I have a VPN Gateway in my personal dev/test azure environment which I use for site to site vpn with my home router so that My azure DC can replicate with my home one.
I however don’t need it on all of the time and would like to reduce some of the cost associated with it. Is there a way to quickly disable it, preventing the cost occurrence or do I need to delete it when I won’t need it for a period of time and then recreate it when needed again, updating the azure GW IP for my site to site tunnel?
Delete and recreate: A simple Powershell, ARM template or Terraform plan would work for this.
It can take a very long time to provision the VPN gateway (I’ve seen it estimated up to an hour or more). You might have better luck using a VPN appliance that you can spin up and down more quickly.
I’ve been considering that,
I tried installing the OpenVPN Client on the azure DC which sort of works but causes replication issues as the on-prem DC does not like the fact that the DC in azure has two associated IP addresses, It especially caused issues with DFS. I tried to override this via a host file on the on-prem DC but that was ignored. Deleting and creating the gateway does indeed take a period of time which will make it rather inconvenient to temporarily spin it up once every month or so to prevent the DC from tombstoning.