VPN Gateway
A gateway that sends encrypted traffic between Azure and on-premises networks over the public internet.
Azure VPN Gateway is a managed service that establishes encrypted IPsec/IKE tunnels over the public internet between an Azure virtual network and on-premises locations or remote clients. It supports site-to-site (entire on-premises network to Azure), point-to-site (individual devices to Azure), and VNet-to-VNet connections. For AZ-900, the key contrast is with ExpressRoute: VPN Gateway sends encrypted traffic over the internet, making it cheaper and faster to provision but subject to variable latency. ExpressRoute uses a private, dedicated circuit that bypasses the internet, offering predictable performance and higher reliability for throughput-sensitive or regulatory scenarios.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →