You can use azure virtual network gateway to send encrypted traffic between azure and on-premises datacenter over internet.
You can use azure virtual network gateway to create site to site vpn connection over internet.