> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Transit Network Design Patterns

> There are many design patterns for networking and networking security deployment in the cloud. This document summarizes these design patterns that apply to Azure networks.

There are many design patterns for networking and networking security deployment
in the cloud. This document summarizes these design patterns that apply to Azure
networks.

## Aviatrix Encrypted Transit Network

In this design, all packets in flight between Spoke VNets and Transit to on-prem
are encrypted.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/aviatrix-transit-azure.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=41078e5cfa8215ab9b6a132ac422fc7d" alt="aviatrix_transit_azure" width="1656" height="1016" data-path="images/concepts-architectures/architecture/connectivity/aviatrix-transit-azure.png" />

<Tip>
  Aviatrix Transit supports high performance (High Performance Encryption Mode)
  IPsec performance over ExpressRoute and Azure Peering.
</Tip>

## Aviatrix Transit with Native Spokes

Aviatrix Transit also supports Azure native Spoke VNets.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/aviatrix-transit-native-spoke.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=bcd91a240a092d0b88a50bc492a7c2d8" alt="aviatrix_transit_native_spoke" width="1478" height="1016" data-path="images/concepts-architectures/architecture/connectivity/aviatrix-transit-native-spoke.png" />

## Transit FireNet with Aviatrix Spokes

You can apply firewall inspections for east-west, north-south and ingress/egress
traffic.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/transit-firenet-aviatrix-spokes.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=5a9e4933880e83b6743e7a609f2a132b" alt="transit_firenet_aviatrix_spokes" width="1454" height="1014" data-path="images/concepts-architectures/architecture/connectivity/transit-firenet-aviatrix-spokes.png" />

## Transit FireNet with Native Spokes

Firewall inspections can be applied to native Spoke VNet, on-prem to transit and
north-south traffic.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/transit-firenet-native-spokes.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=c816a413fb8c8ec1a50659a300f1ced2" alt="transit_firenet_native_spokes" width="1468" height="1016" data-path="images/concepts-architectures/architecture/connectivity/transit-firenet-native-spokes.png" />

See <a href={"/docs/enterprise/" + "10.1" +
"/guides/security/firenet/transit-firenet-workflow-azure"}>Transit FireNet
Workflow for Azure</a> for more details.

## SD-WAN Integration

If you have multiple sites to connect to the cloud, you can use an Aviatrix
Transit Gateway to terminate the many Site2Cloud to branch offices.

Alternatively, you can use a SD-WAN termination point in the VNets to connect to
the branches.

Both options can be described in the diagram below.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/transit-sdwan.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=bf30bdc1bd5acd6fa38944024cf038a1" alt="transit_sdwan" width="1980" height="1150" data-path="images/concepts-architectures/architecture/connectivity/transit-sdwan.png" />

## Aviatrix Transit Gateway for Azure Spoke-to-Spoke Connectivity

If you use Azure ExpressRoute gateway to connect Spoke VNets to on-prem, you can
use Aviatrix Transit Gateway for Spoke-to-Spoke connectivity, as shown in the
diagram below. To connect Spoke VNet, follow the instructions in <a href={"/docs/enterprise/" + "10.1" +
"/guides/connectivity/transit/transitvpc-workflow"}>Multicloud Transit Network
workflow</a>.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/transit-azure-native-spoke.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=786eb4e8f4ddf16fc26b253fae5096ae" alt="transit_azure_native_spoke" width="1460" height="1016" data-path="images/concepts-architectures/architecture/connectivity/transit-azure-native-spoke.png" />

## Multicloud Transit with Native Spokes

Use Aviatrix Transit Gateways to interconnect transit network for a multi cloud
network deployment, as shown in the diagram below.

<img src="https://mintcdn.com/aviatrix-14b37c43/8iF92JcVck-Y3RaJ/images/concepts-architectures/architecture/connectivity/multi-cloud-transit-native.png?fit=max&auto=format&n=8iF92JcVck-Y3RaJ&q=85&s=bb40d88bc3ebaf0aa6257ea09bb8c01f" alt="multi_cloud_transit_native" width="1824" height="1010" data-path="images/concepts-architectures/architecture/connectivity/multi-cloud-transit-native.png" />
