Which type of connection is created between a host VNet and a transit VNet when configuring Cloud OnRamp for Iease?

GRE tunnels are used for specific routing needs but are not the primary secure connection type established by Cloud OnRamp for IaaS between VNets for data plane security.

Azure peer links (VNet peering) connect VNets within Azure but do not provide the secure overlay connectivity orchestrated by Cloud OnRamp for IaaS with the SD-WAN fabric.

Cloud OnRamp for IaaS, especially for Azure, utilizes IPsec tunnels to create secure, encrypted connections between the on-premises SD-WAN network and the Azure VNet via a transit VNet, ensuring secure data transfer for cloud workloads.

Azure private endpoints offer private access to Azure services, but they are not used for creating network-to-network secure connections for SD-WAN integration between VNets.