Inquiry on Primary-Failover Model and Zone Outage Handling for Azure NAT Gateway
I am seeking clarification regarding the configuration of a primary-failover model for outbound traffic using Azure NAT Gateways. Have read the document https://learn.microsoft.com/en-us/azure/nat-gateway/nat-availability-zones. Specifically, I still…
Request for SNAT Port Usage Metric on Azure NAT Gateway
Dear Azure Support Team, Our product relies on Azure NAT Gateway as the primary outbound solution. To prevent SNAT port exhaustion and ensure smooth connectivity, we would like to monitor the SNAT port usage. This would enable us to allocate additional…
How to check SNAT port usage of NatGateway with existing IP
Hi exports, Our team will use NatGateway with public ip as the explicit outbound connectivity method of VMs. May I ask is there any way to monitor current usage of SNAT Port on NatGateway? For example, if there is a method to let us know that currently…
How can I get a South African based IP address when creating a public IP address?
When I create a public IP address, I keep getting a US based IP address when I search it on "whois". According to regulations I need the IP address to be in south africa as I selected the region to be south africa north.
What can Microsoft do to clean up their Azure Virtual Desktop Public IPs?
We are seeing more and more websites blocking Azure Virtual Desktop Public IPs. For Example: Youtube is tagging the Azure Southeast asia public IP as a bot. According to Google, they will not remove the Microsoft IP until MS cleans up their side. What…
Default outbound access retirement for VMs and S2S VPN
Hi All, As we now on 30 September 2025 default outbound access for VMs will be retired. https://azure.microsoft.com/en-us/updates/default-outbound-access-for-vms-in-azure-will-be-retired-transition-to-a-new-method-of-internet-access/ I have on-prem to…
Azure networking
We have a customer running on prem infra structure. The on prem production ip range has vnet gatway connected to azure using the express route. There are some servers in dmz at on prem which we need to move in azure. So we created another vnet in azure…
How to change kube system pod images to pull from private registry
Issue: High nat gateway data transfer We are running ephemeral workloads that creates 2000-3000 pods and corresponding to that autoscaler spins up around 500 odd nodes. Now even though we are pulling our application images from ACR via service endpoints…
How to integrate Azure Firewall and NAT Gateway
Hi, we've set up a hub/spoke in Azure using an Azure Firewall to both control traffic and to allow the spokes to communicate. We want to configure this so that Internet traffic from each of the spokes first hits the firewall just like it would for…
How to use Azure VPN with Azure NAT Gateway and route all P2S VPN traffic
Hello everyone, Is it possible to use Azure VPN with Azure NAT Gateway and route all P2S VPN traffic through a NAT Gateway connected to this VPN? I connected Azure NAT Gateway to the Virtual Network, in the p2s VPN connection settings I specified to…
Does Azure App Gateway WAF V2 uses same static public IP for outbound calls?
To call our client APIs, I provided my client with my Azure WAF V2 Application Gateway public IP (2*..*.*9 (MY-AppGateway-pip)) to safelist our IP, and they successfully safelisted it. However, I am still unable to hit their APIs. Upon further…
Hide VM Private over S2S VPN
Hello, I have a must have requirement to have my VM Internal IP NAT to a Public IP that is unique over a IPSec VPN tunnel. This is for security purposes and not due to overlapping subnets. I have the S2S VPN tunnel setup, but I am unable to find a way to…
In NAT gateway , can we use both public IP address by different subnets
Hi everyone , IN NAT Gateway Is anyway we can have the multi public outbound IP address by different subnets like 1.0.0.0/24 use Public IP address 1 like 2.0.0.0/24 use public IP address 2 Thanks
Do I need to use Azure NAT Gateway for outbound internet access for Azure Container Apps or Azure Database for PostgreSQL?
Hi everyone, I would like to ask whether I need to use Azure NAT Gateway for outbound access to the internet? Insight: I have Hub and Spoke network topology implemented, in the Hub VNET there is an Azure Firewall and Azure VPN Gateway. I've setup Azure…
How do set a unique outbound IP/Subnet per namespace in a aks cluster
I want to have different outbound IPs (or route egress through unique VNET subnets) per namespace. I see that the recommendation is to have separate nodepools and attach different vnets to them. If I want the pods to share compute, however, what would be…
How to dis associate subnet from NATGateway using Azure SDK.
0 I am using this method to associate NATGateway to a subnet. ArmClient azure = this.azureProvider.GetAzureClient(resourceTenantId, subscriptionId); var subnetId = SubnetResource.CreateResourceIdentifier(subscriptionId,…
How to fix Azure Plesk FTP not listing directories after inbound and outbound rules, passive mode is set ? Plesk say its someting to do with NAT and routing.
the connection was allowed, and the incoming packet arrived on the Plesk server: But at the same time, from my test server, packets do not reach the Plesk server: Not a single packet arrived on the server, that is, it was blocked or not…
Azure Migrated Server - SMTP Traffic Bypassing NAT Gateway
I have migrated an on-prem server to the Azure cloud. Machine Details: Name: Horizon Private IP: 192.168.1.10 Subnet: Development NAT Gateway: azure-nat Public IP on NAT: 104.233.121.78 When surfing the web, the public IP check returns source IP as…
i am unable to select CIDR size of /30 while creating NAT gateway. i dont want to upgrade for now to pay as you go .. i m a student doing a project for testing
i am unable to select CIDR size of /30 while creating NAT gateway. i don't want to upgrade for now to pay as you go for now as i have my free credits.. i m a student doing a project for testing. can this be enabled or give alternate ways which i can do…
Azure NAT Gateway for specific subnet or VMs but not all
Good Day, We are wanting to tie a specific public IP that we have as a resource in our Resource Group for egress access. Our AVD hosts are the target for this. These AVD hosts though are part of a bigger Virtual Network that includes many other resources…