You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/vpn-gateway/about-active-active-gateways.md
+10-6Lines changed: 10 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ description: Learn about active-active VPN gateways, including configuration and
5
5
author: cherylmc
6
6
ms.service: azure-vpn-gateway
7
7
ms.topic: concept-article
8
-
ms.date: 08/08/2024
8
+
ms.date: 11/01/2024
9
9
ms.author: cherylmc
10
10
11
11
---
@@ -15,14 +15,18 @@ Azure VPN gateways can be configured as active-standby or active-active. This ar
15
15
16
16
## Why create an active-active gateway?
17
17
18
-
VPN gateways consist of two instances in an active-standby configuration unless you specify active-active mode. In active-standby mode, during any planned maintenance or unplanned disruption affecting the active instance, the following behavior occurs:
18
+
VPN gateways consist of two instances in an active-standby configuration unless you specify active-active mode.
19
+
20
+
### Active-standby mode behavior
21
+
22
+
In active-standby mode, during any planned maintenance or unplanned disruption affecting the active instance, the following behavior occurs:
19
23
20
24
***S2S and VNet-to-VNet**: The standby instance takes over automatically (failover), and resumes the site-to-site (S2S) VPN or VNet-to-VNet connections. This switch over causes a brief interruption. For planned maintenance, connectivity is restored quickly. For unplanned issues, the connection recovery is longer.
21
25
***P2S**: For point-to-site (P2S) VPN client connections to the gateway, P2S connections are disconnected. Users need to reconnect from the client machines.
22
26
23
27
To avoid interruptions, create your gateway in **active-active** mode, or switch an active-standby gateway to active-active.
24
28
25
-
### Active-active design
29
+
### Active-active mode design
26
30
27
31
In an active-active configuration for a S2S connection, both instances of the gateway VMs establish S2S VPN tunnels to your on-premises VPN device, as shown the following diagram:
28
32
@@ -37,7 +41,7 @@ When a planned maintenance or unplanned event happens to one gateway instance, t
37
41
> [!NOTE]
38
42
> [!INCLUDE [establish two tunnels](../../includes/vpn-gateway-active-active-tunnel.md)]
39
43
40
-
### Dual-redundancy active-active design
44
+
### Dual-redundancy active-active mode design
41
45
42
46
The most reliable design option is to combine the active-active gateways on both your network and Azure, as shown in the following diagram.
43
47
@@ -49,7 +53,7 @@ All gateways and tunnels are active from the Azure side, so the traffic is sprea
49
53
50
54
This topology requires two local network gateways and two connections to support the pair of on-premises VPN devices. For more information, see [About highly available connectivity](vpn-gateway-highlyavailable.md).
51
55
52
-
## Configure an active-active gateway
56
+
## Configure an active-active mode gateway
53
57
54
58
You can configure an active-active gateway using the [Azure portal](tutorial-create-gateway-portal.md), PowerShell, or CLI. You can also change an active-standby gateway to active-active mode. For steps, see [Change a gateway to active-active](gateway-change-active-active.md).
55
59
@@ -60,7 +64,7 @@ An active-active gateway has slightly different configuration requirements than
60
64
* Two public IP addresses are required. Both must be **Standard SKU** public IP addresses that are assigned as **Static**.
61
65
* An active-active gateway configuration costs the same as an active-standby configuration. However, active-active configurations require two public IP addresses instead of one. See [IP Address pricing](https://azure.microsoft.com/pricing/details/ip-addresses/).
62
66
63
-
## Reset an active-active gateway
67
+
## Reset an active-active mode gateway
64
68
65
69
If you need to reset an active-active gateway, you can reset both instances using the portal. You can also use PowerShell or CLI to reset each gateway instance separately using instance VIPs. See [Reset a connection or a gateway](reset-gateway.md#ps).
0 commit comments