What is vnet peering

Last updated: April 1, 2026

Quick Answer: Azure Virtual Network (VNet) peering is a method to connect two Azure virtual networks, allowing resources in different networks to communicate directly using private IP addresses as if they were on the same network.

Key Facts

Overview

Azure Virtual Network peering is a fundamental networking feature that connects two virtual networks within Azure infrastructure. When you establish peering between networks, virtual machines, databases, and other resources can communicate directly using private IP addresses, similar to resources on the same physical network. This eliminates the need for traffic to traverse the public internet or require VPN connections.

How VNet Peering Works

Peering operates at the network layer by updating routing tables in both virtual networks. When peering is established, Azure automatically adds routes that direct traffic destined for the peered network to the appropriate network interface. Resources in Network A can then reach resources in Network B by addressing them directly via their private IP addresses, without requiring gateway devices or VPN configurations.

Types of VNet Peering

Key Requirements and Limitations

Virtual networks being peered must have non-overlapping IP address spaces. For example, you cannot peer a network using 10.0.0.0/16 with another network also using 10.0.0.0/16. Additionally, peering must be configured on both sides of the connection to enable bidirectional communication. Azure supports transitive peering through User-Defined Routes (UDR), allowing traffic to flow through hub networks in hub-and-spoke topologies.

Benefits and Use Cases

VNet peering reduces latency and improves performance compared to internet-based connections. Organizations use peering for multi-tier application architectures, disaster recovery setups, shared services models, and connecting development/test environments to production networks. The private, secure connectivity also enhances security by keeping traffic off public networks.

Related Questions

How does VNet peering differ from VPN connections?

VNet peering uses Microsoft's private backbone for direct network connectivity with lower latency, while VPN connections encrypt traffic over the public internet. Peering is simpler to configure but requires non-overlapping IP spaces, whereas VPN works with overlapping ranges.

What are the costs associated with VNet peering?

Regional VNet peering is free, while global peering across regions incurs ingress and egress charges based on data transferred. These charges are typically lower than equivalent bandwidth costs for other connectivity methods.

Can peered networks access each other's resources automatically?

Network connectivity is established, but resource access still depends on Network Security Groups (NSGs) and firewall rules on individual resources. You must configure NSG rules to permit traffic between the peered networks.

Sources

  1. Microsoft Learn - Virtual Network Peering CC-BY-4.0
  2. Wikipedia - Microsoft Azure CC-BY-SA-4.0