Your VNet has 100 VMs that need to download updates from the internet. To prevent SNAT port exhaustion and ensure all VMs use a single, predictable public IP address for outbound traffic without exposing them to inbound internet traffic, what is the best solution?

Question

Sunny · Accepted Answer

Deploy an Azure NAT Gateway and attach it to the subnet. Azure NAT Gateway provides highly resilient, scalable outbound-only internet connectivity for one or more subnets. It uses a static public IP (or prefix) and dynamically allocates SNAT ports, completely mitigating SNAT port exhaustion issues common with default outbound access or Load Balancer outbound rules.

Your VNet has 100 VMs that need to download updates from the internet. To prevent SNAT port exhaustion and ensure all VMs use a single, predictable public IP address for outbound traffic without exposing them to inbound internet traffic, what is the best solution?

Your VNet has 100 VMs that need to download updates from the internet. To prevent SNAT port exhaustion and ensure all VMs use a single, predictable public IP address for outbound traffic without exposing them to inbound internet traffic, what is the best solution?

📚 What This Question Tests