VPN Gateway
Establish secure, cross-premises connectivity
Azure VPN Gateway enables you to establish secure, cross-premises connectivity between your virtual network within Azure and on-premises IT infrastructure.
Pricing Details
VPN Gateway
Setting up the virtual network is free. However, we will charge for the VPN Gateway that connects to on-premises and other virtual networks in Azure. This charge is based on the amount of time that gateway is provisioned and available.
Inbound Inter-virtual network data transfers
data going in between two virtual networks in one region: free
data going in between two virtual networks in different regions (East China Data Center and North China Data Center): free
Outbound Inter-virtual network data transfers
data going out between two virtual networks in one region: free
data going out between two virtual networks in different regions (East China Data Center and North China Data Center): ￥0.16/GB
Outbound P2S (Point-to-Site) VPN data transfer
(ie., data going out Azure virtual network through P2S VPN):
data transferred out of Azure virtual network through the P2S VPNs will be charged in accordance with standard data transfer rates.
VPN Gateways — Availability Zones
As with all of Azure, we are continuously innovating, upgrading, and refining our virtual network gateways to further increase reliability and availability. By adding support for Azure Availability Zones , we bring increased resiliency, scalability, and higher availability to virtual network gateways. You can deploy VPN and ExpressRoute gateways in Azure Availability Zones by using the new Zone Redundant Gateway SKUs. This physically and logically separates them into different Availability Zones protecting your on-premises network connectivity to Azure from zone-level failures. The bandwidth thresholds remain the same for the zone redundant gateways.
| PN Gateway Type | Price | Bandwidth | S2S Tunnels | P2S Tunnels |
|---|---|---|---|---|
| VpnGw1AZ | 1.34/hour | 650 Mbps | Max 30 | Max 250 |
| 1-10: Included | 1-128：Included | |||
| 11-30: ￥0.0945/hour per tunnel | ||||
| VpnGw2AZ | 3.43/hour | 1 Gbps | Max 30 | Max 500 |
| 1-10：Included | 1-128：Included | |||
| 11-30: ￥0.0945/hour per tunnel | ||||
| VpnGw3AZ | 8.78/hour | 1.25 Gbps | Max 30 | Max 1000 |
| 1-10：Included | 1-128：Included | |||
| 11-30: ￥0.0945/hour per tunnel | ||||
| VpnGw4AZ | 14.69/hour | 5 Gbps | Max 100 | Max 5000 |
| 1-10：Included | 1-128：Included | |||
| 11-100: ￥0.0945/hour per tunnel | ||||
| VpnGw5AZ | 25.57/hour | 10 Gbps | Max 100 | Max 10000 |
| 1-10：Included | 1-128：Included | |||
| 11-100: ￥0.0945/hour per tunnel |
FAQ
Expand all-
Is a usage of less than 1 hour charged for 1 hour?
Yes. the usage less than 1 hour will be charged for 1 hour.
-
Will the data transfer in the VPN connection be charged separately?
Yes. Data transfer between two virtual networks is charged at the Inter-VNET rates listed above. And other data transfers over VPN connections to your on-premises site or internet site in general are charged separately in accordance with standard data transfer rates.
-
Is the Inter-VNET transfer charged at the rates of the source region or the destination region?
It is similar to the standard data transfer charge, and Inter-VNET data transfer is charged at the rates of the source region.
-
Will a Inter-VNET data transfer in the same region be charged?
No, it will not. Only data transfer between two different regions will be charged, except with P2S VPNs.
-
How many site-to-site VPN tunnels can a VPN gateway support?
Static-routing VPN Gateway: 1
Dynamic-routing VPN Gateway: 10
High-performance VPN Gateway: 30
Support & SLA
If you have any questions or need help, please visit Azure Support and select self-help service or any other method to contact us for support.
We guarantee at least 99.9% availability of the basic gateway of each VPN or ExpressRoute, 99.95% availability of the standard gateway of each VPN or ExpressRoute, and 99.95% availability of the high-performance gateway of each VPN or ExpressRoute. To learn more about the details of our Service Level Agreement, please visit the Service Level Agreements page.