You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A virtual network is a logical representation of your network in the cloud. You can use a virtual network to define your own private IP address space and segment the network into subnets. Virtual networks serve as a trust boundary to host your compute resources such as Azure Virtual Machines and load balancers. A virtual network enables direct private IP communication between the resources that it hosts. To enable hybrid cloud scenarios and securely extend your datacenter into Azure, you can link a virtual network to an on-premises network through a VPN Gateway or Azure ExpressRoute.
20
+
A virtual network is a logical representation of your network in the cloud. You can use a virtual network to define your own private IP address space and segment the network into subnets. Virtual networks serve as a trust boundary to host your compute resources such as Azure Virtual Machines and load balancers. A virtual network enables direct private IP communication between the resources that it hosts. To enable hybrid cloud scenarios and securely extend your datacenter into Azure, you can link a virtual network to an on-premises network through Azure VPN Gateway or Azure ExpressRoute.
21
21
22
22
## Production deployment recommendations
23
23
24
24
As you build your virtual network in Azure, it's important to improve the reliability of your solution by keeping in mind the following universal design principles:
25
25
26
-
-**Avoid overlapping address spaces.** Ensure that your virtual network address space, defined as a classless inter-domain routing block, doesn't overlap with your organization's other network ranges.
26
+
-**Avoid overlapping address spaces.** Ensure that your virtual network address space, defined as a Classless Inter-Domain Routing block, doesn't overlap with your organization's other network ranges.
27
27
28
28
-**Reserve address space for future growth.** Your subnets shouldn't cover the entire address space of the virtual network. Plan ahead and reserve some address space for the future.
29
29
@@ -47,7 +47,7 @@ A virtual network is one of several core networking components in Azure. When yo
47
47
48
48
- Network interface cards, which provide network connectivity to Azure virtual machines (VMs)
49
49
50
-
- Private endpoints, which provide private connectivity to Azure services and to resources outside of your own virtual network
50
+
- Private endpoints, which provide private connectivity to Azure services and to resources outside of your virtual network
51
51
52
52
You might also deploy *appliances*, such as ExpressRoute gateways, VPN gateways, and firewalls. Appliances provide services to support your networking requirements, such as connecting to on-premises environments or providing sophisticated controls on traffic flow.
53
53
@@ -76,7 +76,7 @@ You don't need to divide your virtual networks or subnets by availability zones
76
76
77
77
### Region support
78
78
79
-
Zone-redundant virtual networks can be deployed in any [region that supports availability zones](./regions-list.md).
79
+
Zone-redundant virtual networks can be deployed into any [region that supports availability zones](./regions-list.md).
80
80
81
81
### Cost
82
82
@@ -112,26 +112,26 @@ You can create virtual networks in multiple regions. You can also choose to conn
112
112
113
113
By creating virtual networks and other resources in multiple regions, you can be resilient to regional outages. However, you need to consider the following factors:
114
114
115
-
-**Traffic routing:** If you host internet-facing services in the virtual network, you need to decide how to route incoming traffic among your regions and components. With services such as Azure Traffic Manager and Azure Front Door, you can route internet traffic based on rules you specify.
115
+
-**Traffic routing:** If you host internet-facing services in the virtual network, you need to decide how to route incoming traffic among your regions and components. With services such as Azure Traffic Manager and Azure Front Door, you can route internet traffic based on rules that you specify.
116
116
117
-
-**Failover:** If an Azure region is unavailable, you typically need to *fail over* by processing traffic in healthy regions. Traffic Manager and Azure Front Door provide failover capabilities for internet applications.
117
+
-**Failover:** If an Azure region is unavailable, you typically need to fail over by processing traffic in healthy regions. Traffic Manager and Azure Front Door provide failover capabilities for internet applications.
118
118
119
119
-**Management:** Each virtual network is a separate resource and needs to be configured and managed independently from other virtual networks.
120
120
121
-
-**IP address space:** Determine how to allocate IP addresses when you create multiple virtual networks. You can create multiple virtual networks by using the same private IP address space in different regions. However, you can't peer, or connect, two virtual networks with the same address space to your on-premises network because it would cause routing issues. If you plan to create a multi-network design, IP address planning is an important consideration.
121
+
-**IP address space:** Determine how to allocate IP addresses when you create multiple virtual networks. You can create multiple virtual networks by using the same private IP address space in different regions. However, you can't peer, or connect, two virtual networks with the same address space to your on-premises network because it causes routing problems. If you plan to create a multi-network design, IP address planning is an important consideration.
122
122
123
-
Virtual networks don't require a lot of resources to run. You can invoke Azure APIs to create a virtual network with the same address space in a different region. However, to recreate the same environment that was present in the affected region, you must redeploy the VMs and other resources. If you have on-premises connectivity, such as in a hybrid deployment, you have to deploy a new VPN Gateway and connect to your on-premises network.
123
+
Virtual networks don't require a lot of resources to run. You can invoke Azure APIs to create a virtual network with the same address space in a different region. However, to recreate the same environment that exists in the affected region, you must redeploy the VMs and other resources. If you have on-premises connectivity, such as in a hybrid deployment, you have to deploy a new VPN Gateway instance and connect to your on-premises network.
124
124
125
-
For more information about a multi-region networking architecture for web applications, see [Multi-region load balancing with Traffic Manager, Azure Firewall, and Application Gateway](/azure/architecture/high-availability/reference-architecture-traffic-manager-application-gateway).
125
+
For more information about a multi-region networking architecture for web applications, see [Multi-region load balancing with Traffic Manager, Azure Firewall, and Azure Application Gateway](/azure/architecture/high-availability/reference-architecture-traffic-manager-application-gateway).
126
126
127
127
## Backups
128
128
129
-
Azure virtual networks don't store any data that requires backup. However, you can use Bicep, Azure Resource Manager templates, or Terraform to take a snapshot of the configuration of a virtual network if you need to recreate it. For more information, see [Quickstart: Create an Azure virtual network](../virtual-network/quickstart-create-virtual-network.md).
129
+
Azure virtual networks don't store any data that requires backup. However, you can use Bicep, Azure Resource Manager templates, or Terraform to take a snapshot of the configuration of a virtual network if you need to recreate it. For more information, see [Create an Azure virtual network](../virtual-network/quickstart-create-virtual-network.md).
130
130
131
131
## Service-level agreement
132
132
133
133
Because of the nature of the service provided, there isn't a defined service-level agreement for Virtual Network.
0 commit comments