As part of a hybrid cloud deployment at Contoso, you need to connect Contoso’s on-premises datacenter to Azure. The solution you choose should minimize expense during the low-scale pilot deployment. Which option will you choose?
这个题目的说法就是 VPN ，想省钱的话就 VPN 吧。
如果不想省钱或者大企业有足够的预算和人力资源，那么就用ExpressRoute 。
典型就是如何选择最优的方案。
同时请参考：
Azure Point-to-Site VPN 概念与作用 和 Azure Site-to-Site VPN 概念与作用
Excellent question. For a low-scale pilot deployment where the primary goal is to minimize expense, the best option is:
An Azure VPN Gateway (creating a Site-to-Site VPN)
Lowest Cost: This is the most significant factor. A Site-to-Site VPN leverages your existing public internet connection. You do not need to purchase expensive, dedicated private circuits from a telecommunications provider. The costs are primarily the hourly rate for the Azure VPN Gateway (which has low-cost SKUs like Basic and VpnGw1 perfect for pilots) and data egress charges.
Fast and Simple Deployment: You can configure a Site-to-Site VPN in a matter of hours. It is a software-defined configuration that doesn’t require physical hardware installation or coordination with third-party providers, which is ideal for getting a pilot project up and running quickly.
Sufficient for a Pilot: For a “low-scale” deployment, the performance and bandwidth provided by a VPN over the internet are almost always sufficient. You’ll be able to test connectivity, deploy virtual machines, and synchronize small amounts of data without issue.
| Feature | Azure VPN Gateway (Site-to-Site) | Azure ExpressRoute |
|---|---|---|
| Connection | Encrypted tunnel over the public internet | Private, dedicated circuit |
| Cost | Low (Uses existing internet) | High (Requires provider contract) |
| Setup Speed | Fast (Hours) | Slow (Weeks to Months) |
| Bandwidth | Varies, up to 10 Gbps depending on SKU | Predictable, up to 100 Gbps |
| Best For | Pilots, dev/test, small deployments | Production workloads, high-throughput |
Conclusion:
For Contoso’s pilot deployment, choosing an Azure VPN Gateway to create a Site-to-Site VPN connection is the clear winner. It directly meets the core requirement of minimizing expense while being fast to deploy and perfectly adequate for the needs of a low-scale test.
请提供中文解释
好的，没问题。这是这个问题的中文解释。
这是一个非常经典的问题。在 Contoso 的混合云部署场景中，你需要将其本地数据中心连接到 Azure，并且核心要求是在小规模试点部署期间将费用降至最低。
基于这个核心要求，你的最佳选择是：
Azure VPN 网关 (创建站点到站点 VPN)
成本最低：这是最重要的因素。站点到站点 (Site-to-Site) VPN 利用的是你现有的公共互联网连接，你不需要从电信运营商那里购买昂贵的专用私有线路。其成本主要包括 Azure VPN 网关的小时费率（有像 Basic 和 VpnGw1 这样非常适合试点项目的低成本 SKU）以及数据传出费用。
部署快速简单：你可以在几个小时内就完成站点到站点 VPN 的配置。这是一种软件定义的配置，不需要安装物理硬件，也无需与第三方供应商协调，非常适合快速启动一个试点项目。
足以满足试点需求：对于“小规模”的部署，通过互联网的 VPN 所提供的性能和带宽通常是足够的。你将能够顺利地测试连接、部署虚拟机以及同步少量数据。
| 特性 | Azure VPN 网关 (站点到站点) | Azure ExpressRoute |
|---|---|---|
| 连接方式 | 通过公共互联网的加密隧道 | 私有、专用线路 |
| 成本 | 低 (利用现有互联网) | 高 (需要供应商合同) |
| 部署速度 | 快 (数小时) | 慢 (数周至数月) |
| 带宽 | 可变，取决于 SKU 最高可达 10 Gbps | 可预测，最高可达 100 Gbps |
| 最佳适用场景 | 试点、开发/测试、小型部署 | 生产工作负载、高吞吐量场景 |
结论：
对于 Contoso 的试点部署，选择 Azure VPN 网关来创建站点到站点 VPN 连接是明确的最佳选择。它直接满足了最小化费用的核心要求，同时部署快速，并且完全能够满足小规模测试的需求。
