Azure ExpressRoute

Azure ExpressRoute provides a private, dedicated connection between your on-premises infrastructure and Azure, bypassing the public internet entirely. It delivers higher bandwidth, lower latency, and more consistent performance than VPN connections, making it the preferred choice for enterprise hybrid networking.

---

What Is ExpressRoute?

ExpressRoute establishes a private link between your data centre (or colocation facility) and Azure through a connectivity provider (such as Equinix, Megaport, or BT). Traffic never crosses the public internet.

On-premises data centre
        |
  Connectivity Provider (e.g. Equinix)
        |
  Microsoft Enterprise Edge (MSEE) routers
        |
  Azure VNets, Microsoft 365, Dynamics 365

---

Key Benefits

Benefit	Description
Private connectivity	Traffic stays on the provider's and Microsoft's private network.
Consistent latency	No internet variability; predictable, low-latency performance.
High bandwidth	Circuit speeds from 50 Mbps to 100 Gbps.
SLA	99.95% availability SLA (99.99% with ExpressRoute Direct).
Access to Microsoft services	Reach Azure, Microsoft 365, and Dynamics 365 over a private path.
No data cap	Unlimited data transfer option available.

---

Connectivity Models

Model	Description
CloudExchange colocation	You are physically located in a colocation facility (e.g. Equinix) that has a direct connection to Microsoft's edge.
Point-to-point Ethernet	A dedicated Ethernet link from your data centre to Microsoft's edge.
Any-to-any (IPVPN)	Your WAN provider integrates with Microsoft's edge, extending your MPLS network to Azure.
ExpressRoute Direct	You connect directly to Microsoft's edge routers at a peering location, bypassing the connectivity provider. Supports 10 Gbps or 100 Gbps.

---

Peering Types

An ExpressRoute circuit supports two peering configurations:

Azure Private Peering

Connects to your Azure Virtual Networks. Resources in your VNets (VMs, databases, internal services) are accessible over the private connection.

• Uses private IP addresses
• Supports BGP for dynamic routing
• This is the most commonly used peering type

Microsoft Peering

Connects to Microsoft 365, Dynamics 365, and Azure PaaS services (Storage, SQL) using their public IP addresses over the private circuit.

• Requires NAT (public IP addresses on your side)
• Route filters control which Microsoft services are accessible
• Useful for organisations that want private connectivity to SaaS services

Note: Azure Public Peering has been retired. Use Microsoft Peering or Service Endpoints / Private Endpoints instead.

---

ExpressRoute Circuits

An ExpressRoute circuit is the logical connection between your on-premises infrastructure and Microsoft's edge. Each circuit has:

• Bandwidth — 50 Mbps, 100 Mbps, 200 Mbps, 500 Mbps, 1 Gbps, 2 Gbps, 5 Gbps, 10 Gbps, or 100 Gbps (Direct only)
• SKU — Local, Standard, or Premium
• Billing model — Metered (pay per GB of egress) or Unlimited

SKU	Scope
Local	Access to one or two Azure regions near the peering location. Free egress data.
Standard	Access to all Azure regions within the same geopolitical region (e.g. all of Europe).
Premium	Access to all Azure regions globally. Higher route table limits.

---

ExpressRoute Global Reach