Virtual Network Gateway

Question

Virtual Network Gateway

Jester Bojorque 230

I am planning to delete our Virtual Network Gateway (ExpressRoute) in the development environment to cut cost because we believe we dont use it however whenever I check the overview of the service I can see that there is a movement (image below). My question is what are these data means? how can I confirm if we are actually using it or not? Thank you. vng

Answer accepted by question author

0 additional answers

Your answer

Answer 1

KapilAnanth 49,851 Moderator

@jb_devel ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

You can find the metrics' data reference in Supported metrics for microsoft.network/virtualnetworkgateways

If you do not have a connection to an express route circuit and you do not plan to create one, you can go ahead and delete this gateway
You can check if there are any connections existing using Connect a virtual network to ExpressRoute circuits
- Navigate to Connections in Portal and see if there exists any connection linking this gateway to any circuits.

Additionally, you can use Get-AzVirtualNetworkGatewayConnection and Get-AzVirtualNetworkGateway as well.

Please let us know if we can be of any further assistance here.

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.

Jester Bojorque 230 Reputation points

2024-12-10T04:21:33.3066667+00:00

When I got to ExpressRoute circuits service its blank (image below) does it mean we dont use it?because the virtual network gateways cost is the highest amount of resource in our cost management and we want to remove it if we are not using it now.
Jester Bojorque 230 Reputation points

2024-12-11T08:52:21.33+00:00

I also check the connections under the virtual network gateway resource and there's no item listed in there (image below)
KapilAnanth 49,851 Reputation points Moderator

2024-12-11T09:04:32.2933333+00:00
@jb_devel ,

Wrt "When I got to ExpressRoute circuits service its blank (image below) does it mean we dont use it?"

Not exactly

It is possible that the ExR Gateway is linked to a Circuit in different subscription

See : Connect a virtual network to a circuit - different subscription

Wrt the connections in Azure Portal,

Empty connections mean there are no connections in the subscription only- However, I would suggest you also run Get-AzVirtualNetworkGatewayConnection and Get-AzVirtualNetworkGateway as well - And make sure there are none

If the above commands also give no outputs for Connections, you can go ahead and delete the Gateway.

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Jester Bojorque 230 Reputation points

2024-12-12T02:54:18.84+00:00

Hello @KapilAnanth ,

-You were right about the circuit being in a different subscription. I checked our production and the ExpressRoute Circuit resource is there with 2 connections; one for production and the other one is for staging which is correct because those two connects to SoftBank which is our ExpressRoute provider in Japan.

-Now, we believe that in our develop environment we dont use the expressroute(SoftbBank) since the iot devices we use in develop are equipped with non-SoftBank sim for testing purposes. We can still connect to our devices with our webapps with tasks using function apps as of the moment.

-Now if we delete our Virtual Network Gateway in develop does it mean we will not be able to communicate with our iot devices and webapps? because from what I understand virtual network gateway in Azure acts like a bridge that enables secure communication between your on-premises (iot devices) and your Azure virtual network (webapps, function apps)

-Below is the image of our Virtual Network Gateway in develop which shows ExpressRoute in the gateway type which confuses me more
KapilAnanth 49,851 Reputation points Moderator

2024-12-12T10:10:35.52+00:00
@jb_devel ,

Wrt, "Now if we delete our Virtual Network Gateway in develop does it mean we will not be able to communicate with our iot devices and webapps?"

I understand that "iot devices" is OnPrem and "webapps" is Azure VNET.

Virtual Network Gateway is used to connect a OnPrem private network to Azure VNET.

Now, where does the "webapps" reside?

If they reside in the VNET, yes, you will be not able to connect to them from a OnPrem private network.

i.e., If you are using VNET Integration, then yes

However, you should validate how your users from OnPrem to the services "iot devices and webapps"

If this is happening over ExpressRoute, then deleting the gateway would result in the connection breaking

If this is happening over internet, then deleting the gateway shouldn't be an issue.

i.e., without VNET Integration

You should verify your network configuration and proceed accordingly.

Hope this helps.

Cheers,

Kapil
Jester Bojorque 230 Reputation points

2024-12-13T02:25:00.7366667+00:00

@KapilAnanth

-Our production and staging environment uses expressroute(Provider: SoftBank) and I confirmed the connection by checking the expressroute circuit details as you have mentioned which is correct because our iot devices are using SoftBank sim cards then connects to the providers private network before it goes to azure however in our development environment the devices we use for testing does not use SoftBank sim therefore we dont use expressroute.

-WRT the vnet, we are definitely using it and when I checked through the connected devices section I found the Virtual Network Gateway in the list but then again its gateway type is ExpressRoute.

-I apologize for asking these questions. Our cloud dev partner left us for good without providing knowledge to our infrastructure and I am the one handling it now without prior skills with the cloud services.

-Image below of our vnet resource for your reference.

Thank you.
KapilAnanth 49,851 Reputation points Moderator

2024-12-13T09:38:13.3+00:00
@jb_devel , We are happy to assist :)

May I ask what exactly is your question now?

You informed us your production environment is using the ExpressRoute circuit

This is well and good, so this means a VNET Gateway is required and used

You informed us your Dev environment does not require a ExpressRoute Connection.

Note :

A VNET has a 1:1 mapping to a VNET Gateway

A VNET can have only one VNET Gateway

VNET Gateways are of 2 types,

VPN

and ExpressRoute

A VNET has a 1:1 mapping to a VNET GatewayAn ExpressRoute type VNET Gateway connects to an ExR Circuit (in your case, it is Softbank )

This means, 2 VNET Gateways can connect to a single ExR Circuit

My question to you is

Does the "production" and "Dev" environment use the same VNET or different VNET?

If they use the same VNET, then you should not delete the VNET Gateway.

If they use 2 separate VNETs, say productionVNET and devVNET, in this case you can delete the devVNET's VNET Gateway keeping the productionVNET's VNET Gateway intact.

Hope this adds more clarity

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Jester Bojorque 230 Reputation points

2024-12-16T01:21:10.6+00:00
Hello @KapilAnanth ,

Here are my answer to your questions:

They use different VNet.

They have different VNet as well VNet Gateways.

Yes.

Thank you for patiently answering all my queries. I appreciate it very much. I think I got it all and I will proceed on termination of its service.

My concern now is whether we can rely on the export template for redeployment if we want the Virtual Network Gateway back in service. I would like to use the export template function to save the service configuration before I delete it and re-deploy it if needed, using the same template.

Thank you very much,

JB
KapilAnanth 49,851 Reputation points Moderator

2024-12-16T05:13:18.0133333+00:00
@jb_devel , Thanks for sharing the information.

Wrt, "My concern now is whether we can rely on the export template for redeployment if we want the Virtual Network Gateway back in service."

Yes, you can

You should be able to use the template to deploy the VNG if you want to rollback the changes.

Thanks,

Kapil

Please don’t forget to close the thread by clicking Accept the answer wherever the information provided helps you, as this can be beneficial to other community members.
Jester Bojorque 230 Reputation points

2024-12-16T05:20:39.83+00:00

@KapilAnanth ,

Got it. Thank you so much for the help.

I will now close this thread by accepting your reply as the answer.

Again, thank you very much for the time and I appreciate taking your time to respond with all my queries.

Cheers!

JB
KapilAnanth 49,851 Reputation points Moderator

2024-12-16T05:32:21.8966667+00:00

@jb_devel , T

Thanks for your continued contribution on Q&A and kind words.

Appreciate much for taking the time to share your feedback :)

Share via

Virtual Network Gateway

0 additional answers

Your answer