# Cross-Region Data Transfer Between Chatty Azure Workloads Canonical: https://www.pointfive.co/efficiency-hub/inefficiencies/cross-region-data-transfer-between-chatty-azure-workloads Components that exchange data constantly, such as an application tier and its database, cache, message broker, file share or logging pipeline, are... By: PointFive Updated: 2026-09-28 [Cloud Efficiency Hub](https://www.pointfive.co/efficiency-hub) The short version Components that exchange data constantly, such as an application tier and its database, cache, message broker, file share or logging pipeline, are sometimes placed in different Azure regions. PointFive Research Cloud cost research at PointFive Azure service [Azure Data Transfer](https://www.pointfive.co/efficiency-hub/cloud-services/azure-data-transfer) Category [Networking](https://www.pointfive.co/efficiency-hub/service-category/networking) Reference CER-0421 Type Inefficient Architecture ## Explanation Why the waste happens and who it affects. This happens when compute is moved to a cheaper region while the data stays behind, when a shared service is deployed centrally for convenience, when a disaster-recovery replica quietly starts serving reads, or when spokes in one region are routed through a hub firewall in another. Data transfer between services in the same region carries no bandwidth charge (VNet peering is billed per GB even within a region), but every GB that crosses a region boundary is billed. Because the cost is per GB and accrues on every request, a placement decision made once can produce a steady charge that appears only as a Bandwidth or Virtual Network peering line in the bill, far from the resources that cause it. The Well-Architected cost guidance tells teams to minimize data transfer by placing data close to where it is used, caching and using a CDN, and the Azure Firewall guidance specifically warns against unexpected cross-region traffic in hub-and-spoke topologies. ## Billing model The pricing dimensions that drive this cost. Azure bills data movement by where it starts and ends. Same-region transfer Data transfer between Azure services in the same region, and inbound data transfer, carries no bandwidth charge; VNet peering within a region is still billed per GB Inter-region transfer Billed per GB leaving the source region, with rates that depend on the source and destination continents Global VNet peering Billed per GB at both ends, at the outbound rate of the source zone and the inbound rate of the destination zone Internet egress Billed separately per GB after the first 100 GB per month, in tiers that vary by source region ## How to detect 5 checks to find it in your estate. - In Cost analysis, filter to the Bandwidth and Virtual Network services and group by meter and resource to separate inter-region and global peering charges from internet egress, then trend them over several months - Enable VNet flow logs with traffic analytics and rank flows by volume between source and destination regions to find the top cross-region conversations - Map dependencies for the heaviest flows (application to database, cache, storage account, firewall, logging workspace) and check whether each pair sits in the same region - Review hub-and-spoke routing: spokes whose user-defined routes send traffic to a firewall or network virtual appliance in another region pay transfer on every hop - Check for applications reading from a geo-replica or storage account in another region during normal operation rather than only on failover ## How to fix 5 ways to remove the waste. - Co-locate tightly coupled components in the same region, moving compute to the data or the data to the compute depending on which is cheaper to move - Deploy a regional instance of shared services (firewall in each regional hub, regional cache or read replica) instead of calling one central instance across regions - Cache or batch cross-region reads where the data must stay in another region, and compress payloads to cut per-GB volume - Serve static and cacheable content to distant users through Azure Front Door or a CDN rather than from a single origin region - Weigh savings against resilience: some cross-region replication is deliberate for disaster recovery, so target steady-state application traffic rather than replication that the recovery design requires ## Documentation Vendor references for pricing and configuration. - [Bandwidth pricing azure.microsoft.com](https://azure.microsoft.com/en-us/pricing/details/bandwidth/) - [Virtual Network pricing azure.microsoft.com](https://azure.microsoft.com/en-us/pricing/details/virtual-network/) - [Architecture strategies for optimizing data costs learn.microsoft.com](https://learn.microsoft.com/en-us/azure/well-architected/cost-optimization/optimize-data-costs) - [Architecture Best Practices for Azure Firewall learn.microsoft.com](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/azure-firewall) ## Related inefficiencies [Browse the library](https://www.pointfive.co/efficiency-hub) - Azure Data Factory V2 CER-0261 ### [Suboptimal Integration Runtime Region Selection in Azure Data Factory](https://www.pointfive.co/efficiency-hub/inefficiencies/suboptimal-integration-runtime-region-selection-in-azure-data-factory-0bcad) When Integration Runtimes use the default "Auto Resolve" region setting, the work does not always run in the region where the data lives. For copy activities, Azure makes a best effort to run in the sink data store's region (or the closest... Networking - Azure Front Door CER-0412 ### [Multiple Front Door Standard or Premium Profiles With Few Endpoints](https://www.pointfive.co/efficiency-hub/inefficiencies/multiple-front-door-standard-or-premium-profiles-with-few-endpoints) Azure Front Door Standard and Premium charge a fixed monthly base fee for every profile, on top of request and data transfer charges. A single profile can hold several endpoints, each with its own routes and custom domains, yet teams often... Networking - Azure Firewall CER-0415 ### [Per-Spoke Azure Firewall Deployments Instead of a Shared Hub Firewall](https://www.pointfive.co/efficiency-hub/inefficiencies/per-spoke-azure-firewall-deployments-instead-of-a-shared-hub-firewall) Azure Firewall is designed to be deployed centrally, in a hub virtual network or a Virtual WAN secured hub, and shared by the spoke virtual networks connected to that hub in the same region. In decentralized estates, application teams or... Networking --- Source: the public page above. Product screenshots and illustrative interfaces are examples, not live customer data.