More public IPs on Azure Firewall
At the moment you only have the possibility to have 1 public IP on Azure Firewall. When this IP is used for ex. access to AD FS WAP behind Azure Firewall, then you are not able to host other services on port 443/tcp behind Azure Firewall that needs to be accessible from the Internet.
Please provide the option to add additional public IPs to Azure Firewall.
Chris Pressland commented
It looks like Azure firewall now supports this: https://docs.microsoft.com/en-us/azure/firewall/deploy-multi-public-ip-powershell
However, it doesn't look like a complete implementation. Can somebody confirm if we're able to tie specific subnets/devices to spoke VNets to specific Public IPs? Example, if we have three public IPs, one for dev, one for staging and one for production we'd want a SNAT/DNAT each of these to one of these IPs - the documentation seems to suggest that it'd instead round-robin load balance outbound connections.
@Richard - I had a recent support case in which the engineer mentioned that this was still on the roadmap for summer 2019. As always, I was encouraged to participate in the social channels to upvote the feature.
I'd like to be able to use multiple public IP addresses on a client's AzFW and I find the lack of communication about this feature a bit disheartening considering AzFW's cost. I also asked that they list this as a limitation in their "limitations" documentation. It is surprisingly absent.
Hello Networking team. Is this feature still on the roadmap for H1 2019?
Any further ETA you can provide?
@AzureNetworkingTeam I would like to volunteer of/when there is a Public Preview available for multiple public IPs on Azure Firewall. Thank you!
Hello, Azure Networking Team. It's now 2019 and I do not see any mention of additional public IP addresses on Azure Firewall. Any update you can provide?
Raghavendra Hegde commented
This is very key feature requirement when we deploy Azure firewall in Hub and spoke model with multiple application to be exposed to the internet through Azure firewall.
Thanks for the feedback. This feature is high on our list - tentatively for H1 2019.