Hello,
I have tried to find a definitive answer for this but so far have been unable to and so am looking to this community for direction.
Currently we have an On Prem setup where our remote users VPNs terminate.
We are also currently building up a presence in Azure IaaS. (The on Prem and IaaS are currenlty connected via Site to Site VPN)
As we are now planning the topology of our future network and so we are looking at whether or not it makes sense to move our VPN headend into the Cloud. The question I have been unable to answer is how a remote users traffic which teminates in Azure IaaS for
a Microsoft PaaS or SaaS service would be routed.
Would it stay internal to Microsoft's networks, and therefore not be liable for egress charges or would it exit IaaS and traverse the public net and then enter Microsoft again, and so be liable for egress charges?
I hope that I have been able to fully explain the query properly and any direction will be greatly appreciated.
Many thanks