Azure Hybrid Architecture Options

Recipe

I was required to write an email to a colleague explaining what Hybrid Architecture is about and various options to implement the same in Microsoft Azure. I didn’t want this compiled information to be buried in an email so thought of publishing that as a blog.

Some of you might be already aware of this though! 🙂

My colleague’s client has an Oracle DB Server sitting on-prem behind the organization’s firewall and his client wants to use that as a data source in the Azure deployments, without migrating the database to Azure.

Ingredients

I suggested to him that, if you are looking to connect Azure deployments to on-prem resources there are two well-documented and neat approaches that Microsoft recommends.

Using VPN Gateway

VPN gateway is a virtual network gateway that sends encrypted traffic between the Azure virtual network and an on-premises location. Traffic goes over the public Internet though.

Pros

  • Cheaper compared to the Express Route
  • Simpler to configure

Cons

  • Slower compared the Express Routes
  • Requires an on-premises VPN device
  • 99.9% SLA covers only the VPN gateway and not the network connection to the gateway.

Using Express Route

ExpressRoute connections use a privatededicated connection that uses a third-party connectivity provider. The private connection extends the on-premises network to Azure.

It is perfect for applications running mission-critical workloads that have particularly high bandwidth requirements.

Pros

  • Fast
  • Higher bandwidth available; up to 10 Gbps
  • Supports dynamic scaling of bandwidth to help reduce costs
  • 99.9% availability SLA across the entire connection

Cons

  • Expensive
  • Complex to set up and configure. Creating an ExpressRoute connection requires working with a third-party connectivity provider
  • Needs high-bandwidth routers available on-premises      

Let’s Cook!

Pick your poison to implement the Hybrid Architecture – where some of the resources are deployed in Azure, while some of them are required to be deployed to the on-prem datacentre.