Networking

The Networking forum covers all aspects of Networking in Azure, including endpoints, load-balancing, network security, DNS, Traffic Manager, virtual networks, and external connectivity.

Virtual Network:

  • Service overview

  • Technical documentation

  • Pricing details
  • Traffic Manager:

  • Service overview

  • Technical documentation

  • Pricing details
  • Network Watcher:

  • Service overview

  • Technical documentation

  • Pricing details
  • If you have any feedback on any aspect of Azure relating to Networking, we’d love to hear it.

    How can we improve Azure Networking?

    You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

    There are two ways to get more votes:

    • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
    • You can remove your votes from an open idea you support.
    • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
    (thinking…)

    Enter your idea and we'll search to see if someone has already suggested it.

    If a similar idea already exists, you can support and comment on it.

    If it doesn't exist, you can post your idea so others can support it.

    Enter your idea and we'll search to see if someone has already suggested it.

    • Hot ideas
    • Top ideas
    • New ideas
    • My feedback
    1. Allow changing Billing Model for ExpressRoute from Unlimited to Metered with no downtime

      Currently you can change an ExpressRoute from Metered to Unlimited at any time without any disruption.

      You should also have the ability to go from Unlimited to Metered at any time without any disruption.

      1 vote
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  ExpressRoute  ·  Flag idea as inappropriate…  ·  Admin →
      • Add more metrics to better analyse capacity, firewall violations, etc

        Analysis via Log Analytics is useful, but it'd be nice to have some predefined reports or "blades" in Azure Portal to analyse events, throughput, capacity/utilization.

        3 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Application Gateway  ·  Flag idea as inappropriate…  ·  Admin →
        • Allow HTTP Settings, Listeners, Pools and Probes to be deleted via the Azure Portal

          Simple changes to the App Gateway configuration must be done via Powershell. For some reason Delete is only allowed on Rules (and this seems to leave orphan URLPathMaps behind?)

          Bring the Azure Portal in-line with the backend configuration.

          3 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Application Gateway  ·  Flag idea as inappropriate…  ·  Admin →
          • Losing a STATIC Azure RM Public IP when deallocating.. No difference between DHCP and Static Pub IP and stop/start (deallocate/reallocate)

            When Stopping and de-allocating a VM Say to re-bind or de-bind NSG rules, it would be helpful for a VM to retain its Publicly assigned STATIC IP (Isn't that what static means? :) ) when it powers back up. Dynamic IPs will be lost, which is understandable. Why are STATIC lost upon de-allocation?

            1 vote
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Flag idea as inappropriate…  ·  Admin →
            • fail over active session from unhealthy to healthty nodes

              In the context of HA ports, we want to use it to loadbalance traffic through a state-synchronized cluster of firewalls. But today the LB itself does not fail over active TCP sessions. This makes state-synchronization on the firewall side useless, and results in hanging TCP sessions when a node fails.

              1 vote
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Load Balancing  ·  Flag idea as inappropriate…  ·  Admin →
              • There is no customer facing option in Azure to view the gateway statistics.

                Please add a way to gather report on usage stats on Azure VPN like peak throughput MB/s, Average throughput etc from the console.

                Helps us as we dont have to raise support case every time to check performance when there is an issue

                1 vote
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                • We need to update the Local Network Gateway on the the fly by adding adding adresses, we cant bring a production tunnel down

                  Dear azure, please revert back, we add many IP's to the Local Network Gateway, we cant bring our VPN Tunnel down, this is production

                  1 vote
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                  • Zero Downtime Deploys with Azure Load Balancer

                    Currently, Azure Load Balancer does not support any way to programatically mark a node unhealthy or otherwise remove it from the pool temporarily during maintenance. Meaning you have to accept errors to your end users while deploying. It'd be great to either allow a request from the node, or a secondary health check to mark a node as unhealthy without it actually sending errors back to the user.

                    2 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Load Balancing  ·  Flag idea as inappropriate…  ·  Admin →
                    • GetBestNeigbhors for a given Source Azure Region

                      GetBestNeighbors
                      Input :
                      AzureRegion SourceRegion : Source region , Frame of Reference
                      AzureRegion[] Regions : List of regions which needs to be reached from Source Region

                      Output : Ordered list of azure regions “best” reachable from SourceRegion

                      Alternatively , Simpler version

                      GetBestNeighbors
                      Input :
                      AzureRegion SourceRegion : Source region

                      Output : Ordered list of all available azure regions “best” reachable from SourceRegion

                      Alternatively ,Even more simpler version

                      GetBestNeighbors
                      Input :

                      Output : Ordered list of all available azure regions “best” reachable from SourceRegion. This must be same as it would have been called from Source region as above.

                      2 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Network Watcher  ·  Flag idea as inappropriate…  ·  Admin →
                      • HA Ports for Standard load balancers with Public IP

                        Current review of HA ports only supports Internal LB without any public IP attached. The majority of NVA deployments are with Public IP attached to the LB.

                        7 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Load Balancing  ·  Flag idea as inappropriate…  ·  Admin →
                        • Binding same IP Address to mulitiple VM

                          I love using your feature load balancer but, our product deployed on multiple VM for redundancy need to share IP address across the VM. Could we have option to bind IP to multiple VM?

                          1 vote
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                          • Route Tables attached to NIC

                            I love using Route tables attached to the Subnet under the Virtual Network, could we have Route table attached to NIC as well ?

                            1 vote
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Virtual Networks (VNET)  ·  Flag idea as inappropriate…  ·  Admin →
                            • update DNS settings for VNET without restart of the VMs to take effect

                              Current when we try to update the DNS settings in the VNET or NIC, it required the VMs to be restarted to take effect. But when there are a large amount of VMs under the VNET, it would be a hard work to do so.
                              If this process could be simplify so that the restarted of VM will be no longer required, it would be a good news.

                              12 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                1 comment  ·  Virtual Networks (VNET)  ·  Flag idea as inappropriate…  ·  Admin →
                              • Enable network acceleration process is way too slow....

                                It has been almost two weeks since I request for network acceleration and it is still not enabled. The worst thing is the PoC helping me on this issue disappear totally, no response at all for all my emails requesting status update.

                                1 vote
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                • NPS Extension for Azure MFA (IP Whitelist)

                                  Can you also add in a feature whereby it allow us to add in a range of subnet instead of a single IP address in the IP Whitelist (NPS Extension for Azure MFA)?

                                  3 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Other  ·  Flag idea as inappropriate…  ·  Admin →
                                  • implement Service tags for UDR/Route

                                    Can be good when we create a Route/UDR to have the possibility to select in "Next Hop Type" a service Tag, or Azure Region IP range.

                                    12 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                                    • P2S IP address leasing

                                      Currently our P2S model uses a predefined address space, and then VPN clients are assigned an address out of that pool.

                                      This is pretty standard.

                                      What I would like to see is an option to apply lease times to those IP addresses, the same way DHCP normally functions. The reason being most of our VPN connectors are cellular dial-in clients, and they suffer brief disconnects.

                                      Each time they disconnect and reconnect they receive a new IP address, and we have a service running that then has to re-establish where the client's listener port is, and do a bunch of housekeeping…

                                      1 vote
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                      • Increase Url query size for Application Gateway

                                        The size of Url for Application Gateway is 8k. But the size of Url query (as a part of Url) is only 2k.
                                        It will be great if there are no limits for query size in Url.

                                        1 vote
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Application Gateway  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Internal vNet endpoints for SQL Databases and Storage Devices to allow private accessible only via Expressroute Gateway

                                          To justify using Expressroute to "securely" extend the corporate LAN/WAN infrastructure to the cloud.

                                          Create Internal vNet Endpoints for SQL Databases and Storage Devices to allow private accessible only via Expressroute Gateway.

                                          Needed to secure sensitive PII, HIPAA, and Company Confidential Databases and storage devices

                                          1 vote
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Add option to connect or disconnect vpn

                                            In ASM model, we have an option to connect or disconnect an vpn connection. Now in arm model if we need to disconnect a vpn we need to delete the connection and if we need to connect the vpn we need tonrecreate thw connection

                                            28 votes
                                            Vote
                                            Sign in
                                            Check!
                                            (thinking…)
                                            Reset
                                            or sign in with
                                            • facebook
                                            • google
                                              Password icon
                                              I agree to the terms of service
                                              Signed in as (Sign out)
                                              You have left! (?) (thinking…)
                                            ← Previous 1 3 4 5 13 14
                                            • Don't see your idea?

                                            Feedback and Knowledge Base