Networking

The Networking forum covers all aspects of Networking in Azure, including endpoints, load-balancing, network security, DNS, Traffic Manager, virtual networks, and external connectivity.

Virtual Network:

  • Service overview

  • Technical documentation

  • Pricing details
  • Traffic Manager:

  • Service overview

  • Technical documentation

  • Pricing details
  • Network Watcher:

  • Service overview

  • Technical documentation

  • Pricing details
  • If you have any feedback on any aspect of Azure relating to Networking, we’d love to hear it.

    How can we improve Azure Networking?

    You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

    There are two ways to get more votes:

    • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
    • You can remove your votes from an open idea you support.
    • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
    (thinking…)

    Enter your idea and we'll search to see if someone has already suggested it.

    If a similar idea already exists, you can support and comment on it.

    If it doesn't exist, you can post your idea so others can support it.

    Enter your idea and we'll search to see if someone has already suggested it.

    • Hot ideas
    • Top ideas
    • New ideas
    • My feedback
    1. Change existing Public IP SKU from Basic to Standard

      We have already setup our business in Azure and utilize Public IPs in our infrastructure that are used by many different clients. With the release of Standard SKU Load Balancer and the requirement for Standard SKU Public IPs, we cannot proceed to upgrade our setup. A change in IPs would mean weeks or even months in planning/communication and reconfiguration of firewalls,VPNs,application restrictions.

      458 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      under review  ·  25 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    2. Block out access to azure resources from outside

      I am looking for a way to completely block out access to azure resources from outside of Japan. An access from abroad is most likely from a person who are not from our company.

      Recently, I am terribly worried because there are a lot of illegal access from the outside country. It's very reassuring to have the ability to shut off foreign access in Azure. This scenario is difficult to achieve because the NSG feature has a limit in a number of IP addresses which can be restricted.

      44 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    3. Provide a rest api to access the list of Azure IP Addresses

      Please provide an api that will us to gather the full list of azure ip addresses, the ones added in the last week, and the ones deleted in the last week. This would be used to automate the weekly changes we need to make to accommodate these changes.

      38 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      5 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    4. Manage allowed IP addresses - show and allow to add current IP address with one click (like in the old portal)

      Now you have to know your current IP address and enter it manually to allow access to SQL - means you need to find out your ip first.

      In the old portal you have the option to add your current IP address with one click (see attached screenshot).

      I would love it if you bring this feature to the new portal.

      32 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      under review  ·  0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    5. NSG logs should show the IP address and port of the client on inbound traffic

      It shows the rule that blocked the request but doesn't show any details around the person trying to hit your resource.

      It shows the IP address of the Azure resource that they were trying to hit as well.

      It would be nice to see how much blocked traffic we're getting from a specific client for troubleshooting or for ensuring we don't have anyone trying to breach the network on that endpoint.

      7 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    6. IP Location

      Some services (API) is available in some countries in the world,
      we need to choose the country of the IP address for the virtual machine, website ...

      6 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      2 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →

      Thanks for the suggestion. If you are referring to the scenario where the IP address you’re assigned be recognized as reflecting the actual location of your deployment, then please be aware we have a project underway to improve our reporting to the major geo-location service providers.

    7. Add Azure and AWS IP ranges to easily restrict traffic without using Powershell

      Currently adding Azure or AWS IP addresses need to be done by Powershell commands and also need to be updated every time an IP Address change. People need this to be easily configurable

      4 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    8. Private IP displays in dashboard.

      It would great if private IP displays in dashboard/first pages, instead of multiple click to see the private IP address.

      4 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    9. Add a feature that gives you an static IP regardless of what server you attach to it.

      Add a feature that gives you an static IP regardless of what server you attach to it. That wat, if you have to migrate your server you keep your IP Address.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    10. APIM as Service

      hi team,

      would like to have IPAM as service: it would be nice to be able to create an "Azure IP range" and then request IP ranges for new vNets from it, perform inventory etc.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    11. Provide an IP and URL address service, like Office 365, to replace the XML download process.

      Provide an IP and URL address service like Office 365 to replace the XML download process for Azure Datacenter IP address ranges.

      For example - Office 365 Link: https://docs.microsoft.com/en-us/office365/enterprise/office-365-ip-web-service

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      2 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    12. Change idle timeout shorter than 4 minutes.

      We can use TCP idle timeout 4 minutes which is minimum value. My App must configure shorter than 4 minutes. E,g 5sec, 10sec. I strong hope we can change its value configure shorter than 4 minutes.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    13. I really HATE that Azure can not handle virtual IP addresses. Azure broke our application.

      In line with another post that I voted for.

      I have been working with clustered environments in Linux for many years.

      Our application is capable of controlling the failover of a virtual IP address, to the active node in an Active / Passive cluster.

      But, the Azure cloud is not capable of assigning an IP address, without being tied to a MAC address.

      Our application is now broken!

      You need to allow the assignment of virtual IP addresses for clustered environment, active node failover.

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    14. Allow configure Azure Endpoint (App/Cloud Service) and External Endpoint (AP/F5 SLB VIP) in the same ATM profile

      We’ve a service currently running in AutoPilot environment and it’s DNS endpoint is configured behind AP SLB VIP. We deployed and configured same service in Azure, and now we want to rout the traffic from “AP SLB VIP” to “App Service” running under mentioned Azure subscription.

      I’ve created a ATM profile and Service DNS endpoint is now CNAME-ed to this ATM profile. Currently, this ATM profile is configured with AP SLB VIP underneath as “External Endpoint”. In order to execute traffic transition from AP SLB VIP to App Service, I need to configure the “App service” as a secondary endpoint…

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    15. IP report(Risky IP) and User Report(Bad Password Attempts) from the Azure should be merged into one report. Find a user from which IP cannot

      IP report(Risky IP) and User Report(Bad Password Attempts) from the Azure should be merged into one report. Finding a user from which IP cannot directly

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    16. Need a 1 to 1 mapping between data centers and the IP range list

      Trying to use Azure Backup to German Northeast and North Central US.

      Would be nice if there was a one to one mapping between the regions displayed here: https://azure.microsoft.com/en-ca/global-infrastructure/regions/

      and what is listed here: https://www.microsoft.com/en-us/download/details.aspx?id=41653

      Having problems guessing which region to use for the for following locations:

      German Northeast - options:

      <Region Name="europeeast">

      <Region Name="europenorth2">

      <Region Name="europenorth">

      North Central US: options:

      <Region Name="uscentraleuap">

      <Region Name="uscentral">

      <Region Name="usnorth">

      <Region Name="uswestcentral">

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    17. Using portal

      When using the portal to create reserved IPs the name gets prepended with "Group <groupname> <reserved ip name>". Then, when it's displayed it only shows what was entered, so it's very deceiving. If you use powershell to view your list of reserved IPs you can see the actual name and it's usable.

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: oidc
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  IP addresses  ·  Flag idea as inappropriate…  ·  Admin →
    • Don't see your idea?

    Feedback and Knowledge Base