Fixing Azure VPN Gateway CPU Spikes: A Route Explosion RCA
A production incident walkthrough: VPN Gateway CPU pegged at 95% across both active-active instances, causing BGP flaps and tunnel instability. Root cause was 2,400 BGP prefixes with no summarization. Fix: route summarization + SKU upgrade brought CPU to 38%.