Merge pull request #567 from Azure/er_connections_active-active

ER connections used with dynamic routing

checklists/alz_checklist.en.json

@@ -887,7 +887,7 @@
         {
             "category": "Network Topology and Connectivity",
             "subcategory": "Hybrid",
-            "text": "Use Connection Monitor for connectivity monitoring across the environment.",
+            "text": "Use Connection Monitor for connectivity monitoring across the network, especially between on-premises and Azure.",
             "waf": "Operations",
             "guid": "5bf68dc9-325e-4873-bf88-f8214ef2e5d2",
             "id": "D04.13",
@@ -929,6 +929,17 @@
             "link": "https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings#gwsub",
             "graph": "resources | where type=='microsoft.network/virtualnetworks' | project id,resourceGroup,name,subnets=properties.subnets | mv-expand subnets | project id,resourceGroup,name,subnetName=tostring(subnets.name),routeTableId=tostring(subnets.properties.routeTable.id) | where subnetName == 'GatewaySubnet' | join kind=leftouter (Resources | where type == 'microsoft.network/routetables' | project routeTableName=name,routeTableId=id, disableBgpRoutePropagation=properties.disableBgpRoutePropagation) on routeTableId | project id,compliant = (disableBgpRoutePropagation == False or isnull(disableBgpRoutePropagation))"
         },
+        {
+            "category": "Network Topology and Connectivity",
+            "subcategory": "Hybrid",
+            "text": "If using ExpressRoute, your on-premises routing should be dynamic: in the event of a connection failure it should fail over to the second connection of the circuit. Load should be shared across both connections ideally as active/active, although active/passive is supported too.",
+            "waf": "Reliability",
+            "guid": "d581a947-69a2-4783-942e-9df3664324c8",
+            "id": "D04.17",
+            "ammp": true,
+            "severity": "High",
+            "link": "https://learn.microsoft.com/azure/expressroute/designing-for-high-availability-with-expressroute#active-active-connections"
+        },
         {
             "category": "Network Topology and Connectivity",
             "subcategory": "IP plan",