Do we still need vxlan/ipsec tunnels?

[sblair01]

My customer is trying to adopt this, but I believe now that we have ARS, could traffic between vnets occur via a UDR or eBGP? If so, I think that approach is easier to configure and manage.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: a129a3a4-4853-bea2-127c-aca64e112601
• Version Independent ID: 47590ee5-cc55-860c-d6ff-e34aecccf1c2
• Content: Multi-region designs with Azure Route Server
• Content Source: articles/route-server/multiregion.md
• Service: route-server
• GitHub Login: @halkazwini
• Microsoft Alias: halkazwini

[ManoharLakkoju-MSFT]

@halkazwini Thanks for your feedback! We will investigate and update as appropriate.

[halkazwini]

Hi @sblair01, If you implement the solution using eBGP and vxlan/ipsec tunnels, then you don't need UDRs. Otherwise, you'll need UDRs to avoid routing loops (in case you don't use a vxlan/ipsec tunnel).

[halkazwini]

please-close