Skip to main content

Azure Cloud connectivity - Solution architectures

Welcome to this comprehensive guide that explores the different Azure cloud connectivity options available for accessing your Azure resources. In this guide, we will discuss two architectures: Azure Cloud connectivity over Internet IPsec and Azure Cloud connectivity Private.

Azure Cloud connectivity over Internet IPsec​

We provide you with two architecture options for accessing your Azure resources over the internet:

  • Standard Architecture
  • High Availability (HA) Architecture

Both options deploy an Active/Active VPN Gateway on the Azure side, ensuring local redundancy. If one Azure Gateway experiences a failure, the second one will immediately take over.

Standard Architecture​

You are a customer that wants to interconnect one site to Azure IaaS through a basic Public Connector, this solution is for you.

Standard Architecture of Cloud Connector with VNF IPSec and Azure Integration

Standard architecture.

  • One customer IPsec VRF instance is deployed on a unique PoP
  • A couple of IPSec tunnels are set to reach both Azure VPN Gateways
  • The first tunnel acts like the nominal one. The second is there as a backup one

High Availability Architecture​

You are a customer that wants to interconnect one site to Azure IaaS through an HA Public Connector, this solution is for you.

High Availability Architecture of Cloud Connector with VNF IPSec and Azure Integration

High Availability architecture.

  • The architecture brings a redundancy
  • A second customer VRF is deployed on a “backup” PoP
  • And another couple of IPSec tunnels are set to the same VPN Gateways
  • Those tunnels act like those on the nominal PoP
  • But on a global view, we have four levels of backup.

Azure Cloud connectivity Private​

Based on a private circuit directly connected to the Cloud Service Provider and transit over our MPLS network, this solution provides you the best quality and security for a Multi-cloud approach.

Private Connectivity Architecture of Cloud Connector with Azure Integration

Private Connectivity architecture.

This architecture, shared with Business Galerie, is available to reach Azure resources through a private connection. This is done thanks to an ExpressRoute Gateway coupled with an ExpressRoute Circuit on Azure side.
Unlike a public architecture, to connect such a private access, we will use dedicated connections, from our interconnection routers (CDE) in our backbone to Azure Edge routers.