- Provider model: You use a Microsoft-approved connectivity provider (an exchange or network service provider). The provider provisions the physical link between your location and Microsoft’s network and typically handles port provisioning and support.
- ExpressRoute Direct: You connect directly to Microsoft edge locations (commonly from a colocation facility). This model is used when you need very high bandwidth (for example, 10 Gbps or 100 Gbps ports) or more operational control.

- Local
- Reach: Single metropolitan area (same metro).
- Use case: Connect to Azure regions reachable from the same metro; ideal for local/metro deployments.
- Notes: Often provides free egress for 1–2 nearby Azure regions depending on the metro configuration. Best when multi-region or global reach is not required.

- Standard
- Reach: All Azure regions within a single geopolitical boundary (for example, all of Europe or all of North America).
- Use case: Most enterprise scenarios where workloads are spread across multiple regions inside the same geopolitical area.
- Notes: Standard is the most commonly used SKU for cross-region connectivity within a geopolitical zone.

- Premium
- Reach: Global — access to all Azure regions worldwide.
- Use case: Large, multi-continent enterprises and complex hybrid architectures that require global connectivity.
- Notes: Increases route and VNet limits (supports thousands of routes and many more VNet connections). Choose Premium when you need global reach and higher scale.
Remember: Local, Standard, and Premium are circuit SKUs that control reach and scale for the circuit itself — not the Azure gateway.
- ExpressRoute circuit SKU (Local/Standard/Premium): Determines geographic reach, route limits, and how many VNets you can connect through the circuit.
- Gateway SKU: The virtual network gateway deployed in Azure that connects one or more VNets to the ExpressRoute circuit. Gateway SKUs determine throughput, encryption, and gateway-specific performance limits. Choose gateway SKUs independently based on throughput, SLA, and features needed in Azure.
Do not confuse ExpressRoute circuit SKUs with gateway SKUs. Circuits provide private connectivity to Microsoft; gateways are Azure resources that attach VNets to that circuit and have separate capacities and costs.
| SKU | Geographic reach | Typical use case | Scale characteristics |
|---|---|---|---|
| Local | Single metro | Local/metro deployments with nearby Azure regions | Lower route/VNet limits; often free egress to local regions |
| Standard | Single geopolitical region | Enterprise multi-region deployments within a geopolitical area | Access to all regions in that geo; moderate route/VNet limits |
| Premium | Global | Large, multi-continent hybrid networks | Global reach; higher route and VNet limits (thousands of routes) |
- Decide your connection model first: Provider vs ExpressRoute Direct.
- Choose the circuit SKU based on geographic reach and scale (Local, Standard, Premium).
- Select gateway SKU(s) separately to meet throughput, redundancy, and encryption requirements.
- Review billing model options (metered vs unlimited) and factor cost into design.
- Microsoft ExpressRoute overview: https://learn.microsoft.com/azure/expressroute/
- ExpressRoute pricing and billing: https://azure.microsoft.com/pricing/details/expressroute/
- Azure Virtual Network gateway SKUs and limits: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpngateways