About migrating to an availability zone-enabled ExpressRoute virtual network gateway

  • Article

When you create an ExpressRoute virtual network gateway, you need to choose the gateway SKU. If you choose a higher-level SKU, more CPUs and network bandwidth are allocated to the gateway. As a result, the gateway can support higher network throughput and more dependable network connections to the virtual network.

The following SKUs are available for ExpressRoute virtual network gateways:

  • Standard
  • HighPerformance
  • UltraPerformance
  • ErGw1Az
  • ErGw2Az
  • ErGw3Az

Availability zone enabled SKUs

The ErGw1Az, ErGw2Az, and ErGw3Az SKUs, also known as Az-Enabled SKUs, support Availability zone deployments. This feature provides high availability and resiliency to the gateway by distributing the gateway across multiple availability zones.

The Standard, HighPerformance, and UltraPerformance SKUs, which are also known as nonavailability zone enabled SKUs are historically associated with Basic IPs, don't support the distribution of the gateway across multiple availability zones.

For enhanced reliability, it's recommended to use an Availability-Zone Enabled virtual network gateway SKU. These SKUs support a zone-redundant setup and are, by default, associated with Standard IPs. This setup ensures that even if one zone experiences an issue, the virtual network gateway infrastructure remains operational due to the distribution across multiple zones. For a deeper understanding of zone redundant gateways, please refer to Availability Zone deployments.

Gateway migration experience

Historically, users had to use the Resize-AzVirtualNetworkGateway PowerShell command or delete and recreate the virtual network gateway to migrate between SKUs.

With the guided gateway migration experience you can deploy a second virtual network gateway in the same GatewaySubnet and Azure automatically transfers the control plane and data path configuration from the old gateway to the new one. During the migration process, there will be two virtual network gateways in operation within the same GatewaySubnet. This feature is designed to support migrations without downtime. However, users may experience brief connectivity issues or interruptions during the migration process.

Note

The total time required for the migration to complete can take up to one hour. During this period, the gateway will remain locked, and no changes will be permitted.

Gateway migration is recommended if you have a non-Az enabled Gateway SKU or a non-Az enabled Gateway Basic IP Gateway SKU.

Migrate from Non-Az enabled Gateway SKU Migrate to Az-enabled Gateway SKU
Standard, HighPerformance, UltraPerformance ErGw1Az, ErGw2Az, ErGw3Az
Basic IP Standard IP

Supported migration scenarios

Azure portal & Azure PowerShell

The guided gateway migration experience supports:

  • Non-Az-enabled SKU on Basic IP to Non-az enabled SKU on Standard IP.
  • Non-Az-enabled SKU on Basic IP to Az-enabled SKU on Standard IP.
  • Non-Az-enabled SKU on Standard IP to Az-enabled SKU on Standard IP.

It's recommended to migrate to an Az-enabled SKU for enhanced reliability and high availability. To learn more, see Migrate to an availability zone-enabled ExpressRoute virtual network gateway using PowerShell.

Limitations

The guided gateway migration experience doesn't support downgrade scenarios, Az-enabled Gateway SKU to non-Az-enabled Gateway SKU.

To proceed with migration, a /27 prefix or longer is required in the GatewaySubnet.

Private endpoints (PEs) in the virtual network, connected over ExpressRoute private peering, might have connectivity problems during the migration. To understand and reduce this issue, see Private endpoint connectivity.

Common validation errors

In the gateway migration experience, you need to validate if your resource is capable of migration. Here are some Common migration errors:

Virtual network

MaxGatewayCountInVnetReached - Reached maximum number of gateways that can be created in a Virtual Network.

Next steps