Establish secure, cross-premises connectivity
Azure VPN Gateway enables you to establish secure, cross-premises connectivity between your virtual network within Azure and on-premises IT infrastructure.
Explore pricing options
Apply filters to customise pricing options to your needs.
Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using London closing spot rates that are captured in the two business days prior to the last business day of the previous month end. If the two business days prior to the end of the month autumn on a bank holiday in major markets, the rate setting day is generally the day immediately preceding the two business days. This rate applies to all transactions during the forthcoming month. Sign in to the Azure pricing calculator to see pricing based on your current programme/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
VPN Gateways
Setting up a virtual network is free of charge. However, we do charge for the VPN gateway that connects to on-premises and other virtual networks in Azure. This charge is based on the amount of time that gateway is provisioned and available.
| VPN Gateway Type | Price | Bandwidth | S2S Tunnels | P2S Tunnels |
|---|---|---|---|---|
| Basic | $- | 100 Mbps | Max 10 1-10: Included |
Max 128 1-128: Included |
| VpnGw1 | $- | 650 Mbps |
Max 30 1-10: Included 11-30: $-/hour per tunnel |
Max 250 1-128: Included 129-250: $-/hour per connection |
| VpnGw2 | $- | 1 Gbps |
Max 30 1-10: Included 11-30: $-/hour per tunnel |
Max 500 1-128: Included 129-500: $-/hour per connection |
| VpnGw3 | $- | 1.25 Gbps |
Max 30 1-10: Included 11-30: $-/hour per tunnel |
Max 1,000 1-128: Included 129-1,000: $-/hour per connection |
| VpnGw4 | $- | 5 Gbps |
Max 100 1-10: Included 11-100: $-/hour per tunnel |
Max 5,000 1-128: Included 129-5,000: $-/hour per connection |
| VpnGw5 | $- | 10 Gbps |
Max 100 1-10: Included 11-100: $-/hour per tunnel |
Max 10,000 1-128: Included 129-10,000: $-/hour per connection |
For technical specifications and limitations regarding the different VPN Gateways, please refer to the VPN Gateways MSDN page. Inter-virtual network charges are now discounted as noted below (previously charged at standard Data Transfer rates).
Data Transfers
| Type | Example | Price |
|---|---|---|
| Inbound Inter-virtual | Data going into Azure data centres between two virtual networks | Free |
| Outbound Inter-virtual | Data going out of Azure data centres between two virtual networks |
From Zone 1*—$0.035 per GB From Zone 2*—$0.09 per GB From Zone 3*—$0.16 per GB |
| Outbound P2S (Point-to-Site) VPN | Data going out of Azure Virtual Network via P2S VPNs | Data transferred out of Azure Virtual Networks via the P2S VPNs will be charged at standard data transfer rates. |
VPN Gateways — Availability Zones
As with all of Azure, we are continuously innovating, upgrading, and refining our virtual network gateways to further increase reliability and availability. By adding support for Azure Availability Zones, we bring increased resiliency, scalability, and higher availability to virtual network gateways. You can deploy VPN and ExpressRoute gateways in Azure Availability Zones by using the new Zone Redundant Gateway SKUs. This physically and logically separates them into different Availability Zones protecting your on-premises network connectivity to Azure from zone-level failures. The bandwidth thresholds remain the same for the zone redundant gateways.
| VPN Gateway Type | Price | Bandwidth | S2S Tunnels | P2S Tunnels |
|---|---|---|---|---|
| VpnGw1AZ | $- | 650 Mbps |
Max 30 1-10: Included 11-30: $-/hour per tunnel |
Max 250 1-128: Included |
| VpnGw2AZ | $- | 1 Gbps |
Max 30 1-10: Included 11-30: $-/hour per tunnel |
Max 500 1-128: Included |
| VpnGw3AZ | $- | 3 Gbps |
Max 30 1-10: Included 11-30: $-/hour per tunnel |
Max 1,000 1-128: Included |
| VpnGw4AZ | $- | 6 Gbps |
Max 100 1-10: Included 11-100: $-/hour per tunnel |
Max 5,000 1-128: Included |
| VpnGw5AZ | $- | 10 Gbps |
Max 100 1-10: Included 11-100: $-/hour per tunnel |
Max 10,000 1-128: Included |
Azure pricing and purchasing options
Connect with us directly
Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimisation and request a customised proposal.
Talk to a sales specialistSee ways to purchase
Purchase Azure services through the Azure website, a Microsoft representative or an Azure partner.
Explore your optionsAdditional resources
VPN Gateway
Learn more about VPN Gateway features and capabilities.
Pricing calculator
Estimate your expected monthly costs for using any combination of Azure products.
SLA
Review the Service Level Agreement for VPN Gateway.
Documentation
Review technical tutorials, videos, and more VPN Gateway resources.
Frequently asked questions
-
Yes. A partial hour is billed as a full hour.
-
Yes. Data transfers between two virtual networks are charged at the Inter-virtual network rates noted above. Other data transfers over the VPN connections to your on-premises sites or the internet in general are charged separately at the regular data transfer rate.
-
A sub-region is the lowest level geo-location that you may select to deploy your applications and associated data. For data transfers (except CDN), the following regions correspond to Zone 1, Zone 2, and Zone 3:
- Zone 1—US West, US East, US North Central, US South Central, Europe West, Europe North, France Central, France South
- Zone 2—Asia Pacific East, Asia Pacific Southeast, Japan East, Japan West, India South, India West, India Central
- Zone 3—Brazil South
-
Similar to standard data transfer charges, inter-virtual network charges are based on the source zone. For example, if data is transferred from a virtual network in US West (Zone 1) to a virtual network in Asia Pacific East (Zone 2), the charge will be based on Zone 1 rates.
-
No. Only data transfer between two different regions will be charged, except with P2S VPNs.
Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.
Get free cloud services and a $200 credit to explore Azure for 30 days.