Azure Administrator Associate (AZ-104)
1 Manage Azure identities and governance
1-1 Manage Azure AD objects
1-2 Manage role-based access control (RBAC)
1-3 Manage subscriptions and governance
2 Implement and manage storage
2-1 Manage storage accounts
2-2 Manage blob storage
2-3 Manage disk storage
2-4 Manage file shares
2-5 Implement Azure Backup
3 Deploy and manage Azure compute resources
3-1 Manage virtual machines (VMs)
3-2 Manage VM extensions
3-3 Manage virtual machine scale sets (VMSS)
3-4 Manage Azure App Services
3-5 Manage Azure Container Instances (ACI)
3-6 Manage Azure Kubernetes Service (AKS)
4 Configure and manage virtual networking
4-1 Manage Azure virtual networks
4-2 Manage network security groups (NSGs)
4-3 Manage Azure DNS
4-4 Manage Azure load balancers
4-5 Manage Azure Application Gateway
4-6 Manage Azure VPN Gateway
4-7 Manage Azure ExpressRoute
4-8 Manage Azure Traffic Manager
4-9 Manage Azure Content Delivery Network (CDN)
5 Monitor and back up Azure resources
5-1 Monitor resources using Azure Monitor
5-2 Implement and manage Azure Backup
5-3 Implement and manage Azure Site Recovery
5-4 Implement and manage Azure Security Center
5-5 Implement and manage Azure Update Management
Manage Azure ExpressRoute

Manage Azure ExpressRoute

Key Concepts

Azure ExpressRoute

Azure ExpressRoute is a service that provides private connectivity between your on-premises infrastructure and Microsoft cloud services, such as Azure and Office 365. This connectivity is established through a connectivity provider and offers higher security, reliability, and faster speeds compared to traditional internet connections.

Think of ExpressRoute as a dedicated, high-speed highway that connects your office directly to the Microsoft cloud, bypassing the public internet.

ExpressRoute Circuits

An ExpressRoute circuit is the foundational resource that represents the logical connection between your on-premises infrastructure and Microsoft cloud services. Each circuit is defined by attributes such as bandwidth, provider, and peering location. ExpressRoute circuits can be configured to support different types of connectivity, including point-to-point Ethernet, virtual cross-connections, and IP VPN networks.

Analogy: An ExpressRoute circuit is like a dedicated lane on the highway that ensures your data travels directly and securely to the Microsoft cloud without any detours.

ExpressRoute Providers

ExpressRoute providers are network service providers that offer connectivity services for establishing ExpressRoute circuits. These providers can be telecommunications companies, cloud exchange providers, or network service providers. They facilitate the physical connection between your on-premises network and the Microsoft cloud, ensuring high availability and low latency.

Example: Think of ExpressRoute providers as the construction companies that build and maintain the dedicated highway connecting your office to the Microsoft cloud.

ExpressRoute Peering

ExpressRoute peering refers to the configuration settings that define how traffic is routed between your on-premises network and Microsoft cloud services. There are three types of peering: Azure Private Peering, Azure Public Peering, and Microsoft Peering. Azure Private Peering allows you to connect your virtual networks (VNets) in Azure to your on-premises network, while Azure Public Peering and Microsoft Peering provide connectivity to public IP addresses and Microsoft services, respectively.

Analogy: ExpressRoute peering is like setting up different toll booths on the highway, each directing traffic to specific destinations such as your private data center, public services, or Microsoft cloud services.

Conclusion

Managing Azure ExpressRoute involves understanding and effectively using ExpressRoute circuits, providers, and peering configurations. By leveraging these features, you can establish secure, reliable, and high-performance connections between your on-premises infrastructure and Microsoft cloud services, ensuring optimal performance and security for your applications and data.