Skip to content

Commit 9cbdff5

Browse files
authored
Merge pull request #294781 from vac0224/vc-express-route-2025-02-28
Create integrate-express-route.md
2 parents 448d5ba + 47d2246 commit 9cbdff5

File tree

3 files changed

+147
-10
lines changed

3 files changed

+147
-10
lines changed

articles/communication-services/concepts/voice-video-calling/network-requirements.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,9 @@ This article summarizes how the network environment affects voice and video call
1919

2020
## Network quality
2121

22-
The quality of real-time media over IP is significantly affected by the quality of the underlying network connectivity, but especially by the amount of:
22+
The quality of the underlying network connectivity can adversely affect real-time media over IP. The most important contributing factors include:
2323

24-
* **Latency**. The time it takes to get an IP packet from point A to point B on the network. This network propagation delay is determined by the physical distance between the two points and any other overhead incurred by the devices that your traffic flows through. Latency is measured as one-way or round-trip time (RTT).
24+
* **Latency**. The time it takes to get an IP packet from point A to point B on the network. Network propagation delay is a factor of the physical distance between the two points and any other overhead incurred by the devices that your traffic flows through. Latency is measured as one-way or round-trip time (RTT).
2525
* **Packet loss**. A percentage of packets that are lost in a specific window of time. Packet loss directly affects audio quality—from small, individual lost packets having almost no impact to back-to-back burst losses that cause complete audio cut-out.
2626
* **Inter-packet arrival jitter, also known as jitter**. The average change in delay between successive packets. Communication Services can adapt to some levels of jitter through buffering. It's only when the jitter exceeds the buffering that a participant notices its effects.
2727

@@ -55,17 +55,17 @@ The following bandwidth requirements are for the native Windows, Android, and iO
5555

5656
## Firewall configuration
5757

58-
Communication Services connections require internet connectivity to specific ports and IP addresses to deliver high-quality multimedia experiences. Without access to these ports and IP addresses, Communication Services won't work properly. The list of IP ranges and allow listed domains that need to be enabled are:
58+
Communication Services connections require internet connectivity to specific ports and IP addresses to deliver high-quality multimedia experiences. Without access to these ports and IP addresses, Communication Services don't work properly. The list of IP ranges and allow listed domains that need to be enabled are:
5959

6060
| Category | IP ranges or FQDN | Ports |
6161
| :-- | :-- | :-- |
62-
| Media traffic | Range of Azure public cloud IP addresses 20.202.0.0/16 The range provided above is the range of IP addresses on either Media processor or Azure Communication Services TURN service. | UDP 3478 through 3481, TCP ports 443 |
62+
| Media traffic | Range of Azure public cloud IP addresses 20.202.0.0/16. The range provided here are the range of IP addresses on either Media processor or Azure Communication Services TURN service. | UDP 3478 through 3481, TCP ports 443 |
6363
| Signaling, telemetry, registration| *.skype.com, *.microsoft.com, *.azure.net, *.azure.com, *.office.com| TCP 443, 80 |
6464
| Call Automation Media | 52.112.0.0/14, 52.122.0.0/15, 2603:1063::/38| UDP: 3478, 3479, 3480, 3481|
6565
| Call Automation callback URLs | *.lync.com, *.teams.cloud.microsoft, *.teams.microsoft.com, teams.cloud.microsoft, teams.microsoft.com, 52.112.0.0/14, 52.122.0.0/15, 2603:1027::/48, 2603:1037::/48, 2603:1047::/48, 2603:1057::/48, 2603:1063::/38, 2620:1ec:6::/48, 2620:1ec:40::/42 | TCP: 443, 80 UDP: 443 |
6666

6767

68-
The endpoints below should be reachable for U.S. Government GCC High customers only.
68+
Only U.S. Government GCC High customers can reach the following endpoints.
6969

7070
| Category | IP ranges or FQDN | Ports |
7171
| :-- | :-- | :-- |
@@ -76,11 +76,12 @@ The endpoints below should be reachable for U.S. Government GCC High customers o
7676
## Network optimization
7777

7878
The following tasks are optional and aren't required for rolling out Communication Services. Use this guidance to optimize your network and Communication Services performance or if you know you have some network limitations.
79+
7980
You might want to optimize further if:
8081

8182
* Communication Services runs slowly. Maybe you have insufficient bandwidth.
82-
* Calls keep dropping. Drops might be caused by firewall or proxy blockers.
83-
* Calls have static and cut out, or voices sound like robots. These issues might be caused by jitter or packet loss.
83+
* Calls keep dropping. Firewalls and proxy blockers can cause call drops.
84+
* Calls have static and cut out, or voices sound like robots. Jitter or packet loss can cause these problems.
8485

8586
| Network optimization task | Details |
8687
| :-- | :-- |
@@ -91,7 +92,7 @@ Validate NAT pool size | Validate the NAT pool size required for user connectivi
9192
| Intrusion detection and prevention guidance | If your environment has an [intrusion detection system](../../../network-watcher/network-watcher-intrusion-detection-open-source-tools.md) or intrusion prevention system deployed for an extra layer of security for outbound connections, allow all Communication Services URLs. |
9293
| Configure split-tunnel VPN | Provide an alternate path for Teams traffic that bypasses the virtual private network (VPN), commonly known as [split-tunnel VPN](/windows/security/identity-protection/vpn/vpn-routing). Split tunneling means that traffic for Communication Services doesn't go through the VPN but instead goes directly to Azure. Bypassing your VPN has a positive impact on media quality, and it reduces load from the VPN devices and the organization's network. To implement a split-tunnel VPN, work with your VPN vendor. Other reasons why we recommend bypassing the VPN: <ul><li> VPNs are typically not designed or configured to support real-time media.</li><li> VPNs might also not support UDP, which is required for Communication Services.</li><li>VPNs also introduce an extra layer of encryption on top of media traffic that's already encrypted.</li><li>Connectivity to Communication Services might not be efficient because of hair-pinning traffic through a VPN device.</li></ul>|
9394
| Implement QoS | [Use Quality of Service (QoS)](/microsoftteams/qos-in-teams) to configure packet prioritization. QoS improves call quality and helps you monitor and troubleshoot call quality. QoS should be implemented on all segments of a managed network. Even when a network is adequately provisioned for bandwidth, QoS provides risk mitigation if unanticipated network events occur. With QoS, voice traffic is prioritized so that these unanticipated events don't negatively affect quality. |
94-
| Optimize Wi-Fi | Similar to VPN, Wi-Fi networks aren't necessarily designed or configured to support real-time media. Planning for, or optimizing, a Wi-Fi network to support Communication Services is an important consideration for a high-quality deployment. Consider these factors: <ul><li>Implement QoS or Wi-Fi Multimedia to ensure that media traffic is getting prioritized appropriately over your Wi-Fi networks.</li><li>Plan and optimize the Wi-Fi bands and access point placement. The 2.4-GHz range might provide an adequate experience depending on access point placement, but access points are often affected by other consumer devices that operate in that range. The 5-GHz range is better suited to real-time media because of its dense range, but it requires more access points to get sufficient coverage. Endpoints also need to support that range and be configured to use those bands accordingly.</li><li>If you're using dual-band Wi-Fi networks, consider implementing band steering. Band steering is a technique implemented by Wi-Fi vendors to influence dual-band clients to use the 5-GHz range.</li><li>When access points of the same channel are too close together, they can cause signal overlap and unintentionally compete, which results in a degraded user experience. Ensure that access points next to each other are on channels that don't overlap.</li></ul> Each wireless vendor has its own recommendations for deploying its wireless solution. Consult your Wi-Fi vendor for specific guidance.|
95+
| Optimize Wi-Fi | Similar to VPN, Wi-Fi networks aren't necessarily designed or configured to support real-time media. Planning for, or optimizing, a Wi-Fi network to support Communication Services is an important consideration for a high-quality deployment. Consider these factors: <ul><li>Implement QoS or Wi-Fi Multimedia to ensure that media traffic is getting prioritized appropriately over your Wi-Fi networks.</li><li>Plan and optimize the Wi-Fi bands and access point placement. The 2.4-GHz range might provide an adequate experience depending on access point placement. Other consumer devices that operate in that range can also negatively affect access points. The 5-GHz range is better suited to real-time media because of its dense range, but it requires more access points to get sufficient coverage. Endpoints also need to support that range and configured to use those bands accordingly.</li><li>If you're using dual-band Wi-Fi networks, consider implementing band steering. Band steering is a technique implemented by Wi-Fi vendors to influence dual-band clients to use the 5-GHz range.</li><li>When access points of the same channel are too close together, they can cause signal overlap and unintentionally compete, which results in a degraded user experience. Ensure that access points next to each other are on channels that don't overlap.</li></ul> Each wireless vendor has its own recommendations for deploying its wireless solution. Consult your Wi-Fi vendor for specific guidance.|
9596

9697
## Operating systems and browsers (for JavaScript SDKs)
9798

@@ -100,8 +101,7 @@ Learn about the operating systems and browsers that the calling SDKs support in
100101

101102
## Next steps
102103

103-
The following articles might be of interest to you:
104-
105104
- Learn more about [calling libraries](./calling-sdk-features.md).
106105
- Learn about [client-server architecture](../client-and-server-architecture.md).
107106
- Learn about [call flow topologies](../call-flows.md).
107+
- Learn about [integrating Azure Communication Services with Azure ExpressRoute](../../tutorials/integrate-express-route.md).

articles/communication-services/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -501,6 +501,8 @@ items:
501501
href: concepts/call-flows.md
502502
- name: Call flow topologies
503503
href: concepts/detailed-call-flows.md
504+
- name: Integrate with Azure ExpressRoute
505+
href: tutorials/integrate-express-route.md
504506
- name: Advanced audio and video features
505507
items:
506508
- name: Music mode
Lines changed: 135 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,135 @@
1+
---
2+
title: Integrate Azure Communication Services with ExpressRoute
3+
titleSuffix: An Azure Communication Services article
4+
description: Integrate Azure Communication Services with ExpressRoute to extend your local networks into the Microsoft cloud over a private connection.
5+
author: hrazi
6+
manager: mharbut
7+
services: azure-communication-services
8+
9+
ms.date: 02/01/2025
10+
ms.author: harazi
11+
ms.topic: conceptual
12+
ms.service: azure-communication-services
13+
---
14+
15+
# Integrate Azure Communication Services with ExpressRoute
16+
17+
Azure Communication Services enables developers to integrate voice, video, chat, and SMS capabilities into their applications using cloud-based services. Organizations can use Azure ExpressRoute to establish private, dedicated network connections between their on-premises environments and Azure. This approach enhances the performance, reliability, and security of communication services.
18+
19+
This article describes how to integrate Azure Communication Services with ExpressRoute to extend your local networks into the Microsoft cloud over a private connection.
20+
21+
## Prerequisites
22+
23+
- Azure Subscription: An active Azure account. If you don't have one, [create a free account](https://azure.microsoft.com/free/).
24+
25+
- ExpressRoute Circuit: A configured and operational ExpressRoute circuit. For setup instructions, see [Create and modify an ExpressRoute circuit](/azure/expressroute/expressroute-howto-circuit-portal-resource-manager).
26+
27+
- Azure Communication Services Resource: An instance of Azure Communication Services deployed in your Azure subscription.
28+
29+
- Network Connectivity: Proper network configurations to connect your on-premises environment to Azure via ExpressRoute.
30+
31+
## Benefits of Using ExpressRoute with Azure Communication Services
32+
33+
- **Enhanced Security**: Bypass the public internet to reduce exposure to potential threats.
34+
35+
- **Improved Performance**: Experience lower latency and higher reliability for real-time communication.
36+
37+
- **Consistent Network Throughput**: Benefit from predictable network performance for mission-critical applications.
38+
39+
## Configure ExpressRoute
40+
41+
### 1. Configure ExpressRoute for Microsoft Peering
42+
43+
To enable connectivity to Azure Communication Services, set up Microsoft Peering on your ExpressRoute circuit.
44+
45+
1. Access the Azure portal and navigate to your ExpressRoute circuit.
46+
47+
2. Enable Microsoft Peering:
48+
49+
2.2. Under the Peerings section, select **+ Add**.
50+
51+
2.2. Choose **Microsoft Peering** and provide the required information, including your Primary and Secondary Subnets, VLAN ID, and ASNs.
52+
53+
3. Advertise Routes: Make sure that your on-premises network advertises the correct routes to Azure services.
54+
55+
For detailed instructions, see [Configure ExpressRoute Microsoft Peering](/azure/expressroute/how-to-routefilter-portal).
56+
57+
### 2. Apply route filters for Azure Communication Services
58+
59+
Route filters enable you to selectively consume services over ExpressRoute.
60+
61+
1. Create a route filter:
62+
63+
1.1 In the Azure portal, search for route filters and select **+ Create**.
64+
65+
1.2. Provide a name, select your subscription and resource group.
66+
67+
2. Add Azure Communication Services to the route filter:
68+
69+
2.1. After creating the route filter, select **Rules** and click **+ Add**.
70+
71+
2.2. Choose Azure Communication Services from the list of services.
72+
73+
2.3. If you use Microsoft PSTN, choose Azure SIP Trunking from the list of services.
74+
75+
3. Associate route filter with ExpressRoute Circuit:
76+
77+
3.1. Navigate back to your ExpressRoute circuit.
78+
79+
3.2. Under Peerings, select your Microsoft Peering.
80+
81+
3.3. Associate the route filter you created.
82+
83+
For more information, see [Configure route filters for Microsoft Peering using Azure portal](/azure/expressroute/how-to-routefilter-portal).
84+
85+
### 3. Configure Network Security
86+
87+
Make sure that your network security policies allow traffic to and from Azure Communication Services.
88+
89+
- Firewall rules: Update on-premises firewall settings to allow Azure Communication Services traffic.
90+
91+
- Network Security Groups (NSGs): Configure NSGs in Azure to permit inbound and outbound communication with your on-premises network.
92+
93+
### 4. Verify Connectivity
94+
95+
- Ping test: From your on-premises environment, perform a ping test to the Azure Communication Services endpoints to verify connectivity.
96+
97+
- Trace route: Use `traceroute` tools to make sure traffic is routing through ExpressRoute.
98+
99+
### 5. Update Application Settings
100+
101+
- Endpoint configuration: Change your application's configuration to point to the Azure Communication Services endpoints accessible via ExpressRoute.
102+
103+
- SDK settings: If using Azure Communication Services SDKs, ensure they're configured to use the private endpoints.
104+
105+
### Considerations
106+
107+
- Supported regions: Verify that Azure Communication Services is available in your desired region and supports ExpressRoute connectivity.
108+
109+
- Bandwidth requirements: Assess your bandwidth needs to ensure your ExpressRoute circuit can support the communication load.
110+
111+
## Troubleshooting
112+
113+
- Connectivity Issues: If you can't connect to Azure Communication Services over ExpressRoute, verify your route filters and peering configurations.
114+
115+
- Authentication Failures: Ensure that your authentication tokens and keys for Azure Communication Services are correctly configured and not expired.
116+
117+
## Frequently Asked Questions
118+
119+
### Can I use ExpressRoute with Azure Communication Services for all communication modes?
120+
121+
No, ExpressRoute currently supports only voice mode by [Direct Routing](../concepts/telephony/direct-routing-provisioning.md) and [video communication](../concepts/voice-video-calling/calling-sdk-features.md) mode.
122+
123+
### Is there an added cost for using ExpressRoute with Azure Communication Services?
124+
125+
Not directly. While there's no added cost from Azure Communication Services for using ExpressRoute, there are costs associated with provisioning and using an ExpressRoute circuit. For more information, see [ExpressRoute pricing](https://azure.microsoft.com/pricing/details/expressroute/).
126+
127+
### How does ExpressRoute affect the latency of communication services?
128+
129+
ExpressRoute provides [lower and more consistent latency compared to typical internet connections](/azure/expressroute/expressroute-faqs#what-are-the-benefits-of-using-expressroute-and-private-network-connections), which can enhance the performance of real-time communication applications.
130+
131+
## Related articles
132+
133+
- [Azure Communication Services Overview](../overview.md)
134+
- [What is Azure ExpressRoute](/azure/expressroute/expressroute-introduction)
135+
- [Azure Communication Services Network recommendations](../concepts/voice-video-calling/network-requirements.md)

0 commit comments

Comments
 (0)