Connecting to Azure VNet + Azure NAT

SA0015 20 Reputation points
2024-01-10T20:32:07.72+00:00

Hi, I am relatively new to Azure and I have the following use-case.

I have an AKS cluster and a VM running in an Azure Virtual Network. I wish that all outbound traffic from Azure Virtual Network use a static IPv4 address. I think I can accomplish this with an Azure NAT Gateway. I need to access certain other applications running within another Cloud Environment. However these can only be accessed via IPv4 whitelisting. Thus, I need to have my static IPv4 address from my NAT whitelisted to access these from Azure. However, I both want to access these external applications and their APIs via my AKS cluster and a VM or VPN running in my Azure Virtual Network. Such that I can pivot via the Azure Virtual Network and then access the applications (through HTTPS) via the whitelisted IP from my NAT gateway. AKS cluster application uses the external applications API's, while I want to access the external applications via a browser, either via VPN or a VM.

How would I best setup my infrastructure on Azure for this setup? Thank you.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,255 questions
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,401 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,197 questions
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
24 questions
0 comments No comments
{count} votes

Accepted answer
  1. Silvia Wibowo 3,166 Reputation points Microsoft Employee
    2024-01-11T03:11:53+00:00

    Hi @SA0015 , I understand that you want to use a fixed IPv4 address for your outbound traffic from both AKS and Azure VMs.

    You can use NAT Gateway. You need to create NAT Gateway before creating your AKS cluster. Then setup your AKS cluster to use Outbound Type = userAssignedNatGateway.

    For more information, see Create an AKS cluster with a user-assigned NAT gateway.

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

    0 comments No comments

0 additional answers

Sort by: Most helpful