Azure virtual WAN multi region Site-to-site VPN High Availability

Arne Vellinga 1

Is it possible to create an HA multi region setup using Azure Virtual WAN and Site to Site VPN, as shown in the drawing below?

It's connecting 2 routers to both regions, to build a highly available connection.

94404-multi-region-azure-virtual-wan-site-to-site-vpn.jpg

1 answer

msrini-MSFT 9,281 Reputation points Microsoft Employee

2021-05-07T06:51:41.433+00:00

Hi @Arne Vellinga ,

Azure WAN VPN Gateway itself is an Active-Active Gateway. With your scenario, you will be creating 8 tunnels, 4 for Hub1 and 4 for Hub2 VPN gateways provided you have 2 On-Prem VPN devices in each site.

Yes, your scenario is possible and it will provide High Availability to your architecture.

Let me know if you have any further questions.
Please sign in to rate this answer.
Arne Vellinga 1 Reputation point

2021-05-07T08:37:20.263+00:00

Hi @msrini-MSFT ,

Thanks for the response,

Why do i need 4 tunnels per site? because is need 2 for each Hub?

How will BGP handle the traffic if i configure BGP weights and as path prepending on the onpremise routers?

Is Bidirectional Forwarding Detection (bfd) supported for quick failover?

There is no in dept documentation about BGP on Azure Virtual Wan that i can find

msrini-MSFT 9,281 Reputation points Microsoft Employee

2021-05-07T12:50:31.497+00:00

There will be 2 VPN gateway instance in a HUB. So it is recommended to have 2 VPN device in each site connecting to HUB VPN gateway instances.
BGP weights are not supported. You need to use AS path prepending to prefer one path over the other. In general use less AS path for the routes which are connecting from the On-Prem to the Hub in the same location/region
BDF is not supported for VPN gateways
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure virtual WAN multi region Site-to-site VPN High Availability

1 answer

Your answer