UDR + service tags

[Notsogood]

We are running into some issues with our AVD that it cannot reach the brokers in Hong Kong. This is because we have an NVR and I don't allow outbound traffic to China. I am not sure why it is trying to use my NVR in the first place. I thought if it was destination within Microsoft IP range, it would just go direct and not through the NVR?

I did see adding a route with services tag WindowVirtualDesktop but I don't fully understand it. Do I need to do this for backups/Site Recovery/etc. or is all that going through my NVR?

[#2]

It is possible that the AVD session hosts are attempting to reach the brokers in Hong Kong via the NVR due to the default routing configuration. By default, all outbound traffic from the session hosts is sent to the default gateway, which in this case is the NVR.

Adding a route with the services tag WindowVirtualDesktop can help to ensure that AVD traffic destined for Microsoft IP ranges goes directly to the internet instead of going through the NVR. This can improve performance and reduce the risk of connectivity issues.

As for backups and Site Recovery, it depends on your configuration. If you are backing up data to a service or location outside of your network, you may need to add routes to ensure that traffic goes directly to the internet instead of going through the NVR. The same applies for Site Recovery traffic.

It is recommended that you work with your network administrator to determine the best routing configuration for your AVD environment and ensure that all necessary traffic is able to reach its destination.