Soru

Zorluk: ZorAzure Virtual Networks, ExpressRoute, and VPN Gateway

By default, Azure Virtual Network peering is transitive, meaning that if VNet A is peered with VNet B, and VNet B is peered with VNet C, resources in VNet A can communicate with resources in VNet C without requiring a direct peering connection or a transit gateway.

Is this statement true or false?

Cevap: Cevap

Cevap

The statement is false because Azure Virtual Network peering is non-transitive by default.
The statement is false because Virtual Network peering in Azure is non-transitive. Resources in VNet A cannot communicate with resources in VNet C through VNet B unless there is a direct peering connection between VNet A and VNet C, or a routing mechanism (such as a VPN Gateway with gateway transit or a Network Virtual Appliance) is configured in VNet B to forward the traffic.

Adım Adım Çözüm

1
Analyze the peering relationship described in the scenario: VNet A is peered with VNet B, and VNet B is peered with VNet C.
Two separate, direct peering links exist (VNet A-B and VNet B-C), but there is no direct link between VNet A and VNet C.
To determine connectivity between VNet A and VNet C, we must evaluate whether traffic can pass through VNet B (transitivity).
2
Evaluate the default behavior of Azure Virtual Network peering regarding transitivity.
Azure Virtual Network peering is strictly non-transitive. Traffic cannot pass through a peered VNet to reach another peered VNet unless explicit routing mechanisms (like gateway transit or user-defined routes with an NVA) are configured.
This is a core security and routing boundary design principle in Azure networking.
3
Determine the truth value of the statement.
The statement asserts that peering is transitive by default and allows communication between VNet A and VNet C without direct peering or a gateway, which is incorrect.
Since peering is non-transitive, the statement is false.

Anahtar Kavram

Azure Virtual Network Peering Transitivity
Bu soruyu puanla