Azure ExpressRoute

Articles and Labs in this repo

• Transit between ExpressRoute circuits - It includes a lab.
• Deploying Local SKU ExpressRoute Circuits
• LAB: Azure VPN/ER Coexistence using GCP as On-premises
• LAB: Verify BGP information on Azure VPN and ExpressRoute Gateways

Resources list

There's a mix of Microsoft official Docs and other relevant information outside of the official Docs. You may see notes in some of the links with important points based on my experience interacting with customers.

Overview

1. ExpressRoute FAQ
2. ExpressRoute Partners and Locations
3. ExpressRoute Pricing Details
4. ExpressRoute SLAs
5. ExpressRoute Technical Overview
6. ExpressRoute Gateway Overview
7. ExpressRoute Circuit vs Peerings

Prepare for your ExpressRoute Deployment

1. ExpressRoute Prerequisites
2. Workflows for Configuring ExpressRoute
3. Prepare your Routing for ExpressRoute Peerings
4. Route Optimization

Create your ExpressRoute Circuit

1. Create and Modify an ER Circuit
2. Create and Modify Routing for an ER Circuit

Private Peering configuration

1. Create the Azure Private Peering
2. Create an ExpressRoute Virtual Gateway
3. Link a Virtual Network to an ER Circuit

Microsoft Peering configuration

1. ExpressRoute NAT Requirements
2. Create the MSFT Peering
3. Create and Apply a Route Filter

Disaster Recovery, High Availability, and Route Optimization

1. Designing for Disaster Recovery with the Private Peering
2. Designing for High Availability
3. VPN Backup for ExpressRoute using the Azure VPN Gateway

ExpressRoute Direct

1. About ExpressRoute Direct
2. How to Configure ExpressRoute Direct

ExpressRoute Encryption options

1. ExpressRoute encryption

   [DM comment] There are two options: IPsec (end-to-end) encryption versus MACsec (poin-to-point) encryption. IPSec can be used in any Circuit type (with Provider provisioning Model or Direct) but MACSec can only be used in Direct model. Keep in mind single IPSec tunnel throughput is limited to 1.2 Gbps (workaround is to build multiple IPSec tunnels).

2. Configure a site-to-site VPN over ExpressRoute Microsoft peering

3. Configure a Site-to-Site VPN connection over ExpressRoute private peering

4. Configure IPsec transport mode for ExpressRoute private peering

5. Configure MACsec on ExpressRoute Direct ports

ExpressRoute Global Reach

1. ExpressRoute Global Reach

Monitoring