ChatDiagram
Azure · hybrid cloud · networking

Azure Hybrid ExpressRoute Architecture

This Azure hybrid architecture diagram documents a private path from an on-premises router to Azure workloads. ExpressRoute terminates at an Azure gateway, and Azure Firewall inspects traffic before it enters the virtual network. The virtual network contains an application VM and Azure SQL Managed Instance. Azure Monitor receives telemetry from the workloads. It is useful for discussing where private connectivity, inspection and application services fit in a hybrid design.

Typ NetzwerkdiagrammStandard Cisco-convention topology iconsEngine schematex-networkAktualisiert 24.9.2026
Azure Hybrid ExpressRoute Architecture
Drawing preview
Die Anfrage

“Create an Azure hybrid network with an on-premises router connected by ExpressRoute to Azure Firewall, then an Azure virtual network with an application VM, Azure SQL Managed Instance and Azure Monitor.”

Dann probieren SieAdd a second application VM.Add a site-to-site VPN as a backup connection.
Was diese Zeichnung zeigt

Die dahinterstehenden Entscheidungen verstehen.

01Private connectivity

ExpressRoute links the on-premises router to Azure.

02Central inspection

Azure Firewall sits between the gateway and virtual network.

03Shared monitoring

Azure Monitor receives telemetry from the workloads.

Use this pattern when documenting a simple private connection between an on-premises network and Azure workloads.

Alle Netzwerkdiagramm-Vorlagen durchsuchen →

FAQ

Häufige Fragen

What is ExpressRoute?

ExpressRoute is a private connectivity option between an on-premises network and Azure.

Where is Azure Firewall placed?

In this example it is between the ExpressRoute gateway and the Azure virtual network.

What does the virtual network contain?

The example virtual network contains an application VM and Azure SQL Managed Instance.