Skip to content

Commit 0747cc9

Browse files
authored
Merge pull request #54036 from staleycyn/patch-1
Content-drift virtual network peering
2 parents 2a66920 + 2b5c45e commit 0747cc9

6 files changed

Lines changed: 31 additions & 8 deletions

File tree

learn-pr/wwl-azure/configure-vnet-peering/includes/2-determine-uses.md

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,4 +34,21 @@ Consider the benefits of using Azure Virtual Network peering.
3434
| **Strong performance** | Because Azure Virtual Network peering utilizes the Azure infrastructure, you gain a low-latency, high-bandwidth connection between resources in different virtual networks. |
3535
| **Simplified communication** | Azure Virtual Network peering lets resources in one virtual network communicate with resources in a different virtual network, after the virtual networks are peered. |
3636
| **Seamless data transfer** | You can create an Azure Virtual Network peering configuration to transfer data across Azure subscriptions, deployment models, and across Azure regions. |
37-
| **No resource disruptions** | Azure Virtual Network peering doesn't require downtime for resources in either virtual network when creating the peering, or after the peering is created. |
37+
| **No resource disruptions** | Azure Virtual Network peering doesn't require downtime for resources in either virtual network when creating the peering, or after the peering is created. |
38+
39+
### Things to know about peering requirements and limitations
40+
41+
While VNet peering provides many benefits, there are important constraints to understand.
42+
43+
| Requirements/Limitations | Description |
44+
| --- | --- |
45+
| **Nonoverlapping address spaces** | Peered virtual networks must have non-overlapping IP address spaces. Peering creation fails if address ranges overlap. |
46+
| **Address space modification restrictions** | If you want to change a VNet's address range, you need to delete the peering first, update the address space, and then set up the peering again. |
47+
| **Basic Load Balancer limitations** | Resources in one VNet can’t communicate with Basic Internal Load Balancer IPs in VNets peered across regions. Use the Standard Load Balancer for cross-region connections. |
48+
| **DNS resolution boundaries** |Azure's built-in name resolution does not work across peered VNets. Configure Azure Private DNS zones or custom DNS servers for cross-VNet name resolution. |
49+
50+
51+
52+
53+
54+

learn-pr/wwl-azure/configure-vnet-peering/includes/3-determine-gateway-transit-connectivity.md

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,19 @@ Consider a scenario where three virtual networks in the same region are connecte
88

99
:::image type="content" source="../media/gateway-transit-173a51a0.png" alt-text="Diagram of a regional virtual network peering. One network allows VPN gateway transit and uses a remote VPN gateway to access resources in a hub virtual network." border="false":::
1010

11-
12-
13-
The Azure portal doesn't specifically mention *gateway transit* and *connectivity*. Instead, you have choices for allowing and forwarding network traffic.
11+
The Azure portal provides four key settings when configuring virtual network peering.
1412

1513
:::image type="content" source="../media/peering-settings.png" alt-text="Screenshot of the peering options in the portal." border="false":::
1614

17-
> [!TIP]
18-
> Use **Ask Learn** (available in English) or **Copilot** to explore *Azure gateway transit*.
15+
- **Traffic to remote virtual network**. Controls whether traffic flows from this VNet to the remote VNet.
16+
17+
- **Traffic forwarded from remote virtual network**. Controls whether forwarded (non-originating) traffic is accepted from the peered VNet.
18+
19+
- **Virtual network gateway or Route Server**. Enables gateway transit. Lets peered VNets use this VNet's VPN Gateway or Azure Route Server.
20+
21+
- **Remote virtual network gateway or Route Server**. Enables this VNet to use the remote VNet's VPN Gateway or Route Server.
22+
23+
1924

2025
### Things to know about Azure VPN Gateway
2126

learn-pr/wwl-azure/configure-vnet-peering/includes/4-create.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,6 @@ In the Azure portal, you can check the connectivity status of the virtual networ
2525
> [!Important]
2626
> Your peering isn't successfully established until both virtual networks in the peering have a status of **Connected**.
2727
28-
- For deployment with the Azure Resource Manager, the two primary status conditions are **Initiated** and **Connected**. For the classic deployment model, the **Updating** status condition is also used.
28+
- The two peering status conditions are **Initiated** and **Connected**.
2929

3030
- When you create the initial peering _to_ the second (remote) virtual network from the first virtual network, the peering status for the first virtual network is **Initiated**.

learn-pr/wwl-azure/configure-vnet-peering/includes/5-determine-service-chaining-uses.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ There are a few ways to extend the capabilities of your peering for resources an
1313
| **Hub and spoke network** | When you deploy a hub-and-spoke network, the hub virtual network can host infrastructure components like a network virtual appliance (NVA) or Azure VPN gateway. All the spoke virtual networks can then peer with the hub virtual network. Traffic can flow through NVAs or VPN gateways in the hub virtual network. |
1414
| **User-defined route (UDR)** | Virtual network peering enables the next hop in a [user-defined route](/azure/virtual-network/virtual-networks-udr-overview#user-defined) to be the IP address of a virtual machine in the peered virtual network, or a VPN gateway. |
1515
| **Service chaining** | [Service chaining](/azure/virtual-network/virtual-network-peering-overview#service-chaining) is used to direct traffic from one virtual network to a virtual appliance or gateway. To enable service chaining, configure UDRs that point to virtual machines in peered virtual networks as the next hop IP address. UDRs could also point to virtual network gateways to enable service chaining. |
16+
| **Azure Virtual Network Manager** | Centrally manages hub-and-spoke or mesh peering topologies at scale. Automates peering creation without manual per-VNet configuration. |
1617

1718

1819
The following diagram shows a hub and spoke virtual network with an NVA and VPN gateway. The hub and spoke network is accessible to other virtual networks via user-defined routes and service chaining.

learn-pr/wwl-azure/configure-vnet-peering/index.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
prefetch-feature-rollout: true
66
title: Configure Azure Virtual Network Peering
77
description: "Learn to configure an Azure Virtual Network peering connection and address transit and connectivity concerns."
8-
ms.date: 02/19/2026
8+
ms.date: 03/23/2026
99
author: wwlpublish
1010
ms.author: cynthist
1111
ms.topic: module
53 KB
Loading

0 commit comments

Comments
 (0)