In this section, we use Virtual WAN hub-to-hub communication to interconnect. In this example, having an interconnect with the Microsoft Global Network in Hong Kong, you can now start to leverage the Azure Virtual WAN Global Transit Architecture and additional services, like Azure secure Virtual WAN hub, in order to consume services and interconnect to your branches and datacenter outside China. This is to split the traffic between enterprise traffic to cloud services like Microsoft 365 and Azure, and by-law regulated internet traffic.Ī compliant network architecture within China could look like the following example: Providers now create a VPN/SDWAN Aggregation on both sides and bridge via MPLS between them.Įither way, we still recommend that you have a second and regular internet breakout into China. The same applies for the site-to-site connections between branches in the rest of the world. You can see that site-to-site VPN connections inside China are allowed and are mostly stable. With the current changes regarding interconnects between China and Hong Kong SAR, most of these network providers build an MPLS bridge between China and Hong Kong SAR. If you use a single location or SDWAN solution, that would be the choice of connection. When using this connect, your next BGP hop for Microsoft Services must be Microsoft Autonomous System Number (AS#) 8075. The following list shows Internet Exchanges possible in Hong Kong: Using a Dedicated Internet Access directly at one of the following Internet Exchange Points, or using a private network interconnect.
For more information, see ExpressRoute connectivity providers. However, they can also talk to the other providers if they leverage Cloud Exchange Providers like Megaport or InterCloud.
#VISCOSITY VPN CHINA LICENSE#
Currently, only the only ICP license provider with ExpressRoute to Hong Kong is China Telecom Global. That would be the case for the use of MPLS/IPVPN. Getting a Microsoft Azure ExpressRoute terminated in Hong Kong. With your provider, you can agree on which of the following two solutions to use to reach the Microsoft global backbone: The table below shows an example of providers and the service they offer, based on information at the time this article was written. This makes Hong Kong a better location choice to interconnect to China.ĭepending on the provider, you may get different service offerings. When you follow network fiber maps, nearly all network connects go through Beijing, Shanghai, and Hong Kong. While most customers think using Singapore for interconnect is the best case because it looks nearer to China when looking on the map, this is not true. In this case, Hong Kong is very important because of its physical connection and location to China. Next, you need to agree with that provider to give a breakout to the Microsoft Global Network and its Edge Network in Hong Kong, not in Beijing or Shanghai. In most cases, you'll end up with one of the following providers:ĭepending on the provider and your needs, you now need to purchase one of the following network connectivity services to interconnect your branches within China. If you want to stay compliant to the Chinese cybersecurity law, you need to meet a set of certain conditions.įirst, you need to work together with a network and ISP who owns an ICP (Internet Content Provider) license for China. Using Virtual WAN, a customer can establish a more performant and stable connection to Microsoft Cloud Services and a connection to their enterprise network without breaking the Chinese cybersecurity law.
#VISCOSITY VPN CHINA FULL#
The traffic running through Hong Kong and Macau does not hit the Great Firewall in full force, it is handled by a subset of the Great Firewall. Nearly all traffic running from People's Republic of China to outside of China, except the special administration zones like Hong Kong and Macau, passes the Great Firewall. In most of the cases, customers are struggling with high latencies, low bandwidth, unstable connection, and high costs connecting to outside of China (for example, Europe or the United States).Ī reason for these struggles is the "Great Firewall of China", which protects the Chinese part of the Internet and filters traffic to China. Those improvements are mostly relevant for using Cloud Services like Microsoft 365, Azure Global Services, or interconnect branches inside of China with a customer backbone.
#VISCOSITY VPN CHINA HOW TO#
When looking at common automotive, manufacturing, logistics industries, or other institutes like embassies, there is often the question about how to improve interconnection with China.
0 kommentar(er)
