Why peering would not be advised if I have services behind basic LB?

Question

While looking into one of Azure Learn modules I came across following statement:

Peering might not be your best option if you have existing VPN or ExpressRoute connections or services behind Azure Basic Load Balancers that would be accessed from a peered virtual network. In these cases, you should research alternatives.

I don't think I understand why that would be the case.
Are there any restrictions related to Basic LB that make peering a bad choice in this case?

Thanks,
Lukasz

Answer 1

Hello @Lukasz Mastalerz ,

Yes there are a few constraints related to Global VNet Peering and Load Balancers as below:

1. Resources in one virtual network can't communicate with the front-end IP address of a Basic Internal Load Balancer (ILB) in a globally peered virtual network. This restriction does not exist for a Standard Load Balancer.
2. Some services that use a Basic load balancer don't work over global virtual network peering. For more information, see What are the constraints related to Global VNet Peering and Load Balancers?.

However, these constraints apply only when virtual networks are globally peered (Connecting virtual networks across Azure regions). If you are using Vnet peering to connect virtual networks within the same Azure region, then these constraints do not apply.

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.