链接：https://pan.baidu.com/s/16Cbpqtr8f41BSfKINC2GCw 

提取码：u8ki

Azurenetworking 7/28/2019 • 13 minutes to read • Edit Online Connectivity services SERVICE WHY USE? SCENARIOS Virtual network Enables Azureresources to securely communicate with each other, the internet, and on-premises networks. ExpressRoute Extends your on-premises networks into the Microsoft cloud over a private connection facilitated by a connectivity provider. VPN Gateway Sends encrypted traffic between an Azurevirtual network and an on- premises location over the public Internet. The networking services in Azure providea variety of networking capabilities that can be used together or separately. Click any of thefollowing key capabilities to learn moreabout them: Connectivity services: Connect Azureresources and on-premises resources using any or a combination of these networking services in Azure- Virtual Network (VNet), Virtual WAN,ExpressRoute, VPN Gateway, Azure DNS, or Azure Bastion. Application protection services Protectyour applications using any or a combination of these networking services in Azure- DDoS protection, Firewall, Network Security Groups, Web Application Firewall, or Virtual Network Endpoints. Application delivery services Deliver applications in the Azure network using any or a combination of these networking services in Azure- Content Delivery Network (CDN), AzureFront Door Service,Traffic Manager, Application Gateway, or Load Balancer. Network monitoring – Monitor your network resources using any or a combination of these networking services in Azure- Network Watcher,ExpressRoute Monitor, Azure Monitor, or VNetTerminal Access Point (TAP). This section describes services that provideconnectivity between Azureresources,connectivity from an on- premises network to Azureresources,and branch to branch connectivity in Azure- Virtual network,ExpressRoute, VPN Gateway, Virtual WAN, DNS,and Azure Bastion. Filter network traffic Route network traffic Restrict network access to resources Connect virtual networks Createand modify an ExpressRoute circuit Createand modify peering for an ExpressRoutecircuit Link a VNet to an ExpressRoute circuit Configureand manageroutefilters for ExpressRoutecircuits Site-to-site-connections VNet-to-VNet connections Point-to-siteconnections

Virtual WAN Optimizes and automates branch connectivity to, and through, Azure. Azureregions serveas hubs that you can chooseto connect your branches to. Azure DNS Hosts DNS domains that provide name resolution by using Microsoft Azure infrastructure. Azure Bastion (Preview) Configuresecureand seamless RDP/SSH connectivity to your virtual machines directly in the Azure portal over SSL. When you connect via Azure Bastion, your virtual machines do not need a public IP address SERVICE WHY USE? SCENARIOS VViirrttuuaall nneettwwoorrkk EExxpprreessssRRoouuttee Site-to-siteconnections, ExpressRouteconnections Host your domain in Azure DNS Create DNSrecords for a web app Createan alias record for Traffic Manager Createan alias record for public IP Address Createan alias record for zone resourcerecord Createan Azure Bastion host Connect using SSH to a Linux VM Connect using RDP to a Windows VM Azure Virtual Network (VNet) is thefundamental building block for your private network in Azure. You can usea VNets to: Communicate between Azure resources: You can deploy VMs,and several other types of Azureresources to a virtual network, such as Azure App ServiceEnvironments, the Azure Kubernetes Service(AKS),and Azure Virtual MachineScaleSets.To view a completelist of Azureresources thatyou can deploy into a virtual network, see Virtual network serviceintegration. Communicate between each other: You can connectvirtual networks to each other,enabling resources in either virtual network to communicate with each other, using virtual network peering.Thevirtual networks you connect can bein thesame, or different, Azureregions. For moreinformation, see Virtual network peering. Communicate to the internet: All resources in a VNet can communicate outbound to theinternet, by default. You can communicateinbound to a resource by assigning a public IP address or a public Load Balancer. You can also use Public IP addresses or public Load Balancer to manageyour outbound connections. Communicate with on-premises networks: You can connectyour on-premises computers and networks to a virtual network using VPN Gateway or ExpressRoute. For moreinformation, see What is Azure Virtual Network?. ExpressRouteenables you to extend your on-premises networks into the Microsoft cloud over a privateconnection facilitated by a connectivity provider.This connection is private.Traffic does not go over theinternet. With ExpressRoute,you can establish connections to Microsoft cloud services, such as Microsoft Azure, Office 365,and Dynamics 365. For moreinformation, see What is ExpressRoute?.