About ExpressRoute Direct

ExpressRoute Direct gives you the ability to connect directly into the Microsoft global network at peering locations strategically distributed around the world. ExpressRoute Direct provides dual 400-Gbps, 100-Gbps or 10-Gbps connectivity that supports active-active connectivity at scale. You can work with any service provider to set up ExpressRoute Direct.

Key features include, but not limited to:

• Large data ingestion into services like Azure Storage and Azure Cosmos DB.
• Physical isolation for industries that regulates and require dedicated or isolated connectivity such as banks, government, and retail companies.
• Granular control of circuit distribution based on business unit.

Onboard to ExpressRoute Direct

Before you can set up ExpressRoute Direct, you must first enroll your subscription. Run the following commands using Azure PowerShell:

1. Sign in to Azure and select the subscription you wish to enroll.

   Connect-AzAccount 
   
   Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"
   

2. Register your subscription to AllowExpressRoutePorts using the following command:

   Register-AzProviderFeature -FeatureName AllowExpressRoutePorts -ProviderNamespace Microsoft.Network
   

Once enrolled, verify that Microsoft.Network resource provider is registered to your subscription. Registering a resource provider configures your subscription to work with the resource provider.

1. Access your subscription settings as described in Azure resource providers and types.

2. In your subscription, for Resource Providers, verify Microsoft.Network provider shows a Registered status. If the Microsoft.Network resource provider isn't present in the list of registered providers, add it.

If you start using ExpressRoute Direct and find that ports at your selected peering location are unavailable, submit a support ticket to request more inventories.

ExpressRoute using a service provider and ExpressRoute Direct

ExpressRoute Direct circuits

ExpressRoute circuit is a logical connection between your on-premises infrastructure and Microsoft cloud services provisioned on an ExpressRoute Direct port pair. Each circuit has fixed bandwidth mapped to an ExpressRoute Direct in a location.

Circuit SKUs

ExpressRoute Direct supports Local, Standard and Premium SKU's. For pricing details, see ExpressRoute pricing.

Rate-limiting on the Circuit

You can enable or disable rate limiting for ExpressRoute Direct circuits at the circuit level. For more information, see Rate limiting for ExpressRoute Direct circuits.

Technical Requirements

• Microsoft Enterprise Edge Router (MSEE) Interfaces:

  • Dual 10-Gigabit, 100-Gigabit or 400-Gigabit Ethernet ports only across router pair
  • Single Mode LR Fiber connectivity
    • MSEE supports QSFP-100G-LR-4 for 100-Gbps and QSFP-DD-400G-LR-4 for 400-Gbps (Use compatible optics on your devices)
  • IPv4 and IPv6
  • IP MTU 1,500 bytes

• Switch/Router Layer 2/Layer three Connectivity:

  • Must support 1 802.1Q (Dot1Q) tag or two Tag 802.1Q (QinQ) tag encapsulation
  • Ethertype = 0x8100
  • Must add the outer VLAN tag (STAG) based on the VLAN ID specified by Microsoft - applicable only on QinQ
  • Must support multiple BGP sessions (VLANs) per port and device
  • IPv4 and IPv6 connectivity. IPv6 address is added to existing subinterface.
  • Optional: Bidirectional Forwarding Detection (BFD) support, which is configured by default on all Private Peerings on ExpressRoute circuits

VLAN Tagging

ExpressRoute Direct supports both QinQ and Dot1Q VLAN tagging.

• QinQ VLAN Tagging allows for isolated routing domains on a per ExpressRoute circuit basis. Azure dynamically gives an S-Tag at circuit creation that can't be changed. Each peering on the circuit (Private and Microsoft) uses a unique C-Tag as the VLAN. The C-Tag isn't required to be unique across circuits on the ExpressRoute Direct ports.

• Dot1Q VLAN Tagging allows for a single tagged VLAN on a per ExpressRoute Direct port pair basis. A C-Tag used on a peering must be unique across all circuits and peerings on the ExpressRoute Direct port pair.

Workflows

Set up ExpressRoute Direct

Delete ExpressRoute Direct

SLA

ExpressRoute Direct provides the same enterprise-grade SLA with Active/Active redundant connections into the Microsoft Global Network. ExpressRoute infrastructure is redundant and connectivity into the Microsoft Global Network is redundant and diverse and scales correctly with customer requirements. For more information, see ExpressRoute SLA.

Pricing

For details on how ExpressRoute Direct is billed, see ExpressRoute FAQ. For pricing details, see ExpressRoute pricing.

Next steps

• Learn how to configure ExpressRoute Direct.
• Learn how to Enable Rate limiting for ExpressRoute Direct circuits.