Azure Public IP Azure S2S VPN Azure S2S VPN Azure Virtual Network Gateways Public IP via Microsoft Public IP via Internet First public IP address Azure Virtual Network Gateways • First public IP address Virtual Network Gateway Public IP Routing Preference Azure Public IP Addresses V.S. Choose Microsoft network? Choose Internet? Hot / Cold Potato Routing Azure Public IP Azure (Hot potato routing) v.s. (Cold potato routing) Cold potato routing Hot potato routing Azure Public IP ? Azure Public IP 我家網路 我家網路 HINET, Taiwan NTT, Japan HINET, Taiwan PCCW, HongKong Microsoft Backbone hkg31 -> hkg20 -> tyo31 Routing Preference: Internet Routing Preference: Microsoft network Routing Preference: Internet Routing Preference: Microsoft network 我家網路 我家網路 HINET, Taiwan HINET, Taiwan Microsoft Backbone tyo30 -> osa31 PCCW, HongKong Routing Preference: Internet Routing Preference: Microsoft network 我家網路 我家網路 HINET, Taiwan HINET, Taiwan TATA Communications PCCW, HongKong Microsoft Backbone hkg31 -> sg2 Routing Preference: Internet Routing Preference: Microsoft network 我家網路 我家網路 HINET, Taiwan HINET, Taiwan PCCW, HongKong PCCW, HongKong Microsoft Backbone hkg31 Microsoft ? Azure Public IP Avg. 50.8ms Routing Preference: Internet Routing Preference: Microsoft network Avg. 74.0ms Routing Preference: Internet Routing Preference: Microsoft network Avg. 53.4ms Avg. 55.6ms Routing Preference: Internet Routing Preference: Microsoft network Avg. 65.3ms Avg. 68.9ms Routing Preference: Internet Routing Preference: Microsoft network Avg. 38.1ms Avg. 35.8ms Public IP address Allow Internet resource to communicate inbound to Azure resource By region My Traceroute Network Diagnostic Tool that combines Ping and Traceroute [localhost]$ mtr -z -b <Azure Public IP> nitefood / asn ASN Lookup Tool and Traceroute Server Ref: https://github.com/nitefood/asn Invent with purpose.