ExpressRoute provides direct connectivity to Azure cloud services and connecting Microsoft’s global network. VPN Gateway provides secured connectivity to Azure cloud services over public Internet.