Networking

The Networking forum covers all aspects of Networking in Azure, including endpoints, load-balancing, network security, DNS, Traffic Manager, virtual networks, and external connectivity.

Virtual Network:

  • Service overview

  • Technical documentation

  • Pricing details
  • Traffic Manager:

  • Service overview

  • Technical documentation

  • Pricing details
  • Network Watcher:

  • Service overview

  • Technical documentation

  • Pricing details
  • If you have any feedback on any aspect of Azure relating to Networking, we’d love to hear it.

    How can we improve Azure Networking?

    You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

    There are two ways to get more votes:

    • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
    • You can remove your votes from an open idea you support.
    • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
    (thinking…)

    Enter your idea and we'll search to see if someone has already suggested it.

    If a similar idea already exists, you can support and comment on it.

    If it doesn't exist, you can post your idea so others can support it.

    Enter your idea and we'll search to see if someone has already suggested it.

    • Hot ideas
    • Top ideas
    • New ideas
    • My feedback
    1. traffic manager api

      I would like an API call that can be made to get the list of traffic manager IP addresses. (this list https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs#what-are-the-ip-addresses-from-which-the-health-checks-originate.)

      That way we can automate the checking of this list and alert if it is amended, and also automate updating our azure services. Just having a website to check is too manual.

      3 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
      • Audit logs for DNS record changes

        Multiple people have access to our DNS zones. We would like to know who changed what.

        4 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
        • Roelant

          when adding endpoints to the traffic manager, you get all app-services that are available, but in our case, the list is very long, and searching makes it difficult. The list is not sorted, and neither can we filter it.
          Adding a filter would be very helpfull.

          3 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            planned  ·  0 comments  ·  Domain Name Service (DNS, Traffic Manager)  ·  Flag idea as inappropriate…  ·  Admin →
          • Traffic manager https

            Why dont subdomains of trafficmanager.net automatically support https? Similar to azurewebsites.net.

            3 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
            • Traffic Manager support blob storage

              for web site availability, I would like to use blob storage under traffic manager when blob (such as pictures, pdfs , movies) is stored to blob storage.

              36 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
              • Alteração do DNS

                Sou cliente do Azure no Brasil e temos contrato máquinas virtuais localizadas no Sul do Brasil, porém no Mapa do caminho do DNS está indo para os EUA causando grandes problemas quando as empresas de internet estão com problemas de DNS e grande parte do tempo estão com problemas. Com isso, sugiro que quando contratamos um servidor no Brasil, que o DNS não tenha que sair do país de origem, uma vez que o servidor contratado também está no Brasil.

                1 vote
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                • Add activity alert feature for DNS record add/delete/modify

                  Current activity alert for DNS zones available but not for records. Add activity alert feature for DNS record add/delete/modify also.

                  1 vote
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                  • Allow Traffic Manager to Support Absolute Monitoring Endpoints

                    Current endpoint monitoring in Traffic Manger only supports a relative path. For flexibility, it would be great to support a full url path like http://www.example.com/health

                    55 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                    • Introduce CNAME flattening

                      Does
                      #Azure
                      #DNS
                      support CNAME flattening #CloudFlare
                      style? The answer is no yet it would be a very handy feature.

                      See here for more details on how CloudFlare is doing it, and they might actually have introduced the whole notion of "CNAME flattening": https://support.cloudflare.com/hc/en-us/articles/200169056-CNAME-Flattening-RFC-compliant-support-for-CNAME-at-the-root

                      12 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                      • Allow country specific characters in Azure DNS

                        It seems that is is not possible to register domainnames within Azure DNS with sepecific country allowed characters, like ë of ü in Germany.

                        1 vote
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                        • Support edns-client-subnet extension in Traffic Manager

                          I'm surprised to learn the Traffic Manager does not support the client-subnet feature. Most major CDNs & DNS providers seem to support it.

                          18 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            planned  ·  1 comment  ·  Domain Name Service (DNS, Traffic Manager)  ·  Flag idea as inappropriate…  ·  Admin →
                          • Make Traffic manager able to access Web Apps that uses Authentication

                            Traffic manager is currently unable to get the status of a Web App that's using the Authentication/Authorization (simple auth) feature. It would be nice if it could use some kind of service account (or similar) to get authenticated and get the Web App status but still have the security features intact.

                            10 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                            • Develop a tool that will import DNS zone files hosted at other providers like Route53

                              Since many DNS providers do not allow you to export your zone files create a utility that will harvest them in a format that could be used to import them into Azure DNS.

                              1 vote
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                              • Traffic Manager should default to port 443 for HTTPS

                                First time configuring Traffic Manager and I pointed it at https but forgot to change the port, took a support call to resolve.

                                Suggest that the default port be changed to 443 if you toggle to https, or at least warn that you are on a non-default https port

                                5 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                • Allow option to choose the SSL endpoint to target for Azure Web App endpoints in Traffic Manager

                                  There is a limitation with using Traffic Manager with Azure Web Apps/App Services right now.

                                  See this article: https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-configure-ssl-certificate#step-3-change-your-domain-name-mapping-ip-based-ssl-only

                                  When a user combines both IP-based SSL and SNI-based SSL bindings in their app service, SNI-based bindings need to have different DNS configurations in order to work properly. The SNI-based bindings need to target "sni.<appname>.azurewebsites.net" instead of just <appname>.azurewebsites.net.
                                  It's not possible to directly get to the site at "sni.<appname>.azurewebsites.net" as it's only used for SSL routing in the App Service infrastructure, so you cannot use this URL when adding the App Service as an external endpoint (pinging fails and it…

                                  4 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)

                                    Hi Matt,

                                    Thank you for the feedback. We are always looking to increase the ease in which different Azure services can be consumed together and this falls into that. We will be definitely looking into this specific integration point.

                                    Azure Networking Team

                                  • NAPTR Support (Name Authority Pointer)

                                    Support NAPTR records with Azure DNS. These are primarily used to complement SRV records which you currently support.
                                    https://en.wikipedia.org/wiki/NAPTR_record

                                    6 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                    • Provide dyndns protocols

                                      Provide dyndns2 and other dynamic DNS protocols for Azure DNS to allow updating from network devices and such.

                                      4 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)

                                        Hi,

                                        Thank you for your suggestion on feedback.azure.com for Dynamic DNS support in Azure DNS.

                                        Please can you clarify a couple of points about your suggestion for us:
                                        1. Are you looking for Dynamic DNS support for Internet-facing domains, or for internal domains?
                                        2. In the case of Internet domains, how would you expect requests to be secured?

                                        Thanks!

                                      • designate set of name servers to all self hosted dns zones

                                        When maintaining DNS Records in Azure, you have to update registrars records to use name servers assigned to a domain. Now that those nameserver sets varies, it takes extra effort to create Records, specially if you have to do it manually.
                                        It would be easier if you could try and use same set of name servers to all dnz zones for the dns zones you are maintaining.

                                        19 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)

                                          Thanks for the suggestion. We are tracking this on our backlog.

                                          Some background: Azure DNS supports multiple name servers, which are dynamically assigned as zones are created. This allows us to let customers create zones without first proving that they own the domain name (since if we supported only a single name server set, we couldn’t allow just anyone to create a zone and thereby block the legitimate domain name owner). Domain proof-of-ownership checks are a significant hassle, so it’s important that we avoid them where possible.

                                          Having said all that, I do understand that in some scenarios having a consistent set of name server names is desirable, and we are considering options for how we might support this in future.

                                        • Azure DNS should not be listed as globally available

                                          According to

                                          https://azure.microsoft.com/en-us/regions/services/

                                          Azure DNS, as a service, is globally available. However, as stated by a Microsoft support engineer here

                                          https://social.msdn.microsoft.com/Forums/en-US/a26ca6e1-28a6-44f1-8807-6fdd6bdae66f/

                                          it isn't. The service availability chart should reflect this.

                                          3 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)

                                            Thank you for the feedback.

                                            The intent of the ‘global’ availability for Azure DNS is to indicate that is available as part of the Azure Public cloud, but not tied to any specific region. However, I appreciate that this can easily be misunderstood as meaning the service is available in Azure National Clouds, which it is not (as yet).

                                            I’ll share your feedback with the page owners.

                                          • Azure DNS Reporting

                                            I would like to see a simple view that shows me how many request I'm getting to each of my DNS zones hosted in Azure DNS, for the last 24 hours and the last month as an example. There would be so many benefits to this, one being the ability forecast growth patterns in traffic.

                                            24 votes
                                            Vote
                                            Sign in
                                            Check!
                                            (thinking…)
                                            Reset
                                            or sign in with
                                            • facebook
                                            • google
                                              Password icon
                                              I agree to the terms of service
                                              Signed in as (Sign out)
                                              You have left! (?) (thinking…)
                                            ← Previous 1 3
                                            • Don't see your idea?

                                            Feedback and Knowledge Base