VPN Gateway Connect on-prem to VNet via public internet Must be deployed in a Gateway Subnet Express Route Gateway Dedicated connection to VNet—private leased line