Question

A retail company connects its on-premises datacenter to an Azure hub virtual network using a single Route-Based VPN gateway (VpnGw2 SKU) in active-standby mode. During peak season, users report intermittent connectivity drops during Azure gateway maintenance, and the finance team complains that a bulk data-sync job saturates the tunnel bandwidth. The company cannot yet justify the cost of ExpressRoute. Which change to the VPN configuration best improves both resilience and aggregate throughput while keeping the existing gateway SKU tier?

Accepted Answer

Reconfigure the VPN gateway in active-active mode with two public IP addresses and establish dual IPsec tunnels from two on-premises VPN devices

Answer

Enable BGP on the existing active-standby gateway to allow automatic failover between the primary and secondary instances

Answer

Deploy a second standalone VPN gateway in a peered spoke virtual network to load balance traffic across both gateways

Answer

Upgrade the gateway to the VpnGw2AZ zone-redundant SKU to eliminate maintenance-related drops and double the tunnel bandwidth