search

Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.69k stars 963 forks source link

Adding Multi-Region Network Deployment #1608

Closed brsteph closed 3 months ago

brsteph commented 6 months ago

Overview/Summary

This PR adds the ability to a networking stack into two regions as part of the ALZ portal deployment.

This PR fixes/adds/changes/removes

  1. Deploy multiple Hub virtual networks, and have them peered together
  2. Associate single DDoS Network Protection instance to all hub networks deployed
  3. Deploy Private DNS Zones for Azure PaaS services to multiple regions
  4. Associate Private DNS Zones to all virtual networks
  5. Deploy VPN Gateway to multiple regions
  6. Deploy ExpressRoute Gateway to multiple regions
  7. Deploy Azure Firewall to multiple regions
  8. Deploy Azure Firewall policies to support multi-region REVISITING
  9. Deploy vWAN Virtual Hub to multiple regions, including embedded services
  10. Deploy Identity virtual network in multiple regions

Breaking Changes

  1. Unsure at this time - may need feedback on this.

Testing Evidence

Please provide any testing evidence to show that your Pull Request works/fixes as described and planned (include screenshots, if appropriate).

image image image

(More can be provided as needed)

Testing URLs

The below URLs can be updated where the placeholders are, look for {YOUR GITHUB BRANCH NAME HERE - Remove Curly Brackets Also} & {YOUR GITHUB BRANCH NAME HERE - Remove Curly Brackets Also}, to allow you to test your portal deployment experience.

Please also replace the curly brackets on the placeholders {}

Azure Public

Deploy To Azure

Azure US Gov (Fairfax)

Deploy To Azure

As part of this Pull Request I have