Apply route filtering to Route VPN gateway

Kuba 0 Reputation points
2025-02-27T12:00:59.21+00:00

Hi,

We do use VPN Gateway to establish S2S connections with cloud providers and on-prem.
One of the S2S VPN is between a cloud provider and Azure, learning BGP routes.
Second is a S2S VPN between on-prem and Azure using now static but we want to use BGP as well. We noticed that routes learned are advertised are advertised to the other cloud provider which I believe it´s default behaviour. However, we want to apply route-filtering to avoid those routes learned from on-prem to be advertised to the other cloud provider.

Is there any way to achieve this?

Thanks in advance!

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,659 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Ganesh Patapati 3,920 Reputation points Microsoft Vendor
    2025-02-27T20:08:49.5233333+00:00

    Hi Kuba

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    NOTE: At the moment, Azure VPN Gateway does not support BGP route filtering.

    • When configuring BGP on your Azure VPN Gateway, ensure that you are aware of the routes being advertised. While Azure does not allow you to filter routes directly, you can manage the routes that you're on-premises network sends to Azure.

    If you require more advanced routing capabilities, consider deploying a Network Virtual Appliance (NVA) in Azure. NVAs can provide more granular control over routing and can be configured to filter routes based on your requirements but it may involve additional costs and complexity.

    If you wish you may upvote the feedback in the below forum requesting this feature. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

    Feedback forum: https://feedback.azure.com/d365community/idea/ef6fe1c6-8426-ec11-b6e6-000d3a4f0789


    I hope this has been helpful!

    If above is unclear and/or you are unsure about something add a comment below.

    Your feedback is important so please take a moment to accept answers. If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

    Accepted answer

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.