Skip to content

Portal Accelerator: Remove regional VPN Gateways option #2073

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Springstone wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Portal Accelerator: Remove regional VPN Gateways option #2073

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
84d5c1a
Remove Non-AZ VPN GW options (#2072)
Springstone Oct 9, 2025
a47390d
Updated What's New text.
Springstone Oct 9, 2025
c356871
Minor text update
Springstone Oct 9, 2025
8bf7b2f
Merge branch 'main' into spring-nonAzVPN
Springstone Oct 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions docs/wiki/Whats-new.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,6 +59,12 @@ This article will be updated as and when changes are made to the above and anyth

Here's what's changed in Enterprise Scale/Azure Landing Zones:

### October 2025

#### Tooling

- Updated the ALZ portal accelerator to remove the option to select regional VPN gateways as these are being deprecated. All regions that support VPN gateways now deploy zone redundant VPN gateways by default.

### September 2025

#### Tooling
Expand Down
86 changes: 6 additions & 80 deletions eslzArm/eslz-portal.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2228,7 +2228,7 @@
"type": "Microsoft.Common.OptionsGroup",
"label": "Deploy zone redundant or regional VPN Gateway",
"defaultValue": "Zone redundant (recommended)",
"visible": "[and(and(equals(steps('connectivity').enableVpnGw,'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').enableVpnGw,'Yes'),contains(split('brazilsouth,canadacentral,centralus,eastus,eastus2,southcentralus,westus2,westus3,mexicocentral,francecentral,italynorth,germanywestcentral,norwayeast,northeurope,uksouth,westeurope,swedencentral,switzerlandnorth,polandcentral,spaincentral,qatarcentral,uaenorth,israelcentral,southafricanorth,australiaeast,centralindia,japaneast,japanwest,southeastasia,eastasia,koreacentral,newzealandnorth,taiwannorth', ','), steps('connectivity').connectivityLocation))]",
"visible": false,
"toolTip": "If 'Yes' is selected when also adding a subscription for connectivity, ARM will deploy Virtual Gateway to the selected region and availability zones.",
"constraints": {
"allowedValues": [
Expand Down Expand Up @@ -2308,7 +2308,7 @@
"selectAll": false,
"filter": false,
"multiLine": true,
"visible": "[and(and(equals(steps('connectivity').enableVpnGw, 'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').enableVpnGw,'Yes'), equals(steps('connectivity').gwRegionalOrAz, 'Zone') ,contains(split('brazilsouth,canadacentral,centralus,eastus,eastus2,southcentralus,westus2,westus3,mexicocentral,francecentral,italynorth,germanywestcentral,norwayeast,northeurope,uksouth,westeurope,swedencentral,switzerlandnorth,polandcentral,spaincentral,qatarcentral,uaenorth,israelcentral,southafricanorth,australiaeast,centralindia,japaneast,japanwest,southeastasia,eastasia,koreacentral,newzealandnorth,taiwannorth', ','), steps('connectivity').connectivityLocation))]",
"visible": "[and(and(equals(steps('connectivity').enableVpnGw, 'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').enableVpnGw,'Yes'), contains(split('brazilsouth,canadacentral,centralus,eastus,eastus2,southcentralus,westus2,westus3,mexicocentral,francecentral,italynorth,germanywestcentral,norwayeast,northeurope,uksouth,westeurope,swedencentral,switzerlandnorth,polandcentral,spaincentral,qatarcentral,uaenorth,israelcentral,southafricanorth,australiaeast,centralindia,japaneast,japanwest,southeastasia,eastasia,koreacentral,newzealandnorth,taiwannorth', ','), steps('connectivity').connectivityLocation))]",
"toolTip": "Select the required SKU for the VPN gateway.",
"constraints": {
"allowedValues": [
Expand All @@ -2335,42 +2335,6 @@
]
}
},
{
"name": "gwRegionalSku",
"type": "Microsoft.Common.DropDown",
"label": "Select the VPN Gateway SKU",
"defaultValue": "",
"multiselect": false,
"selectAll": false,
"filter": false,
"multiLine": true,
"visible": "[and(and(equals(steps('connectivity').enableVpnGw, 'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').enableVpnGw,'Yes'), equals(steps('connectivity').gwRegionalOrAz, 'Regional'))]",
"toolTip": "Select the required SKU for the VPN gateway.",
"constraints": {
"allowedValues": [
{
"label": "VpnGw2",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 500 IKEv2/OpenVPN connections, aggregate throughput is 1.25 Gbps",
"value": "VpnGw2"
},
{
"label": "VpnGw3",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 1000 IKEv2/OpenVPN connections, aggregate throughput is 2.5 Gbps",
"value": "VpnGw3"
},
{
"label": "VpnGw4",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 5000 IKEv2/OpenVPN connections, aggregate throughput is 5 Gbps",
"value": "VpnGw4"
},
{
"label": "VpnGw5",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 10000 IKEv2/OpenVPN connections, aggregate throughput is 10 Gbps",
"value": "VpnGw5"
}
]
}
},
{
"name": "vpnGateWayScaleUnit",
"type": "Microsoft.Common.DropDown",
Expand Down Expand Up @@ -3353,7 +3317,7 @@
"type": "Microsoft.Common.OptionsGroup",
"label": "Deploy zone redundant or regional VPN Gateway in your second region",
"defaultValue": "Zone redundant (recommended)",
"visible": "[and(and(equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary,'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary,'Yes'),contains(split('brazilsouth,canadacentral,centralus,eastus,eastus2,southcentralus,westus2,westus3,mexicocentral,francecentral,italynorth,germanywestcentral,norwayeast,northeurope,uksouth,westeurope,swedencentral,switzerlandnorth,polandcentral,spaincentral,qatarcentral,uaenorth,israelcentral,southafricanorth,australiaeast,centralindia,japaneast,japanwest,southeastasia,eastasia,koreacentral,newzealandnorth,taiwannorth', ','), steps('connectivity').esNetworkSecondarySubSection.connectivityLocationSecondary))]",
"visible": false,
"toolTip": "If 'Yes' is selected when also adding a subscription for connectivity, ARM will deploy Virtual Gateway to the selected region and availability zones.",
"constraints": {
"allowedValues": [
Expand Down Expand Up @@ -3433,7 +3397,7 @@
"selectAll": false,
"filter": false,
"multiLine": true,
"visible": "[and(and(equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary, 'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary,'Yes'), equals(steps('connectivity').esNetworkSecondarySubSection.gwRegionalOrAzSecondary, 'Zone') ,contains(split('brazilsouth,canadacentral,centralus,eastus,eastus2,southcentralus,westus2,westus3,mexicocentral,francecentral,italynorth,germanywestcentral,norwayeast,northeurope,uksouth,westeurope,swedencentral,switzerlandnorth,polandcentral,spaincentral,qatarcentral,uaenorth,israelcentral,southafricanorth,australiaeast,centralindia,japaneast,japanwest,southeastasia,eastasia,koreacentral,newzealandnorth,taiwannorth', ','), steps('connectivity').esNetworkSecondarySubSection.connectivityLocationSecondary))]",
"visible": "[and(and(equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary, 'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary,'Yes'), contains(split('brazilsouth,canadacentral,centralus,eastus,eastus2,southcentralus,westus2,westus3,mexicocentral,francecentral,italynorth,germanywestcentral,norwayeast,northeurope,uksouth,westeurope,swedencentral,switzerlandnorth,polandcentral,spaincentral,qatarcentral,uaenorth,israelcentral,southafricanorth,australiaeast,centralindia,japaneast,japanwest,southeastasia,eastasia,koreacentral,newzealandnorth,taiwannorth', ','), steps('connectivity').esNetworkSecondarySubSection.connectivityLocationSecondary))]",
"toolTip": "Select the required SKU for the VPN gateway.",
"constraints": {
"allowedValues": [
Expand All @@ -3460,42 +3424,6 @@
]
}
},
{
"name": "gwRegionalSkuSecondary",
"type": "Microsoft.Common.DropDown",
"label": "Select the VPN Gateway SKU for your second region",
"defaultValue": "",
"multiselect": false,
"selectAll": false,
"filter": false,
"multiLine": true,
"visible": "[and(and(equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary, 'Yes'), not(equals(steps('connectivity').enableHub, 'vwan'))), equals(steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary,'Yes'), equals(steps('connectivity').esNetworkSecondarySubSection.gwRegionalOrAzSecondary, 'Regional'))]",
"toolTip": "Select the required SKU for the VPN gateway.",
"constraints": {
"allowedValues": [
{
"label": "VpnGw2",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 500 IKEv2/OpenVPN connections, aggregate throughput is 1.25 Gbps",
"value": "VpnGw2"
},
{
"label": "VpnGw3",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 1000 IKEv2/OpenVPN connections, aggregate throughput is 2.5 Gbps",
"value": "VpnGw3"
},
{
"label": "VpnGw4",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 5000 IKEv2/OpenVPN connections, aggregate throughput is 5 Gbps",
"value": "VpnGw4"
},
{
"label": "VpnGw5",
"description": "Supports BGP, max 30 S2S/VNet-VNet tunnels, max 128 P2S SSTP connections, max 10000 IKEv2/OpenVPN connections, aggregate throughput is 10 Gbps",
"value": "VpnGw5"
}
]
}
},
{
"name": "vpnGateWayScaleUnitSecondary",
"type": "Microsoft.Common.DropDown",
Expand Down Expand Up @@ -9917,9 +9845,8 @@
"enablePrivateDnsZones": "[steps('connectivity').enablePrivateDnsZones]",
"privateDnsZonesToDeploy": "[steps('connectivity').privateDnsZones]",
"enableVpnGw": "[steps('connectivity').enableVpnGw]",
"gwRegionalOrAz": "[steps('connectivity').gwRegionalOrAz]",
"gwRegionalOrAz": "Zone",
"enableVpnActiveActive": "[steps('connectivity').enableVpnActiveActive]",
"gwRegionalSku": "[coalesce(steps('connectivity').gwRegionalSku, steps('connectivity').esGwNoAzSku)]",
"gwAzSku": "[steps('connectivity').gwAzSku]",
"vpnGateWayScaleUnit": "[steps('connectivity').vpnGateWayScaleUnit]",
"subnetMaskForGw": "[steps('connectivity').subnetMaskForGw]",
Expand All @@ -9946,9 +9873,8 @@
"enablePrivateDnsZonesSecondary": "No",
"privateDnsZonesToDeploySecondary": null,
"enableVpnGwSecondary": "[steps('connectivity').esNetworkSecondarySubSection.enableVpnGwSecondary]",
"gwRegionalOrAzSecondary": "[steps('connectivity').esNetworkSecondarySubSection.gwRegionalOrAzSecondary]",
"gwRegionalOrAzSecondary": "Zone",
"enableVpnActiveActiveSecondary": "[steps('connectivity').esNetworkSecondarySubSection.enableVpnActiveActiveSecondary]",
"gwRegionalSkuSecondary": "[coalesce(steps('connectivity').esNetworkSecondarySubSection.gwRegionalSkuSecondary, steps('connectivity').esNetworkSecondarySubSection.esGwNoAzSkuSecondary)]",
"gwAzSkuSecondary": "[steps('connectivity').esNetworkSecondarySubSection.gwAzSkuSecondary]",
"vpnGateWayScaleUnitSecondary": "[steps('connectivity').esNetworkSecondarySubSection.vpnGateWayScaleUnitSecondary]",
"subnetMaskForGwSecondary": "[steps('connectivity').esNetworkSecondarySubSection.subnetMaskForGwSecondary]",
Expand Down
4 changes: 2 additions & 2 deletions eslzArm/eslzArm.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -442,7 +442,7 @@
},
"gwRegionalOrAz": {
"type": "string",
"defaultValue": ""
"defaultValue": "Zone"
},
"gwRegionalSku": {
"type": "string",
Expand Down Expand Up @@ -605,7 +605,7 @@
},
"gwRegionalOrAzSecondary": {
"type": "string",
"defaultValue": ""
"defaultValue": "Zone"
},
"gwRegionalSkuSecondary": {
"type": "string",
Expand Down
Loading