- Company sizes or stages where this product is overkill or insufficient
- Small environments where static UDRs are manageable and the incremental monthly cost is not justified.
- Industries or use cases where competitors are better suited
- Multicloud transit, governance, and segmentation-as-a-service needs: overlay vendors or SD-WAN platforms may be better when consistent cross-cloud routing policy and centralized operational tooling are required.
- Managed global hub within Azure: Azure Virtual WAN can be a better fit if a managed hub-and-spoke backbone and centralized routing constructs are required.
- Technical requirements that this product cannot meet
- 4-byte ASN requirement (ARS supports only 2-byte ASNs).
- Scenarios where ARS is expected to function as a general-purpose transit router between gateways without appropriate topology validation.
- Budget constraints that make alternatives more appropriate
- Small, stable environments where a simple NVA + UDR setup is cheaper.
- Organizations already paying for a broader managed networking product (vWAN or vendor SD-WAN) where ARS would be redundant.
- Specific workflows or integrations where the product falls short
- If deep route analytics, policy simulation, and rich visualization are required, ARS alone provides limited capabilities; third-party tooling may be needed.
- Red flags in the buying process
- Assuming ARS eliminates the need for routing expertise—BGP design, filtering, and operations are still required.
- Failing to plan a maintenance window for initial deployment in gateway VNets.
- Current limitations acknowledged by the vendor
- ARS supports only 16-bit (2-byte) ASNs; it does not support 32-bit (4-byte) ASNs.
- ARS requires peering each NVA with both ARS instances for HA.
- ARS only exchanges routes; it does not forward data between appliances and VMs.
- Creating or deleting ARS in a VNet that contains a VPN or ExpressRoute gateway can cause downtime of about 10 minutes.
- Scale limitations
- Microsoft publishes capacity guidance: default capacity supports a baseline number of connected VMs, and scaling uses routing infrastructure units. Route advertisement limits are documented (for example, a limit on the number of routes each BGP peer can advertise).
- Security or compliance gaps
- Route Server-specific security certification artifacts are not usually published; buyers should validate via Azure compliance scope and their own risk/compliance requirements.
- API limitations or integration constraints
- Some operational needs (visibility, topology mapping, analytics) may require third-party tools.