Local Network Gateway

Local Network GatewayLast Updated:  6th March 2025

Azure Local Network Gateway: Bridging On-Premises and Cloud Networks

Technical Overview

In today’s hybrid cloud environments, organisations often face the challenge of securely and efficiently connecting their on-premises infrastructure to the cloud. Azure Local Network Gateway (LNG) is a critical component in achieving this connectivity. It acts as a representation of your on-premises network within Azure, enabling seamless communication between your local data centre and Azure Virtual Networks (VNets).

At its core, the Local Network Gateway is a logical construct that stores essential information about your on-premises network, such as its public IP address and the address space (IP ranges) used within your local environment. This information is vital for establishing site-to-site VPN connections or ExpressRoute circuits, ensuring that Azure can correctly route traffic to and from your on-premises resources.

Architecture

The architecture of Azure Local Network Gateway revolves around its integration with Azure Virtual Network Gateways. When you configure a site-to-site VPN, the Local Network Gateway serves as the endpoint for your on-premises network, while the Virtual Network Gateway represents the Azure side of the connection. Together, they form a secure tunnel that facilitates encrypted communication between the two environments.

Key architectural components include:

  • Public IP Address: The public-facing IP address of your on-premises VPN device, which is used to establish the connection.
  • Address Space: The range of IP addresses used in your on-premises network. This ensures that Azure knows which traffic to route through the VPN tunnel.
  • Connection Object: A configuration that ties the Local Network Gateway to the Virtual Network Gateway, defining parameters such as shared keys and routing preferences.

Scalability

Azure Local Network Gateway is designed to support a wide range of network configurations, from small-scale setups to enterprise-grade deployments. It can handle multiple address spaces, making it suitable for organisations with complex on-premises networks that span multiple subnets or locations. Additionally, it integrates seamlessly with Azure Virtual Network Gateway’s high-availability and scalability features, ensuring reliable performance even as your network grows.

Data Processing

While the Local Network Gateway itself does not process data, it plays a crucial role in defining the parameters for data flow between Azure and on-premises environments. By accurately configuring the Local Network Gateway, you ensure that data packets are routed correctly, minimising latency and avoiding potential conflicts caused by overlapping IP ranges.

Integration Patterns

Azure Local Network Gateway supports several integration patterns, including:

  • Site-to-Site VPN: Establish a secure, encrypted connection between your on-premises network and Azure using IPsec/IKE protocols.
  • ExpressRoute: Leverage a private, high-speed connection for scenarios requiring low latency and high throughput.
  • Multi-Site Connectivity: Configure multiple Local Network Gateways to connect Azure to multiple on-premises locations.
  • Coexistence with Point-to-Site VPN: Combine site-to-site and point-to-site VPNs to support both organisational and individual user access.

Advanced Use Cases

Azure Local Network Gateway is not just a tool for basic connectivity; it also supports advanced networking scenarios:

  • Disaster Recovery: Use Local Network Gateway to establish failover connections between Azure and secondary on-premises locations.
  • Hybrid Cloud Architectures: Enable seamless integration between on-premises systems and Azure services, such as Azure Kubernetes Service (AKS) or Azure SQL Database.
  • Global Connectivity: Combine Local Network Gateway with Azure Virtual WAN to create a global network that connects multiple on-premises sites to Azure regions worldwide.

Business Relevance

In an era where hybrid cloud strategies dominate IT roadmaps, Azure Local Network Gateway provides a foundational capability for organisations looking to bridge their on-premises and cloud environments. Its ability to facilitate secure, reliable connectivity is critical for enabling hybrid workloads, ensuring business continuity, and supporting digital transformation initiatives.

For example, consider a retail organisation with legacy systems hosted on-premises but planning to adopt Azure for modern analytics and AI workloads. By using Local Network Gateway, the retailer can securely connect its on-premises systems to Azure, enabling real-time data synchronisation and unlocking new insights without disrupting existing operations.

Moreover, Local Network Gateway supports cost optimisation by allowing organisations to leverage their existing on-premises investments while gradually migrating workloads to Azure. This phased approach reduces the risk and complexity associated with large-scale cloud migrations.

Best Practices

To maximise the benefits of Azure Local Network Gateway, consider the following best practices:

  • Plan Your Address Space: Avoid overlapping IP ranges between your on-premises network and Azure VNets to prevent routing conflicts.
  • Use Redundancy: Configure multiple VPN tunnels or use ExpressRoute for high availability and failover support.
  • Monitor Connectivity: Leverage Azure Monitor and Network Watcher to track the health and performance of your connections.
  • Secure Your Connections: Use strong shared keys and regularly rotate them to enhance security.
  • Document Your Configuration: Maintain detailed records of your Local Network Gateway settings to simplify troubleshooting and future updates.

Relevant Industries

Azure Local Network Gateway is a versatile solution that caters to a wide range of industries:

  • Financial Services: Enable secure connectivity between on-premises data centres and Azure for regulatory compliance and data analytics.
  • Healthcare: Support hybrid cloud architectures for electronic health records (EHR) and medical imaging workloads.
  • Retail: Integrate on-premises point-of-sale systems with Azure-based analytics and inventory management solutions.
  • Manufacturing: Connect factory floor systems to Azure IoT Hub for real-time monitoring and predictive maintenance.
  • Government: Facilitate secure communication between on-premises systems and Azure Government Cloud for mission-critical applications.

Related Azure Services