VPN Gateway Pricing | Microsoft Azure (2024)

  1. Home
  2. Azure pricing
  3. VPN Gateway pricing
  • Request a pricing quote
  • Try Azure for free

Establish secure, cross-premises connectivity

Azure VPN Gateway enables you to establish secure, cross-premises connectivity between your virtual network within Azure and on-premises IT infrastructure.

Explore pricing options

Apply filters to customize pricing options to your needs.

Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using London closing spot rates that are captured in the two business days prior to the last business day of the previous month end. If the two business days prior to the end of the month autumn on a bank holiday in major markets, the rate setting day is generally the day immediately preceding the two business days. This rate applies to all transactions during the forthcoming month. Sign in to the Azure pricing calculator to see pricing based on your current programme/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.

US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment or directly through a pay-as-you-go online subscription.

Learn More

Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.

US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment or directly through a pay-as-you-go online subscription.

Learn More

Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.

VPN Gateways

Setting up a virtual network is free of charge. However, we do charge for the VPN gateway that connects to on-premises and other virtual networks in Azure. This charge is based on the amount of time that gateway is provisioned and available.

VPN Gateway Type Price Bandwidth S2S Tunnels P2S Tunnels
Basic $- 100 Mbps Max 10
1-10: Included
Max 128
1-128: Included
VpnGw1 $- 650 Mbps Max 30
1-10: Included
11-30: $-/hour per tunnel
Max 250
1-128: Included
129-250: $-/hour per connection
VpnGw2 $- 1 Gbps Max 30
1-10: Included
11-30: $-/hour per tunnel
Max 500
1-128: Included
129-500: $-/hour per connection
VpnGw3 $- 1.25 Gbps Max 30
1-10: Included
11-30: $-/hour per tunnel
Max 1,000
1-128: Included
129-1,000: $-/hour per connection
VpnGw4 $- 5 Gbps Max 100
1-10: Included
11-100: $-/hour per tunnel
Max 5,000
1-128: Included
129-5,000: $-/hour per connection
VpnGw5 $- 10 Gbps Max 100
1-10: Included
11-100: $-/hour per tunnel
Max 10,000
1-128: Included
129-10,000: $-/hour per connection
Monthly price estimates are based on 730 hours of usage per month.

For technical specifications and limitations regarding the different VPN Gateways, please refer to the VPN Gateways MSDN page. Inter-virtual network charges are now discounted as noted below (previously charged at standard Data Transfer rates).

Data Transfers

Type Example Price
Inbound Inter-virtual Data going into Azure data centres between two virtual networks Free
Outbound Inter-virtual Data going out of Azure data centres between two virtual networks

From Zone 1*— $0.035 per GB

From Zone 2*— $0.09 per GB

From Zone 3*— $0.16 per GB

Outbound P2S (Point-to-Site) VPN Data going out of Azure Virtual Network via P2S VPNs Data transferred out of Azure Virtual Networks via the P2S VPNs will be charged at standard data transfer rates.

VPN Gateways — Availability Zones

As with all of Azure, we are continuously innovating, upgrading and refining our virtual network gateways to further increase reliability and availability. By adding support for Azure Availability Zones, we bring increased resiliency, scalability and higher availability to virtual network gateways. You can deploy VPN and ExpressRoute gateways in Azure Availability Zones by using the new Zone Redundant Gateway SKUs. This physically and logically separates them into different Availability Zones protecting your on-premises network connectivity to Azure from zone-level failures. The bandwidth thresholds remain the same for the zone redundant gateways.

VPN Gateway Type Price Bandwidth S2S Tunnels P2S Tunnels
VpnGw1AZ $- 650 Mbps Max 30
1-10: Included
11-30: $-/hour per tunnel
Max 250
1-128: Included
VpnGw2AZ $- 1 Gbps Max 30
1-10: Included
11-30: $-/hour per tunnel
Max 500
1-128: Included
VpnGw3AZ $- 3 Gbps Max 30
1-10: Included
11-30: $-/hour per tunnel
Max 1,000
1-128: Included
VpnGw4AZ $- 6 Gbps Max 100
1-10: Included
11-100: $-/hour per tunnel
Max 5,000
1-128: Included
VpnGw5AZ $- 10 Gbps Max 100
1-10: Included
11-100: $-/hour per tunnel
Max 10,000
1-128: Included

* VpnGw1AZ, VpnGw2AZ, VpnGw3AZ, VpnGw4AZ and VpnGw5AZ are the zone resilient versions of VpnGw1, VpnGw2, VpnGw3, VpnGw4 and VpnGw5.

Monthly price estimates are based on 730 hours of usage per month.

Azure pricing and purchasing options

VPN Gateway Pricing | Microsoft Azure (1)

Connect with us directly

Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimisation and request a custom proposal.

Talk to a sales specialist

See ways to purchase

Purchase Azure services through the Azure website, a Microsoft representative or an Azure partner.

Explore your options

Additional resources

VPN Gateway Pricing | Microsoft Azure (2)

VPN Gateway

Learn more about VPN Gateway features and capabilities.

VPN Gateway Pricing | Microsoft Azure (3)

Pricing calculator

Estimate your expected monthly costs for using any combination of Azure products.

VPN Gateway Pricing | Microsoft Azure (4)

SLA

Review the Service Level Agreement for VPN Gateway.

VPN Gateway Pricing | Microsoft Azure (5)

Documentation

Review technical tutorials, videos and more VPN Gateway resources.

Frequently asked questions

Frequently asked questions about Azure pricing

  • Yes. A partial hour is billed as a full hour.

  • Yes. Data transfers between two virtual networks are charged at the Inter-virtual network rates noted above. Other data transfers over the VPN connections to your on-premises sites or the internet in general are charged separately at the regular data transfer rate.

  • A sub-region is the lowest level geo-location which you may select to deploy your applications and associated data. For data transfers (except CDN), the following regions correspond to Zone 1, Zone 2, and Zone 3:

    • Zone 1—US West, US East, US North Central, US South Central, Europe West, Europe North, France Central, France South
    • Zone 2—Asia Pacific East, Asia Pacific Southeast, Japan East, Japan West, India South, India West, India Central
    • Zone 3—Brazil South
  • Similar to standard data transfer charges, inter-virtual network charges are based on the source zone. For example, if data is transferred from a virtual network in US West (Zone 1) to a virtual network in Asia Pacific East (Zone 2), the charge will be based on Zone 1 rates.

  • No. Only data transfer between two different regions will be charged, except with P2S VPNs.

Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.

Request a pricing quote

Get free cloud services and a $200 credit to explore Azure for 30 days.

Try Azure for free

Added to estimate. Press 'v' to view on calculator View on calculator

Can we help you?

VPN Gateway Pricing | Microsoft Azure (2024)

FAQs

How is the Azure VPN gateway charged? ›

VPN Gateways

This charge is based on the amount of time that gateway is provisioned and available. Monthly price estimates are based on 730 hours of usage per month. For technical specifications and limitations regarding the different VPN Gateways, please refer to the VPN Gateways MSDN page.

What is the lifetime of Azure VPN gateway key? ›

IKE Main Mode SA lifetime is fixed at 28,800 seconds on the Azure VPN gateways.

How long does it take to create an Azure VPN gateway? ›

Create a VPN gateway. In this step, you create the virtual network gateway (VPN gateway) for your virtual network. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU.

What is the maximum number of VPN gateways can be created for the VNet Azure? ›

A virtual network can have two virtual network gateways; one VPN gateway and one ExpressRoute gateway. But the limit for Azure VPN gateway in a Vnet remains the same - only one.

What is the benefit of Azure VPN gateway? ›

Azure VPN Gateway serves as a secure doorman, easily connecting your on-premises network to Azure via multiple VPN connection types. Site-to-Site VPN offers a dedicated tunnel for private communication, whereas VNet-to-VNet VPN bridges your cloud resources between regions or subscriptions.

How many VPN gateways per VNet? ›

A VPN gateway is a specific type of VNet gateway that is used to send traffic between an Azure virtual network and an on-premises location over the public internet. You can also use a VPN gateway to send traffic between VNets. Each VNet can have only one VPN gateway.

Can you have multiple VPN gateways in Azure? ›

Depending on the VPN Client software used, you may be able to connect to multiple Virtual Network Gateways provided the virtual networks being connected to don't have conflicting address spaces between them or the network from with the client is connecting from.

Can I stop Azure VPN gateway? ›

Delete a VPN gateway by deleting the resource group

In All resources, locate the resource group and click to open the blade. Click Delete.

What is the difference between VPN server and VPN gateway? ›

A VPN Client is used to search for the access provided by the VPN Gateway in order to establish a connection, building a secure tunnel to traffic data of users and corporations. In simplified language, it is a “client-server” structure (VPN Gateway is the server and VPN Client is the client).

What is the difference between Azure Virtual WAN and VPN gateway? ›

How is Virtual WAN different from an Azure virtual network gateway? A virtual network gateway VPN is limited to 100 tunnels. For connections, you should use Virtual WAN for large-scale VPN. You can connect up to 1,000 branch connections per virtual hub with aggregate of 20 Gbps per hub.

What is the minimum subnet size for Azure gateway? ›

We recommend a minimum subnet size of /24. To determine the available capacity of a subnet that has existing application gateways provisioned, take the size of the subnet and subtract the five reserved IP addresses of the subnet reserved by the platform. Next, take each gateway and subtract the maximum instance count.

How does an Azure VPN gateway work? ›

Azure VPN Gateway connects your on-premises networks to Azure through Site-to-Site VPNs in a similar way that you set up and connect to a remote branch office. The connectivity is secure and uses the industry-standard protocols Internet Protocol Security (IPsec) and Internet Key Exchange (IKE).

How long does Azure virtual network gateway take to deploy? ›

If the Azure VPN Gateway is deployed it is "running" 24 hours / 7days. The only option is to create/delete the VPN Gateway automatically with a script. But deploying a new VPN Gateway needs about 30-45 minutes for deployment.

What is the difference between VPN gateway and local network gateway? ›

VPN gateway is used to form the tunnel to your On-Prem devices, but Local Network gateway (represents your physical on-premises location)is used to teach the VPN gateway whom you want to connect and what is the peer IP address ranges. The local network gateway typically refers to your on-premises location.

How are Azure App Services charged? ›

You're charged an hourly rate based on the pricing tier of your App Service plan, prorated to the second. The charge is applied to each scaled-out instance in your plan, based on the amount of time that the VM instance is allocated.

How is Azure firewall charged? ›

There is no cost for Azure Firewall Manager. You are only charged for the policies and deployments created through Azure Firewall Manager. For Firewall policies, customers are charged a minimum of one base policy.

How is Azure Bastion charged? ›

Azure Bastion is billed hourly from the moment the resource is deployed until the resource is deleted, regardless of outbound data usage. The hourly pricing will be based on the SKU selected, number of scale units configured, and data transfer rates.

Top Articles
Latest Posts
Article information

Author: Gov. Deandrea McKenzie

Last Updated:

Views: 6345

Rating: 4.6 / 5 (46 voted)

Reviews: 93% of readers found this page helpful

Author information

Name: Gov. Deandrea McKenzie

Birthday: 2001-01-17

Address: Suite 769 2454 Marsha Coves, Debbieton, MS 95002

Phone: +813077629322

Job: Real-Estate Executive

Hobby: Archery, Metal detecting, Kitesurfing, Genealogy, Kitesurfing, Calligraphy, Roller skating

Introduction: My name is Gov. Deandrea McKenzie, I am a spotless, clean, glamorous, sparkling, adventurous, nice, brainy person who loves writing and wants to share my knowledge and understanding with you.