Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
570 questions
1 answer
One of the answers was accepted by the question author.
Where does Azure Firewall send TCP RST packets during Virtual Machine Scale Set scale in (scale down)?
Currently we have connection losses in our network, these seem to coincide with Azure Firewall VM instance shutdowns. Therefore I better want to understand what happens. In the Load Balancer TCP Reset and Idle Timeout documentation I read that it’s…
asked 2024-01-17T12:39:56.04+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 74%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGJ%3C/text%3E%3C/svg%3E)
Gun, JP van der (Joost) - Beheer
20
Reputation points
accepted 2024-01-26T14:49:10.6066667+00:00
Gun, JP van der (Joost) - Beheer
20
Reputation points
1 answer
One of the answers was accepted by the question author.
Why I need to create a rule for 443 for NSG to load balancer
I have a standard scenario. A pool of VMs with a https web server and Azure Load Balancer in front of it. Each VM network interface is attached to a network security group (NSG). Why is it necessary to add rule ‘100’ to allow a TCP health probe to…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 72%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
3 answers
One of the answers was accepted by the question author.
Deployment template validation failed: 'Circular dependency detected'
Hi my name 'is Ihsen, I'm facing a problem with an ARM template I downloaded after creating 21 resources in one resource group. I needed to duplicate those resources so I downloaded the template from automation in the resource group and tried to redeploy…
asked 2024-01-23T08:44:43.5866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 99%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIA%3C/text%3E%3C/svg%3E)
Ihsen Alaya
45
Reputation points
edited a comment 2024-01-24T17:37:34.79+00:00
Ihsen Alaya
45
Reputation points
1 answer
One of the answers was accepted by the question author.
Byte Count metrics clarification on private LB
Hello, I have setup a private Load Balancer with 1 backend server and only one LB rule. When checking the byte count metrics of it based on the direction, I notice high value for Out than In. I would like to understand how is this possible? when there…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 89%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
1 answer
How to do VNet peering's among the multiple S2S VPN connection?
Hi , There is multiple Site to site VPN Connection on-prem to Azure. As shown in attached image. I have some question related to this scenario. Please tell me the solution as soon as possible..
asked 2023-08-07T09:45:35.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 39%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKK%3C/text%3E%3C/svg%3E)
Khushboo Kumari
92
Reputation points
commented 2024-01-22T07:21:12.8933333+00:00
KapilAnanth-MSFT
35,246
Reputation points Microsoft Employee
0 answers
Azure Load Balancer Floating IP option - why do packets at backend guest show as translated?
Have a Azure public Load balancer with two public IP's as frontends with a two member backend pool - Palo Alto NVA firewalls. Those NVA's inspect and translate traffic to backend hosts on a subscriber virtual network. Recently this has stopped working,…
asked 2024-01-17T16:16:07.9433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 27%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECW%3C/text%3E%3C/svg%3E)
Chris Wynne
0
Reputation points
commented 2024-01-18T02:48:20.2+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
23,031
Reputation points Microsoft Employee
2 answers
Prevent SNAT port exhaustion in AKS standard load balancer?
Hello, We need to modify the outbound rule of standard load balancer(we cannot use NAT gateway). What is the best practices to set the values for TCP Idle timeout Choice between Maximum number of backend instance OR ports per instance 2nd once can…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 68%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 80%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E0%3C/text%3E%3C/svg%3E)
2 answers
Az Powershell add VMs to a backend pool
I have following script that works only if there is only one machine in the foreach loop. I can see at the backend pool at Azure portal that all machines are in backend pool but lb doesn't accept any connection. If I remove all from the backend pool…
1 answer
One of the answers was accepted by the question author.
Azure Container App without Load Balancer
Hi everyone. I have an application where only outbound connections are required. I have deployed Azure Container App with 5 microservices and it works fine for $2 per day. But I found today that I also pay for Load Balancer and Static Public IP and this…
asked 2024-01-13T17:00:41.9533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 35%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Andrei Abramov
20
Reputation points
commented 2024-01-14T11:21:13.1166667+00:00
Andrei Abramov
20
Reputation points
1 answer
One of the answers was accepted by the question author.
Loadbalancer alerts not rasing in Azure alerts portal
Hi Friends, I have issue in LB alerts, even if it reaches theredshold lilmt,still not getting any alerts.
asked 2024-01-12T06:31:20.6933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 97%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENG%3C/text%3E%3C/svg%3E)
Nagavardhan,Guntupalli
25
Reputation points
accepted 2024-01-12T07:25:15.1733333+00:00
Nagavardhan,Guntupalli
25
Reputation points
2 answers
HA coTURN stack setup or ACS in Azure
Hello, I have an Azure LB with 2 backend VMs configured with coTURN service, but ran into an issue because 2 clients of the WebRTC application is not connecting to the same backend for relaying the messages as the traffic gets load balanced. Is it…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 92%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
mTLS with Azure Load Balancer not working
Hello, I am unable to work with mTLS when using Azure Load Balancer. Here is my scenario: I have setup a VMSS with only one VM, which handles mTLS as part of application code inside the application running on the VM. When I try to reach the application…
asked 2023-12-28T07:48:04.7933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 73%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPV%3C/text%3E%3C/svg%3E)
Pujari, Vaibhav
20
Reputation points
accepted 2023-12-29T08:10:36.13+00:00
Pujari, Vaibhav
20
Reputation points
1 answer
How to add a load balancer on an azure container app
I'm trying to add a load balancer to a container app. So far, I've come across this documentation that adds an application gateway to a container app, and I followed it. I created a page on my container app that shows the current IP address, and I added…
asked 2023-12-12T07:58:08.7266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 0%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
lalin
0
Reputation points
commented 2023-12-27T21:53:56.74+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 87%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMU%3C/text%3E%3C/svg%3E)
Mike Urnun
9,676
Reputation points Microsoft Employee
1 answer
AKS public load balancer health probes and load balancing rules with a internal load balancer in use
Hello, I've noticed that when creating an aks cluster, with only a public LB, it automatically creates the health probes and LB rules for it, but when utilizing an internal load balancer, these same ones are created only for the internal LB, but not for…
asked 2023-12-19T13:22:44.4433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 32%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
Diego Sesoldi
0
Reputation points
commented 2023-12-26T05:12:05.51+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 74%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAN%3C/text%3E%3C/svg%3E)
Anveshreddy Nimmala
2,465
Reputation points Microsoft Vendor
2 answers
Does Azure Load balancer supports the FTPS (All TCP ports) traffic?
Azure load balancer has any limitations for FTPS traffic?
asked 2023-12-14T05:47:27.0866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 57.00000000000001%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPT%3C/text%3E%3C/svg%3E)
Prasuna Tanneru
0
Reputation points
commented 2023-12-21T09:42:29.13+00:00
KapilAnanth-MSFT
35,246
Reputation points Microsoft Employee
0 answers
Azure Network Security Group don't Apply to an Internal Load Balancer
I have an Azure Internal Load Balancer with frontend address connected to a subnet. I have a Azure Network Security Group that denies all inbound traffic to that subnet. But the traffic still flows. How do I restrict access to a load balancer from…
asked 2023-11-26T12:40:09.23+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 3%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
SplitKeyboard
0
Reputation points
commented 2023-12-14T12:25:18.1+00:00
GitaraniSharma-MSFT
47,591
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
connection reset by azure every 80k bytes received
hi everyone, there's something wrong with my azure cloud, i tried wget "http://20.163.57.161/v2/note/audio/get?id=ed35c33c38874a2a9337026fa50d53d9" -O 1234 and i got connection reset every 80k bytes received, and then i tried wget…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 79%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
2 answers
Is it possible to simulate Zone Outage?
Hi support, we implemented a zone redundant architecture: 1LB -> 2 SUBNETS -> 2 VM -> n Disks.. We would like to simulate zone outage, to test service resiliency How can we do that? Thank you Regards Davide Moroni
asked 2023-12-05T15:48:01.7733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 63%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDM%3C/text%3E%3C/svg%3E)
Davide Moroni
0
Reputation points
commented 2023-12-12T21:29:47.77+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 4%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
kobulloc-MSFT
23,496
Reputation points Microsoft Employee
1 answer
Uptime per proposed HA-Solution
Based on this article: https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/nva-ha#changing-pip-udr I was wondering if it wouldn't make sense to improve the documentation with the following information: I'm missing insights…
asked 2023-12-07T06:55:35.02+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 48%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
MENNEL Andreas
0
Reputation points
commented 2023-12-12T19:30:40.63+00:00
kobulloc-MSFT
23,496
Reputation points Microsoft Employee
1 answer
External Load Balancer - Single Point of Failure
Hello dear community, I have a question about the Azure External Load Balancer, I need to deploy two Foritgate Firewall in Active/Active mode which will be behind a External Load Balancer and I have fear that if the ELB goes down , then my network is…
asked 2023-12-05T09:01:17.5933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 82%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Ali Allafzadeh
0
Reputation points
commented 2023-12-11T09:49:03.68+00:00
GitaraniSharma-MSFT
47,591
Reputation points Microsoft Employee