• IP Sec tunnel
• Encrypted
• Not preferred as traffic goes through the internet
• How to create a VPN Gateway
  • P2S VPN
  • S2S VPN
• If any VNet changes, for example new VNet Peering etc, need to reinstall VPN client with new config downloaded from Azure

Types

• P2S VPN - Connects a specific device to a virtual network
• S2S VPN - Connects a network to a virtual network
• S2S VPN gateways enable multiple VPN connections to different networks if route not policy based

High availability scenarios

1. Active/Standby
   1. Default
   2. Automatic failover in case of issues or planned maintenance
2. Active/Active
   1. Get 2 Public IP Address
   2. Uses BGP routing
3. Express Route failover
   1. Gateway as secure failover for Express Route
4. Zone-redundant gateways
   1. Azure VPN and Express Route as zone-redundant deployments, where supported

references:

MS Learn MS Docs P2S VPN S2S VPN High availability scenarios for VPN