use the Microsoft WAN to access it.
If you think about this, it could lead to a whole new global network structure for you … but we will cover this in a later post.
If you are in a region with Availability Zones the whole setup looks like this:
More information on Azure Global Network
If you use the search tool of your choice you will find the information around Azure Global Networking. But here a small collection for you:
Also this week there were many news around Microsoft Azure! Here as always the overview for you: Public preview: SAP S/4HANA events are now available on Azure Event Grid Forrester Total Economic Impact study: Azure Arc delivers 206 percent ROI over 3 years General availability: Azure Sphere OS version 22.10 Generally available: Azure Communication Services…
Also this week there were many news around Microsoft Azure! Here as always the overview for you: Generally available: SFTP support for Azure Blob Storage Leverage SFTP support for Azure Blob Storage to build a unified data lake Azure Virtual WAN simplifies networking needs General availability: Azure Premium SSD v2 Disk Storage General availability: OpenTelemetry…
Also this week there were many news around Microsoft Azure! Here as always the overview for you: Generally available: Kusto Trender Public preview: Enhanced soft delete for Azure Backup Public preview: Multi-user authorization for Backup vaults Public preview: Immutable vaults for Azure Backup General availability: Azure NetApp Files application volume group for SAP HANA Generally…
Also this week there were many news around Microsoft Azure! Here as always the overview for you: Scalable management of virtualized RAN with Kubernetes Cost optimization using Azure Migrate Public preview: Azure Firewall Basic Generally available: Query Store hints Azure SQL Database, Azure SQL Managed Instance Azure Firewall Basic now in preview Microsoft and INT…
Also this week there were many news around Microsoft Azure! Here as always the overview for you: Public preview: Policy analytics for Azure Firewall General availability: ExpressRoute FastPath support for Vnet peering and UDRs Strengthen your security with Policy Analytics for Azure Firewall Ensure zone resilient outbound connectivity with NAT gateway Azure SQL—General availability updates…
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here:
Cookie Policy
Leave a comment