The Admin State of both Links of an ExpressRoute Direct should be in Enabled state
Impact:HighCategory:High Availability
APRL GUID:60077378-7cb1-4b35-89bb-393884d9921d
Description:
In Azure ExpressRoute Direct, the "Admin State" indicates the administrative status of layer 1 links, showing if a link is enabled or disabled, effectively turning the physical port on or off.
Provisioning ExpressRoute circuits on a 10-Gbps or 100-Gbps ExpressRoute Direct resource up to 20-Gbps or 200-Gbps is possible but not recommended for resiliency. If an ExpressRoute Direct port fails, and circuits are using full capacity, the remaining port won't handle the extra load.
Configure monitoring and alerting for ExpressRoute Ports
Impact:MediumCategory:Monitoring and Alerting
APRL GUID:55815823-d588-4cb7-a5b8-ae581837356e
Description:
Use Network Insights for monitoring ExpressRoute Port light levels, bits per second in/out, and line protocol. Set alerts based on Azure Monitor Baseline Alerts for light levels, bits per second in/out, and line protocol exceeding specific thresholds.
Click the Azure Resource Graph tab to view the query
//under-development
Connect on-prem networks to Azure critical workloads via multiple ExpressRoutes peering locations
Impact:HighCategory:High Availability
APRL GUID:cce3353a-f409-4559-9959-0ca0e3717114
Description:
Ensure resilient connectivity by connecting on-premises networks to Azure through multiple ExpressRoutes, each originating from distinct peering locations, to provide alternate data paths in case of a peering location failure.
Click the Azure Resource Graph tab to view the query
//cannot-be-validated-with-arg
Ensure ExpressRoute's physical links connect to distinct network edge devices
Impact:HighCategory:High Availability
APRL GUID:222fbb78-be76-4855-a14f-a5e17ef1ccf5
Description:
Microsoft or the ExpressRoute provider always ensures physical redundancy in their services. It's essential to maintain this level of physical redundancy (two devices, two links) from the ExpressRoute peering location to your network for optimal performance and reliability.
Click the Azure Resource Graph tab to view the query
//cannot-be-validated-with-arg
Ensure both connections of an ExpressRoute are configured in active-active mode
Impact:HighCategory:High Availability
APRL GUID:859886df-3996-4eab-8439-c1a38c416e0e
Description:
Operating both connections of an ExpressRoute circuit in active-active mode enhances high availability as the Microsoft network will load balance the traffic across the connections on a per-flow basis.