2. S2S tunnels
P2S tunnels
ExpressRoute
Internet

3. 1. 고객의 On-premise과 AzureDC를 전용회선으로 연결 Internet VPN 연결 대비보안성, 안정성을
제공하는 서비스
2. Microsoft의 다양한 서비스 사용 가능(IaaS, PaaS and SaaS)
3. 시나리오: 대규모 데이타 전송, DC migration, HPC on Azure, SAP on Azure, Azure Stack on Azure.
Microsoft peering
Public peering
Private peering
• Office 365
• Dynamic 365
• Analytics
• IoT
• Media and CDN
• Hybrid integration Com
• Web and mobile
• Date
• VNET

6. ExpressRoute FAQ
ER+VPN 이중화구성
Customer’s
network
ExpressRoute Meet-Me Site
MSFT Router 1
MSFT Router 2
Provider Device 1
Provider Device 2
“demarcation”
Physical
ExpressRoute circuit
BGPsessionsBGPsessions
IP VPN or Ethernet

12. • Global connectivity
• More routes (IP prefixes)
• Connect more virtual networks
• Connect to Office365 and CRM Online

13. ExpressRoute
Customer’s
network
DMZ
Azure Virtual Network
(VNET1)
DMZ
Azure Virtual Network
(VNET2)
BGP (0.0.0.0/0)

14. ExpressRoute
Customer’s
network
DMZ
Azure Virtual Network
(VNET1)
DMZ
Azure Virtual Network
(VNET2)
BGP (0.0.0.0/0)

15. Customer’s
network
ExpressRoute
Azure Public Services
NAT

16. Voice
Video & Interactive
Best effort
Customer’s
network
Public Internet
DNS CDN
Required
Bidirectional connections
NAT

17. Customer’s
network
ExpressRoute
Circuit
Partner
Edge
Microsoft
Edge
Microsoft & Azure Public peerings
1. Private or public ASN
2. Public IP addresses registered
in IRR
Azure Private peering
1. Private or public ASN
2. Private or public IP addresses

18. Customer’s
network
ExpressRoute
Circuit
Partner
Edge
Microsoft
Edge
Microsoft peering
1. Outound traffic Source-NAT
2. Public, IRR-registered NAT pool
3. NAT pool not advertised to the
internet
4. Inbound traffic Source-NAT
Azure Private peering
1. Private or public ASN
2. Private or public IP addresses
Azure Public peering
1. Outbound traffic Source-NAT
2. Public, IRR-registered NAT pool
3. NAT pool not advertised to the
internet

21. ExpressRoute Circuit
Customer’s
network Microsoft Edge
Partner
Edge