Azure Networking - #12 - Azure NAT Gateway

The playlist links in the show notes are broken.

Nice video.. I have a question. I am really trying hard to understand how to create a public and private subnet?? What makes a subnet public?? How can we say or identify a subnet as public or private?? Please answer..thnq

Great video. Thank you so much for this learning.

Hi Dean, have a question. We have an 8 servers deployment in our environment, and all that servers will be NAT’ed to Azure Firewall for Outbound traffic. However, all of our 8 servers also need to connect to SMTP server which is 3rd Party owned and need to whitelist our requested Public IP.

Do I need to request 8 Public IPs for each server and NAT it to the NAT-gateway IP for SMTP outbound traffic? or there’s a way I can route my servers Private IP to Azure firewall via SMTP port 25. Appreciate your great advice. Thanks

First of all thenk you so much for the video, it helped me a great deal!
I have a question, is an Application Gateway compatible with a NAT Gateway?

How can we control the outbound connectivity on NAT gateway? Lets say I want to allow only few destinations only. Can we add FW or NSG directly(I didn't see that option though) on an NAT gateway? Thanks

Thanks bro, I did this.

NAT Gateways are awesome , but unfortunately this doesent work with VNET Integrated Webapps , Webapps are a place where we run into SNAT issues a lot and NAT Gateways should be highly beneficial there ... Please pass over to someone at MS who can maybe evaluate this

Great Video. I have question, will this work with AppService? I created a VNet and NAT Gateway and did a VNet integration on AppService. But I still see the outbound IP is one of the possible outbound IPs of AppService and not the Public IP tied to NAT Gateway. Thanks In Advance

Probably a stupid question, bear with me, still learning, but could Azure NAT Gateway be used to translate the IP range for AWS to Azure site to site VPN connections if there are IPs overlapping? Quick example, I have SFTP in my Azure account and there other 3x 3rd party platforms in either AWS or Azure vendors' accounts that needs site-to-site VPN connection between their could and my cloud, could my Azure NAT manage the translation to avoid IP overlapping? Thank you

Nice explaination. Thanks for publishing.

Great video Dean. I have a WVD deployment and I want to whitelist the wvd servers from MFA. So want a single IP ideally. Can I apply this to a vnet of an existing wvd deployment ? I tried and got "cannot be deployed on subnet containing Basic SKU Public IP addresses or Basic SKU Load Balancer". I didn't want to start messing around in case it broke something 🤔

The nat ip is a public ip address. Do you plan to have the option to include private ip option? Instead of translating to an Pip, it will be nice if you can have the option translate to Private ip. It will help resolve the issue of overlapping ip addressess between subnets in vpn scenario where you don't want any public ip access to your vnet. Do you know any solution can resolve that issue?

That is really good explanation Dean, Thanks. I have question. Is this the way we use private subnets in Azure? i.e If I create private subnets, with all vms having private IP address than I will be using NAT gateway for private subnets so that those machines can use the internet? Also can do a video about public and private subnets in cloud and how to implement that in Azure? there is very less information about out there.

SNAT is source NAT, not secure NAT :)

Thank you Dean! please don't stop keep publishing your video so good to learn from you. PS: just the background music is a bit destructing, not a big deal but figured i share my feedback :)

Thanks for the video. I was wondering, how does this work with the Azure Firewall because in a way, if you have an Az FW associated through a route table to your subnet, you get the same SNAT benefit?

This is an awesome short turtorial to learn the new features of Azure. Thanks for your effort ,Dean! Keep going 👍