[ACI] article: deploy to vnet

Author: mmacy

articles/container-instances/TOC.yml

@@ -45,6 +45,8 @@
       href: container-instances-multi-container-group.md
     - name: Deploy from Azure Container Registry
       href: container-instances-using-azure-container-registry.md
+    - name: Deploy to Azure Virtual Network
+      href: container-instances-vnet.md
     - name: Set environment variables (env)
       href: container-instances-environment-variables.md
     - name: Configure liveness probes

articles/container-instances/container-instances-vnet.md

@@ -0,0 +1,49 @@
+---
+title: Deploy container instances into an Azure virtual network
+description: Learn how to deploy container groups to a new or existing Azure virtual network.
+services: container-instances
+author: mmacy
+
+ms.service: container-instances
+ms.topic: article
+ms.date: 08/28/2018
+ms.author: marsma
+---
+
+# Deploy container instances into an Azure virtual network
+
+Azure Virtual Network provides secure, private networking including filtering, routing, and peering for your Azure and on-premises resources. By deploying container groups into an Azure virtual network, your containers can communicate securely with not only other resources in the virtual network, but also resources you have on-premises or in other Azure virtual networks.
+
+Container groups deployed into an Azure virtual network support scenarios like the following:
+
+* Execute code in a container instance that accesses an on-premises application or database.
+* Comm w/other DB in VNet using service endpoints
+* Direct comm between ACI container groups in same subnet
+* Comm w/VM in another subnet in same VNet
+
+## Deploy to a virtual network
+
+You can deploy container groups to a new or existing Azure virtual network. Depending on the configuration of the virtual network, your containers can communicate with other Azure resources in the same virtual network, resources in another Azure virtual network, or resources on the public internet.
+
+### New virtual network
+
+Explain the new network resources (see Word doc):
+
+* Network profile
+* Delegate subnet
+
+### Existing virtual network
+
+## Intra-virtual network communication
+
+## Container to on-premises communication
+
+## Next steps
+
+* Point to AKS + ACI article
+
+<!-- IMAGES -->
+
+<!-- LINKS - External -->
+
+<!-- LINKS - Internal -->