Before we can five deeper into Azure Networking it is important to understand how the overall Azure Network is set-up and working.
As already discussed in the [BASIC] Azure Regions article there is a difference between Production Sites and Edge Sites. So have a look into this one to understand the differences.
Today we want to go a bit deeper…
How does Azure Networking work?!
One thing you really have to know is, that all Networking Resources you will use as a customer in Microsoft Azure are Software-Defined. You will never use a physical Firewall or LoadBalancer. For a customer in Azure everything is Software-Defined.
This is key to the separation of customer workloads, as with Software-Defined Networks you can easily separate customers using the same hardware. This also results in some behavior you would not expect … but let’s check this out in a later post.
The whole operation of the global network has been made available by Microsoft via project SONiC (Software for Open Networking in the Cloud)
But for sure … under the hood there are physical layers … so let’s see…
What is the physical layer?
As you can imagine running a global network for more than 50 regions is not the easiest thing to do. The overall structure of the global Azure Network is based on the ability to grow above and beyond:
Source: Ignite 2018 – BRK2483
multiple Data Centers together are building a region
every Data Center has a connection to Regional Network Gateways (RNG)
Those gateways allow in region communication and also are bundling the outgoing bandwidth
a region is connected with 1.6 Pbps bandwidth
those RNGs are connected to the Microsoft Global WAN
the WAN has connection points into the Edge Sites
In the Edge Site you find aggregators for things like ExpressRoute, Azure Front Door and all Internet Traffic
from here the connection to customers is established
That mean, when you access any Azure Resource you always connect through an edge site. From here you are directed into the desired region. But at the same time you can see, that if all regions are connected to the MS WAN you could also use this. And this is why Microsoft states “Our network is your network“
So if you are in Europe and you want to access a resource in the US you could go via Public Internet to the US … or you could use your Azure Connection and use the Microsoft WAN to access it.
If you think about this, it could lead to a whole new global network structure for you … but we will cover this in a later post.
If you are in a region with Availability Zones the whole setup looks like this:
Source: Ignite 2018 – BRK2483
More information on Azure Global Network
If you use the search tool of your choice you will find the information around Azure Global Networking. But here a small collection for you:
I love social media and all the channels I follow. So also this topic came into my view out of a LinkedIn post of David das Neves. I had a look into it … and thought I should share it here. Microsoft Learning on GitHub Did you know that there is a number of repositories…
What do you do on May 28th?! Where will you be on May 28th? You don’t know?! Let me tell you: You will be in the Netherlands, in Veenendaal and visit Azure Fest NL 2020 You don’t know what Azure Fest is … in the words of the organizers: Azure Fest NL is a free, single…
So as we know the Azure Networking Basics now, we can focus on the base element in Networking in Azure: Azure VNets Azure Virtual Networks a.k.a. VNets An Azure Virtual Network is the fundamental building block in an Azure environment. It is your private network portion of the azure network. Each VNet is a separated…
If you are an Azure Veteran … what was the first thing you have created in Azure? If you are new to Azure, what are you looking for to create? In many cases the answer is: Virtual Machines An even if you are one of the fancy-new-world-everything-paas-and-serverless gurus … we must be honest and say:…
If you have never heard about Microsoft OpenHack … you should keep on reading. Because this is a unique opportunity for raising the bar of your own skill. So let’s have a closer look on OpenHack What is OpenHack? To say it without my own words: Microsoft OpenHack is a developer focused event where a…
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here:
Cookie Policy
Leave a comment