Do you need on premise infrastructure for SAP Rise ?

To have SAP Rise which all infrastructure ( changes)  customer need ?

SAP Rise is nothing but your SAP systems running on Azure/AWS/GCP/SAP datacenter, server management supported by SAP internal personnel.  So this basically frees customers from the difficulties of maintaining a dedicated infrastructure and server management team.  But still customer needs some infrastructure either at their own cloud subscription ( or at on premise) . When I answer the question, what infrastructure customer needs at their end, it basically come down to connections. So connecting to SAP rise systems means you are basically connecting to these cloud datacenters where SAP application is installed. In case of Azure,  you can see the list of datacenter .

Customer ( customers infrastructure team ) need to setup a connection to  (cloud) datacenter whenever SAP’s build PL shares connection details with them. Customer has choice to select which type of connection they want to setup . Usually VPN is the option , but you have option for  VNET, VPC peering, TGW and Expressroute ( dedicated line in case of Azure is called EXPRESSROUTE).

DNS is optional, but if you are not setting up this, you won’t be able to use the URLs without replacing it with IP address. So it is highly recommended to have DNS in place before you go for ordering SAP Rise.

DNS forwarding has to be established as soon as SAP’s build PL asks you to do so.  He /She can share with you a guide for this and HEC DNS details. Customer need to have qualified infrastructure guys who can understand DNS. DNS forwarding ensures that your end-user computer is resolving the hostname to IP address. Alternatively customer can setup host file in each end-users computer, which is obviously laborious and not scalable.

Additionally customer needs to allow their outbound and inbound traffic for SAP application in their firewall. You need to open your ports. The port for DNS is 53.

Customer also should specify,  on which IP range their existing systems are, before starting with SAP Rise project.  They should inform the Cloud architect and adviser from SAP side, on which IP range they need the SAP Rise SAP systems to fit in.  Once SAP systems is built on a certain IP range , changing it means another build. This build may be billed directly to customer, because it is customers responsibility to make sure that IP address overlapping do not happen. 

Let me know if you have further questions on the infrastructure you require to setup SAP Rise.