ChatDiagram
Azure · hybrid cloud · networking

Azure Hybrid ExpressRoute Architecture

This Azure hybrid architecture diagram documents a private path from an on-premises router to Azure workloads. ExpressRoute terminates at an Azure gateway, and Azure Firewall inspects traffic before it enters the virtual network. The virtual network contains an application VM and Azure SQL Managed Instance. Azure Monitor receives telemetry from the workloads. It is useful for discussing where private connectivity, inspection and application services fit in a hybrid design.

Tipo Diagrama de redNorma Cisco-convention topology iconsMotor schematex-networkActualizado 24/9/2026
Azure Hybrid ExpressRoute Architecture
Drawing preview
La solicitud

“Create an Azure hybrid network with an on-premises router connected by ExpressRoute to Azure Firewall, then an Azure virtual network with an application VM, Azure SQL Managed Instance and Azure Monitor.”

Entonces pruebaAdd a second application VM.Add a site-to-site VPN as a backup connection.
Qué hay en este dibujo

Lee las decisiones que hay detrás.

01Private connectivity

ExpressRoute links the on-premises router to Azure.

02Central inspection

Azure Firewall sits between the gateway and virtual network.

03Shared monitoring

Azure Monitor receives telemetry from the workloads.

Use this pattern when documenting a simple private connection between an on-premises network and Azure workloads.

Explorar todas las plantillas de diagrama de red →

Preguntas frecuentes

Preguntas habituales

What is ExpressRoute?

ExpressRoute is a private connectivity option between an on-premises network and Azure.

Where is Azure Firewall placed?

In this example it is between the ExpressRoute gateway and the Azure virtual network.

What does the virtual network contain?

The example virtual network contains an application VM and Azure SQL Managed Instance.