您现在访问的是微软AZURE全球版技术文档网站,若需要访问由世纪互联运营的MICROSOFT AZURE中国区技术文档网站,请访问 https://docs.azure.cn.

关于 Azure 可用性区域中的区域冗余虚拟网络网关About zone-redundant virtual network gateways in Azure Availability Zones

可以在 Azure 可用性区域中部署 VPN 网关和 ExpressRoute 网关。You can deploy VPN and ExpressRoute gateways in Azure Availability Zones. 这样可以提高虚拟网络网关的复原性、可伸缩性和可用性。This brings resiliency, scalability, and higher availability to virtual network gateways. 如果在 Azure 可用性区域中部署网关,可以在地理位置和逻辑上将区域内的网关分隔开来,同时还能保护本地网络与 Azure 的连接免受区域级故障的影响。Deploying gateways in Azure Availability Zones physically and logically separates gateways within a region, while protecting your on-premises network connectivity to Azure from zone-level failures.

区域冗余网关Zone-redundant gateways

若要跨可用性区域自动部署虚拟网络网关,可以使用区域冗余虚拟网络网关。To automatically deploy your virtual network gateways across availability zones, you can use zone-redundant virtual network gateways. 使用区域冗余网关,可受益于区域复原能力,从而可以访问 Azure 上的任务关键型可扩展服务。With zone-redundant gateways, you can benefit from zone-resiliency to access your mission-critical, scalable services on Azure.



区域冗余网关图

区块网关Zonal gateways

若要在特定区域中部署网关,可使用区域网关。To deploy gateways in a specific zone, you can use zonal gateways. 部署区域网关时,网关的所有实例都部署在同一可用性区域中。When you deploy a zonal gateway, all instances of the gateway are deployed in the same Availability Zone.



区块网关图

网关 SKUGateway SKUs

区域冗余网关和区域网关以新的网关 SKU 的形式提供。Zone-redundant and zonal gateways are available as new gateway SKUs. 我们已在 Azure AZ 区域中添加了新的虚拟网络网关 SKU。We have added new virtual network gateway SKUs in Azure AZ regions. 这些 SKU 与 ExpressRoute 网关和 VPN 网关的相应现有 SKU 类似,不同之处在于它们是区域冗余网关和区域网关的专用 SKU。These SKUs are similar to the corresponding existing SKUs for ExpressRoute and VPN Gateway, except that they are specific to zone-redundant and zonal gateways. 可以通过 SKU 名称中的 "AZ" 标识这些 Sku。You can identify these SKUs by the "AZ" in the SKU name.

有关网关 Sku 的信息,请参阅VPN 网关 skuExpressRoute 网关 skuFor information about gateway SKUs, see VPN gateway SKUs and ExpressRoute gateway SKUs.

公共 IP SKUPublic IP SKUs

区域冗余网关和区块网关都依赖 Azure 公共 IP 资源标准 SKU。Zone-redundant gateways and zonal gateways both rely on the Azure public IP resource Standard SKU. Azure 公共 IP 资源的配置决定了是部署区域冗余网关,还是部署区块网关。The configuration of the Azure public IP resource determines whether the gateway that you deploy is zone-redundant, or zonal. 如果使用基本 SKU 创建公共 IP 资源,网关不会有任何区域冗余,且网关资源具有区域性。If you create a public IP resource with a Basic SKU, the gateway will not have any zone redundancy, and the gateway resources will be regional.

区域冗余网关Zone-redundant gateways

如果使用标准公共 IP SKU 创建公共 IP 地址,但未指定区域,行为因网关是 VPN 网关还是 ExpressRoute 网关而异。When you create a public IP address using the Standard public IP SKU without specifying a zone, the behavior differs depending on whether the gateway is a VPN gateway, or an ExpressRoute gateway.

  • 对于 VPN 网关,两个网关实例会部署到这三个区域中的任意两个区域,以实现区域冗余。For a VPN gateway, the two gateway instances will be deployed in any 2 out of these three zones to provide zone-redundancy.
  • 对于 ExpressRoute 网关,由于可以有超过两个实例,因此网关可以跨所有这三个区域部署。For an ExpressRoute gateway, since there can be more than two instances, the gateway can span across all the three zones.

区块网关Zonal gateways

如果使用标准公共 IP SKU 创建公共 IP 地址,并指定区域(1、2 或 3),所有网关实例都会部署到同一区域中。When you create a public IP address using the Standard public IP SKU and specify the Zone (1, 2, or 3), all the gateway instances will be deployed in the same zone.

区域网关Regional gateways

如果使用基本公共 IP SKU 创建公共 IP 地址,网关会部署为区域网关,并且不会内置有任何区域冗余。When you create a public IP address using the Basic public IP SKU, the gateway is deployed as a regional gateway and does not have any zone-redundancy built into the gateway.

常见问题解答FAQ

部署这些新 SKU 时会发生什么变化?What will change when I deploy these new SKUs?

从你的角度来看,可以部署区域冗余网关。From your perspective, you can deploy your gateways with zone-redundancy. 也就是说,所有网关实例都会跨 Azure 可用性区域部署,每个可用性区域都是不同的容错域和更新域。This means that all instances of the gateways will be deployed across Azure Availability Zones, and each Availability Zone is a different fault and update domain. 这样可以提高网关的可靠性、可用性和区域故障复原性。This makes your gateways more reliable, available, and resilient to zone failures.

是否可以使用 Azure 门户?Can I use the Azure portal?

是的,可以使用 Azure 门户部署新 SKU。Yes, you can use the Azure portal to deploy the new SKUs. 但是,你将仅在具有 Azure 可用性区域的 Azure 区域中看到这些新 SKU。However, you will see these new SKUs only in those Azure regions that have Azure Availability Zones.

我可以在哪些区域中使用新 SKU?What regions are available for me to use the new SKUs?

Azure 区域中提供了新的 Sku,其中包含 Azure 可用性区域美国、法国中部、北欧、西欧和美国西部2区域、美国东部、美国东部2、东南亚、日本东部、英国南部。The new SKUs are available in Azure regions that have Azure Availability Zones - Central US, France Central, North Europe, West Europe, and West US 2 regions, East US, East US 2, Southeast Asia, Japan East, UK South. 今后,我们将在其他 Azure 公共区域推出区域冗余网关。Going forward, we will make zone-redundant gateways available to you in other Azure Public Regions.

我能否将现有虚拟网络网关更改/迁移/升级为区域冗余网关或区域网关?Can I change/migrate/upgrade my existing virtual network gateways to zone-redundant or zonal gateways?

暂不支持将现有虚拟网络网关迁移到区域冗余网关或区块网关。Migrating your existing virtual network gateways to zone-redundant or zonal gateways is currently not supported. 不过,可以删除现有网关,并重新创建区域冗余网关或区块网关。You can, however, delete your existing gateway and re-create a zone-redundant or zonal gateway.

我能否在同一虚拟网络中同时部署 VPN 网关和 ExpressRoute 网关?Can I deploy both VPN and Express Route gateways in same virtual network?

支持 VPN 网关和 ExpressRoute 网关同时共存于同一虚拟网络中。Co-existence of both VPN and Express Route gateways in the same virtual network is supported. 但是,应为网关子网保留 /27 IP 地址范围。However, you should reserve a /27 IP address range for the gateway subnet.

后续步骤Next steps

创建区域冗余的虚拟网关Create a zone-redundant virtual network gateway