Development and test environments for SAP workloads on Azure

Azure ExpressRoute
Azure Virtual Machines
Azure Virtual Network
Azure Resource Manager

This example shows how to establish a development and test environment for SAP NetWeaver in a Windows or Linux environment on Azure. The database used is AnyDB. (AnyDB is the SAP term for any supported DBMS that isn't SAP HANA.)


Architecture diagram for dev/test environments for SAP workloads.

Download a Visio file of this architecture.


This scenario demonstrates provisioning a single SAP system database and SAP application server on a single virtual machine. The data flows through the scenario as follows:

  1. Customers use the SAP user interface or other client tools (Excel, a web browser, or other web application) to access the Azure-based SAP system.
  2. Connectivity is provided by using an established ExpressRoute. The ExpressRoute connection is ended in Azure at the ExpressRoute gateway. Network traffic routes through the ExpressRoute gateway to the gateway subnet, and from the gateway subnet to the application-tier spoke subnet (see the hub-spoke network topology) and via a Network Security Gateway to the SAP application virtual machine.
  3. The identity management servers provide authentication services.
  4. The jump box provides local management capabilities.


  • Virtual networks are the basis of network communication within Azure.
  • Azure Virtual Machines provide on-demand, high-scale, secure, virtualized infrastructure using Windows or Linux servers.
  • Azure ExpressRoute extends your on-premises networks into the Microsoft cloud over a private connection, which is facilitated by a connectivity provider.
  • Network security groups limit network traffic to specific resources in a virtual network. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic. The security rules are based on source or destination IP address, port, and protocol.
  • Resource groups act as logical containers for Azure resources.
  • Azure Files or Azure NetApp Files are recommended solutions to provide the storage for the SAP executables and HANA data and logs.

Scenario details

Because this architecture is designed for non-production environments, it's deployed with only one virtual machine (VM). The VM size can be changed to accommodate your organization's needs.

For production use cases, review the SAP reference architectures available below:

Potential use cases

Other relevant use cases include:

  • Noncritical SAP nonproduction workloads (such sandbox, development, test, and quality assurance).
  • Noncritical SAP business workloads.


These considerations implement the pillars of the Azure Well-Architected Framework, which is a set of guiding tenets that can be used to improve the quality of a workload. For more information, see Microsoft Azure Well-Architected Framework.

Keep the following points in mind when establishing a development and test environment for SAP NetWeaver.


Microsoft offers a service level agreement (SLA) for single VM instances. For more information on Microsoft Azure Service Level Agreement for Virtual Machines SLA For Virtual Machines


For general guidance on designing scalable solutions, see the performance efficiency checklist in the Azure Architecture Center.


Security provides assurances against deliberate attacks and the abuse of your valuable data and systems. For more information, see Overview of the security pillar.

For general guidance on designing secure solutions, see the Azure Security Documentation.

Data protection and cloning

For general guidance on protecting your application data, see Azure Application Consistent Snapshot tool, which provides application consistent snapshots when used in combination with Azure NetApp Files.


For general guidance on designing resilient solutions, see Designing resilient applications for Azure.

Cost optimization

Cost optimization is about looking at ways to reduce unnecessary expenses and improve operational efficiencies. For more information, see Overview of the cost optimization pillar.

To help you explore the cost of running this scenario, all services are preconfigured in the cost calculator examples below. Change the appropriate variables to match the expected traffic for your use case.

We've provided four sample cost profiles based on amount of traffic you expect to receive:

Size SAPs VM Type Storage Azure Pricing Calculator
Small 8000 D8s_v3 2xP20, 1xP10 Small
Medium 16000 D16s_v3 3xP20, 1xP10 Medium
Large 32000 E32s_v3 3xP20, 1xP10 Large
Extra Large 64000 M64s 4xP20, 1xP10 Extra Large


This pricing is a guide that only indicates the VMs and storage costs. It excludes networking, backup storage, and data ingress/egress charges.

  • Small: A small system consists of VM type D8s_v3 with 8x vCPUs, 32-GB RAM, and 200 GB of temporary storage. It also contains premium storage: two 512-GB disks and one 128-GB disk.
  • Medium: A medium system consists of VM type D16s_v3 with 16x vCPUs, 64-GB RAM, and 400 GB of temporary storage. It also contains premium storage: three 512-GB disks and one 128-GB disk.
  • Large: A large system consists of VM type E32s_v3 with 32x vCPUs, 256-GB RAM, and 512 GB of temporary storage. It also contains premium storage: three 512-GB disks and one 128-GB disk.
  • Extra Large: An extra-large system consists of a VM type M64s with 64x vCPUs, 1024-GB RAM, and 2000 GB of temporary storage. It also contains premium storage: four 512-GB disks and one 128-GB disk.

Deploy this scenario

Select the link below to deploy the solution.

Deploy to Azure


SAP and Oracle are not installed during this deployment. You will need to deploy these components separately.


This article is maintained by Microsoft. It was originally written by the following contributors.

Principal author:

To see non-public LinkedIn profiles, sign in to LinkedIn.

Next steps

Learn more about the component technologies:

Explore related architectures: