ChatDiagram
Azure · hybrid cloud · networking

Azure Hybrid ExpressRoute Architecture

This Azure hybrid architecture diagram documents a private path from an on-premises router to Azure workloads. ExpressRoute terminates at an Azure gateway, and Azure Firewall inspects traffic before it enters the virtual network. The virtual network contains an application VM and Azure SQL Managed Instance. Azure Monitor receives telemetry from the workloads. It is useful for discussing where private connectivity, inspection and application services fit in a hybrid design.

סוג תרשים רשתתקן Cisco-convention topology iconsמנוע schematex-networkעודכן 24.9.2026
Azure Hybrid ExpressRoute Architecture
Drawing preview
הבקשה

“Create an Azure hybrid network with an on-premises router connected by ExpressRoute to Azure Firewall, then an Azure virtual network with an application VM, Azure SQL Managed Instance and Azure Monitor.”

ואז נסוAdd a second application VM.Add a site-to-site VPN as a backup connection.
מה מופיע בתרשים הזה

פענחו את ההחלטות שמאחוריו.

01Private connectivity

ExpressRoute links the on-premises router to Azure.

02Central inspection

Azure Firewall sits between the gateway and virtual network.

03Shared monitoring

Azure Monitor receives telemetry from the workloads.

Use this pattern when documenting a simple private connection between an on-premises network and Azure workloads.

עיון בכל תבניות ה־תרשים רשת ←

שאלות נפוצות

שאלות נפוצות

What is ExpressRoute?

ExpressRoute is a private connectivity option between an on-premises network and Azure.

Where is Azure Firewall placed?

In this example it is between the ExpressRoute gateway and the Azure virtual network.

What does the virtual network contain?

The example virtual network contains an application VM and Azure SQL Managed Instance.