Cloud virtual networking

Virtual Private Cloud (VPC)

Virtual Network

Provides an isolated, private environment in the cloud. Users have control over their virtual networking environment, including selection of their own IP address range, creation of subnets, and configuration of route tables and network gateways.

NAT gateways

NAT Gateways

Virtual Network NAT

A service that simplifies outbound-only Internet connectivity for virtual networks. When configured on a subnet, all outbound connectivity uses your specified static public IP addresses. Outbound connectivity is possible without a load balancer or public IP addresses directly attached to virtual machines.

Cross-premises connectivity

VPN Gateway

VPN Gateway

Connects Azure virtual networks to other Azure virtual networks, or customer on-premises networks (Site To Site). Allows end users to connect to Azure services through VPN tunneling (Point To Site).

DNS management

Route 53

DNS

Manage your DNS records using the same credentials and billing and support contract as your other Azure services

DNS-based routing

Route 53

Traffic Manager

A service that hosts domain names, plus routes users to Internet applications, connects user requests to datacenters, manages traffic to apps, and improves app availability with automatic failover.

Dedicated network

Direct Connect

ExpressRoute

Establishes a dedicated, private network connection from a location to the cloud provider (not over the Internet).

Load balancing

Network Load Balancer

Load Balancer

Azure Load Balancer load balances traffic at layer 4 (TCP or UDP). Standard Load Balancer also supports cross-region or global load balancing.

Application-level load balancing

Application Load Balancer

Application Gateway

Application Gateway is a layer 7 load balancer. It supports SSL termination, cookie-based session affinity, and round robin for load-balancing traffic.

Route table

Custom Route Tables

User Defined Routes

Custom, or user-defined (static) routes to override default system routes, or to add more routes to a subnet's route table.

Private link

PrivateLink

Azure Private Link

Azure Private Link provides private access to services that are hosted on the Azure platform. This keeps your data on the Microsoft network.

Private PaaS connectivity

VPC endpoints

Private Endpoint

Private Endpoint provides secured, private connectivity to various Azure platform as a service (PaaS) resources, over a backbone Microsoft private network.

Virtual network peering

VPC Peering

VNET Peering

VNet peering is a mechanism that connects two virtual networks (VNets) in the same region through the Azure backbone network. Once peered, the two virtual networks appear as one for all connectivity purposes.

Content delivery networks

CloudFront

Front Door

Azure Front Door is a modern cloud content delivery network (CDN) service that delivers high performance, scalability, and secure user experiences for your content and applications.

Network Monitoring

VPC Flow Logs

Azure Network Watcher

Azure Network Watcher allows you to monitor, diagnose, and analyze the traffic in Azure Virtual Network.