ChatDiagram
Azure · hybrid cloud · networking

Azure Hybrid ExpressRoute Architecture

This Azure hybrid architecture diagram documents a private path from an on-premises router to Azure workloads. ExpressRoute terminates at an Azure gateway, and Azure Firewall inspects traffic before it enters the virtual network. The virtual network contains an application VM and Azure SQL Managed Instance. Azure Monitor receives telemetry from the workloads. It is useful for discussing where private connectivity, inspection and application services fit in a hybrid design.

類型 網路圖標準 Cisco-convention topology icons引擎 schematex-network更新時間 2026/9/24
Azure Hybrid ExpressRoute Architecture
Drawing preview
需求

“Create an Azure hybrid network with an on-premises router connected by ExpressRoute to Azure Firewall, then an Azure virtual network with an application VM, Azure SQL Managed Instance and Azure Monitor.”

接著試試Add a second application VM.Add a site-to-site VPN as a backup connection.
這張圖裡有什麼

看懂背後的決策。

01Private connectivity

ExpressRoute links the on-premises router to Azure.

02Central inspection

Azure Firewall sits between the gateway and virtual network.

03Shared monitoring

Azure Monitor receives telemetry from the workloads.

Use this pattern when documenting a simple private connection between an on-premises network and Azure workloads.

瀏覽所有 網路圖 範本 →

常見問題

常見問題

What is ExpressRoute?

ExpressRoute is a private connectivity option between an on-premises network and Azure.

Where is Azure Firewall placed?

In this example it is between the ExpressRoute gateway and the Azure virtual network.

What does the virtual network contain?

The example virtual network contains an application VM and Azure SQL Managed Instance.