20221220 Azure Public IP 路由偏好教戰手冊

Slide 1

Slide 1 text

Azure Public IP 路由偏好教戰手冊 Phil Huang Sr. Cloud Solution Architect 2022/12/20 以建立 Azure S2S VPN 為例

Slide 2

Slide 2 text

Azure S2S VPN 建立方案選擇 Azure Virtual Network Gateways Public IP via Microsoft Public IP via Internet

Slide 3

Slide 3 text

First public IP address Azure Virtual Network Gateways • First public IP address 為該 Virtual Network Gateway 主要連線方式，故選擇適合的 Public IP 於此使用相當重要

Slide 4

Slide 4 text

Routing Preference Azure Public IP Addresses V.S. Choose Microsoft network? Choose Internet?

Slide 5

Slide 5 text

Hot / Cold Potato Routing Azure Public IP 路由偏好指南

Slide 6

Slide 6 text

Azure 路由喜好設定熱馬鈴薯路由 (Hot potato routing) v.s. 冷馬鈴薯路由 (Cold potato routing) PoP: Point of Presence, 網路服務提供點 Ref: https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/routing-preference-overview Cold potato routing Hot potato routing

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

Azure Public IP 路由偏好常見問題 Q&A • Q1: 於 Azure 上的 Public IP 路由偏好選擇有什麼差異? • Q2: 是不是一律路由選擇偏好 Microsoft 一定就是最好的? • Q3: 要如何挑選區域及進行自我檢測呢?

Slide 9

Slide 9 text

Azure Public IP 路由偏好常見問題 Q&A • Q1: 於 Azure 上的 Public IP 路由偏好選擇有什麼差異? • A1: 路由路徑會不一樣，詳請後述 • Q2: 是不是一律路由選擇偏好 Microsoft 一定就是最好的? • A2: 不一定，有可能選 Internet 反而比較快，而 Microsoft network 比較慢，需實測為主 • Q3: 要如何挑選區域及進行自我檢測呢? • A4: 採用 Public IP 之前可以先進行自我簡單檢測

Slide 10

Slide 10 text

Q1: 於 Azure 上的 Public IP 路由偏好選擇有什麼差異? Azure Public IP 路由偏好指南

Slide 11

Slide 11 text

我家網路我家網路 HINET, Taiwan NTT, Japan HINET, Taiwan PCCW, HongKong Microsoft Backbone hkg31 -> hkg20 -> tyo31 Routing Preference: Internet Routing Preference: Microsoft network

Slide 12

Slide 12 text

Routing Preference: Internet Routing Preference: Microsoft network 我家網路我家網路 HINET, Taiwan HINET, Taiwan Microsoft Backbone tyo30 -> osa31 PCCW, HongKong

Slide 13

Slide 13 text

Routing Preference: Internet Routing Preference: Microsoft network 我家網路我家網路 HINET, Taiwan HINET, Taiwan TATA Communications PCCW, HongKong Microsoft Backbone hkg31 -> sg2

Slide 14

Slide 14 text

Routing Preference: Internet Routing Preference: Microsoft network 我家網路我家網路 HINET, Taiwan HINET, Taiwan PCCW, HongKong PCCW, HongKong Microsoft Backbone hkg31

Slide 15

Slide 15 text

Q2: 是不是一律路由選擇偏好 Microsoft 一定就是最好的? Azure Public IP 路由偏好指南

Slide 16

Slide 16 text

Avg. 50.8ms Routing Preference: Internet Routing Preference: Microsoft network Avg. 74.0ms

Slide 17

Slide 17 text

Routing Preference: Internet Routing Preference: Microsoft network Avg. 53.4ms Avg. 55.6ms

Slide 18

Slide 18 text

Routing Preference: Internet Routing Preference: Microsoft network Avg. 65.3ms Avg. 68.9ms

Slide 19

Slide 19 text

Routing Preference: Internet Routing Preference: Microsoft network Avg. 38.1ms Avg. 35.8ms

Slide 20

Slide 20 text

Q3: 要如何挑選區域及進行自我檢測呢? Azure Public IP 路由偏好指南

Slide 21

Slide 21 text

新增 Public IP address Allow Internet resource to communicate inbound to Azure resource By region

Slide 22

Slide 22 text

My Traceroute Network Diagnostic Tool that combines Ping and Traceroute [localhost]$ mtr -z -b

Slide 23

Slide 23 text

nitefood / asn ASN Lookup Tool and Traceroute Server Ref: https://github.com/nitefood/asn

Slide 24

Slide 24 text

Invent with purpose.