When you add new virtual machines in Azure you can add it directly into a virtual network, but that is the same drop box for the affinity group. Is this then implying that because I am adding in all these VM's into the same virtual network that its going to treat them like they are in the same affinity group?

Thanks in advance for any info. I cant seem to find a straight answer on the windows azure documentation website.


migrated from stackoverflow.com Sep 29 '13 at 13:09

This question came from our site for professional and enthusiast programmers.


You are correct.

A virtual network is just a very specific Affinity Group.

I really like this definition of an Affinity Group. You can see as you read it that it is exactly what a local network (or virtual in our case) is supposed to do.

Narahari Dogiparthi's blog states:

Affinity groups are the way to group the services in your Windows Azure subscription that need to work together in order to achieve optimal performance. When you create an affinity group, it lets Windows Azure know to keep all of the services that belong to your affinity group running at the same data center cluster. For example, if you want to keep the services running your data and your code together, you would specify the same affinity group for those services. That way, when you deploy those services, Windows Azure will locate them in a data center as close to each other as possible. This reduces latency and increases performance, while potentially lowering costs.

Microsoft's Azure documentation suggests that using both together can give you a WAN style network. Multiple VLAN's connected through one Affinity Group. So you can see that its the same thing, but just another abstraction layer.

Mark Russinovich is also a great guy to follow in this area as well. Check out this session where he talks about how Microsoft structures its virtual networks in Azure. (at ~30:00)

  • Thanks for the detailed answer. I will check out thoes videos right now. Last question, can two virtual networks talk to eachother? A client want's to setup a backend network and front end network. Is it possble? and to be able to control a firewall between them (azure endpoints)? – Rob Sep 18 '13 at 14:05
  • I've not tried it, but it should be possible. let me know if you succeed. Bummer they put this question on hold.. i thought it was a good one. Can you still upvote it? – paqogomez Sep 18 '13 at 16:01
  • 1
    The only way you can access on virtual network from another on Windows Azure is through the internet – Yossi Dahan Dec 9 '13 at 22:33

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.