Azure Network Connection Specification in Windows 365 Cloud PCs

Question

Hi,

I want to know the Azure Network Connection Specification in Windows 365 Hybrid azure ad join Cloud PCs. I found this MS article https://learn.microsoft.com/en-us/windows-365/enterprise/requirements-network?tabs=enterprise%2Cent. Here mentioned we need a Vnet. So, I want to know in details, in Azure what are the network requirement we have to keep in mind if we are using Site to site VPN and ExpressRoute to connect on-premises? Here, I have to provision the PCs in different region based on the users geographical region and for this I have to create VNet in different region and being an Network engineer what are things we have to keep in mind before set up these things in Azure like in-terms of bandwidth support, load balancing, pricing, fault tolerance etc. ?

Thanks!

Answer 1

@Khushboo Kumari

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to know the requirements and considerations for connecting Azure to your OnPremises.

Of course, this entirely depends on your business requirements and architecture.

Refer to the planning table here comparing VPN Gateway and ExpressRoute: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways#planningtable

You must consider the SKUs, supported features and cost before setting the connection

Azure VPN Gateway :

• This is better suited for architecture with a few sites
• This creates an Encrypted Tunnel Over Internet and hence latency is dependent on the ISP and internet factors
• Limited Bandwidth based on the SKU of the Gateway used
• Gateway SKU Comparison : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways#benchmark
• Throughput is limited by the latency and bandwidth between your premises and the Internet.
• You must also have a local firewall device on your OnPremises and that must support the algorithms and cryptographic requirements offered by Azure VPN Gateway : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-compliance-crypto
• FAQ : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq
• Additional features:
  • NAT : https://learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto
• Limits : https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#virtual-network-gateway-limits

Azure ExpressRoute:

• This is suited for scenarios where high throughput and large date ingestion is required.
• This uses a physical underlying connection and hence we get a fixed bandwidth and latency.
• ExpressRoute prerequisites & checklist : https://learn.microsoft.com/en-us/azure/expressroute/expressroute-prerequisites
  • You shall require a Service Provider to provision your circuit
• ExpressRoute connectivity models : https://learn.microsoft.com/en-us/azure/expressroute/expressroute-connectivity-models
• You will require an ExpressRoute circuit alongside an ExpressRoute Gateway
  • Gateway SKU Comparison : https://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways#aggthroughput
    • Circuit SKU Comparison : https://learn.microsoft.com/en-us/azure/expressroute/plan-manage-cost#local-vs-standard-vs-premium
• FAQ : https://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs
• Additional features :
  • FastPath : FastPath is designed to improve the data path performance between your on-premises network and your virtual network. When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway.
    • Direct : ExpressRoute Direct provides dual 100-Gbps or 10-Gbps connectivity, that supports Active/Active connectivity at scale.
      • Global Reach: With ExpressRoute Global Reach, you can link ExpressRoute circuits together to make a private network between your on-premises networks.
• Limits : https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#expressroute-limits

Hope this helps.

Kindly let us know if you need further assistance on this issue.

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.