How can we improve Azure Networking?

← Networking

Offer NAT as a Service

There is often the need to connect two or more networks with overlapping addresses over a VPN in regulated industries. The address spaces (often 10.0.0.0/8) can't be changed, however a DMZ subnet can be introduced in each network from the 172.16.0.0/12 address space. The DMZ subnets will not overlap between any network.

Just like the load balancer, make a NAT device a first class function citizen in virtual networking and allow us to define SNAT, DNAT or Full NAT. Feel free to require a dedicated subnet for the device.

Then make it easier for custom route rules to route traffic through this device.

This can be done today using Linux and iptables, but its cumbersome to maintain and patch.

271 votes
Vote
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
Werner Strydom shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

11 comments

Attach a File
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment

Networking: Virtual Network

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice