Hi all,
This is probably a loaded question but here it is anyway.
We have a requirement to have all of our environments AD authenticated (mostly a windows shop).
We would prefer to keep all of our Dev/Test environments on the private peering (non public facing). Production obviously will need a public presence.
With express route in mind how do people handle Active Directory replication between Public / Private peering options? At present we have DCs hosted on Azure VM's. To get AD replicated across the public / private peers does this mean we need more DC's deployed on the corporate site?
Use DC's deployed in the private space to replicate to corporate networks. Then an RODC to replicate into the public tier?
Or is there an ability to route traffic across the public / private express route connections? My assumption to this would be its not possible.
Cheers,
ronny