You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-network/ip-services/public-ip-address-prefix.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ description: Learn about what an Azure public IP address prefix is and how it ca
5
5
services: virtual-network
6
6
author: mbender-ms
7
7
ms.author: mbender
8
-
ms.date: 08/24/2023
8
+
ms.date: 01/08/2025
9
9
ms.service: azure-virtual-network
10
10
ms.subservice: ip-services
11
11
ms.topic: concept-article
@@ -14,7 +14,7 @@ ms.topic: concept-article
14
14
# Public IP address prefix
15
15
16
16
A public IP address prefix is a reserved range of [public IP addresses](public-ip-addresses.md#public-ip-addresses) in Azure. Public IP prefixes are assigned from a pool of addresses in each Azure region.
17
-
You create a public IP address prefix in an Azure region and subscription by specifying a name and prefix size. The prefix size is the number of addresses available for use. Public IP address prefixes consist of IPv4 or IPv6 addresses. In regions with Availability Zones, Public IP address prefixes can be created as zone-redundant or associated with a specific availability zone. After the public IP prefix is created, you can create public IP addresses.
17
+
You create a public IP address prefix in an Azure region and subscription by specifying a name and prefix size. The prefix size is the number of addresses available for use. Public IP address prefixes consist of IPv4 or IPv6 addresses. In regions with Availability Zones, Public IP address prefixes can be created as zone-redundant or associated with a specific availability zone. After the public IP prefix is created, you can create public IP addresses.
18
18
19
19
## Benefits
20
20
@@ -39,7 +39,7 @@ The following public IP prefix sizes are available:
39
39
Prefix size is specified as a Classless Inter-Domain Routing (CIDR) mask size.
40
40
41
41
>[!NOTE]
42
-
>If you are[deriving a Public IP Prefix from a Custom IP Prefix (BYOIP range)](manage-custom-ip-address-prefix.md#create-a-public-ip-prefix-from-a-custom-ip-prefix), the prefix size can be as large as the Custom IP Prefix.
42
+
>If you're[deriving a Public IP Prefix from a Custom IP Prefix (BYOIP range)](manage-custom-ip-address-prefix.md#create-a-public-ip-prefix-from-a-custom-ip-prefix), the prefix size can be as large as the Custom IP Prefix.
43
43
44
44
There aren't limits as to how many prefixes created in a subscription. The number of ranges created can't exceed more static public IP addresses than allowed in your subscription. For more information, see [Azure limits](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#azure-resource-manager-virtual-networking-limits).
45
45
@@ -48,24 +48,24 @@ You can associate the following resources to a static public IP address from a p
48
48
49
49
|Resource|Scenario|Steps|
50
50
|---|---|---|
51
-
|Virtual machines| Associating public IPs from a prefix to your virtual machines in Azure reduces management overhead when adding IP addresses to an allowlist in the firewall. You can add an entire prefix with a single firewall rule. As you scale with virtual machines in Azure, you can associate IPs from the same prefix saving cost, time, and management overhead.| To associate IPs from a prefix to your virtual machine:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. [Associate the IP to your virtual machine's network interface.](./virtual-network-network-interface-addresses.md#add-ip-addresses)</br> You can also [associate the IPs to a Virtual Machine Scale Set](https://azure.microsoft.com/resources/templates/vmss-with-public-ip-prefix/).
52
-
| Standard load balancers | Associating public IPs from a prefix to your frontend IP configuration or outbound rule of a load balancer ensures simplification of your Azure public IP address space. Simplify your scenario by grooming outbound connections from a range of contiguous IP addresses. | To associate IPs from a prefix to your load balancer:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. When creating the load balancer, select or update the IP created in step 2 above as the frontend IP of your load balancer. |
53
-
| Azure Firewall | You can use a public IP from a prefix for outbound SNAT. All outbound virtual network traffic is translated to the [Azure Firewall](../../firewall/overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json) public IP. | To associate an IP from a prefix to your firewall:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. When you [deploy the Azure firewall](../../firewall/tutorial-firewall-deploy-portal.md?toc=%2fazure%2fvirtual-network%2ftoc.json#create-a-virtual-network), be sure to select the IP you previously gave from the prefix.|
54
-
| VPN Gateway (AZ SKU), Application Gateway v2, NAT Gateway | You can use a public IP from a prefix for your gateway | To associate an IP from a prefix to your gateway:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. When you deploy the [VPN Gateway](../../vpn-gateway/tutorial-create-gateway-portal.md), [Application Gateway](../../application-gateway/quick-create-portal.md#create-an-application-gateway), or [NAT Gateway](../nat-gateway/quickstart-create-nat-gateway-portal.md), be sure to select the IP you previously gave from the prefix.|
51
+
|Virtual machines| Associating public IPs from a prefix to your virtual machines in Azure reduces management overhead when adding IP addresses to an allowlist in the firewall. You can add an entire prefix with a single firewall rule. As you scale with virtual machines in Azure, you can associate IPs from the same prefix saving cost, time, and management overhead.| To associate IPs from a prefix to your virtual machine:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. [Associate the IP to your virtual machine's network interface.](./virtual-network-network-interface-addresses.md#add-ip-addresses)</br> You can also [associate the IPs to a Virtual Machine Scale Set](https://azure.microsoft.com/resources/templates/vmss-with-public-ip-prefix/).
52
+
| Standard load balancers | Associating public IPs from a prefix to your frontend IP configuration or outbound rule of a load balancer ensures simplification of your Azure public IP address space. Simplify your scenario by grooming outbound connections from a range of contiguous IP addresses. | To associate IPs from a prefix to your load balancer:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. When creating the load balancer, select or update the IP created in step 2 above as the frontend IP of your load balancer. |
53
+
| Azure Firewall | You can use a public IP from a prefix for outbound SNAT. All outbound virtual network traffic is translated to the [Azure Firewall](../../firewall/overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json) public IP. | To associate an IP from a prefix to your firewall:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. When you [deploy the Azure firewall](../../firewall/tutorial-firewall-deploy-portal.md?toc=%2fazure%2fvirtual-network%2ftoc.json#create-a-virtual-network), be sure to select the IP you previously gave from the prefix.|
54
+
| VPN Gateway (AZ SKU), Application Gateway v2, NAT Gateway | You can use a public IP from a prefix for your gateway | To associate an IP from a prefix to your gateway:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. [Create an IP from the prefix.](manage-public-ip-address-prefix.md)</br> 3. When you deploy the [VPN Gateway](../../vpn-gateway/tutorial-create-gateway-portal.md), [Application Gateway](../../application-gateway/quick-create-portal.md#create-an-application-gateway), or [NAT Gateway](../nat-gateway/quickstart-create-nat-gateway-portal.md), be sure to select the IP you previously gave from the prefix.|
55
55
56
56
The following resources utilize a public IP address prefix:
57
57
58
58
Resource|Scenario|Steps|
59
59
|---|---|---|
60
60
|Virtual Machine Scale Sets | You can use a public IP address prefix to generate instance-level IPs in a Virtual Machine Scale Set. Individual public IP resources aren't created. | Use a [template](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.compute/vmss-with-public-ip-prefix) with instructions to use this prefix for public IP configuration as part of the scale set creation. (Zonal properties of the prefix are passed to the instance IPs and aren't shown in the output. For more information, see [Networking for Virtual Machine Scale Sets](/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking#public-ipv4-per-virtual-machine)) |
61
-
| Standard load balancers | A public IP address prefix can be used to scale a load balancer by [using all IPs in the range for outbound connections](../../load-balancer/outbound-rules.md#scale). Note that the prefix cannot be used for inbound connections, only outbound. | To associate a prefix to your load balancer:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. When creating the load balancer, select the IP prefix as associated with the frontend of your load balancer. |
62
-
| NAT Gateway | A public IP prefix can be used to scale a NAT gateway by using the public IPs in the prefix for outbound connections. | To associate a prefix to your NAT Gateway:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. When creating the NAT Gateway, select the IP prefix as the Outbound IP. (A NAT Gateway can have no more than 16 IPs in total. A public IP prefix of /28 length is the maximum size that can be used.) |
61
+
| Standard load balancers | A public IP address prefix can be used to scale a load balancer by [using all IPs in the range for outbound connections](../../load-balancer/outbound-rules.md#scale). Note that the prefix can't be used for inbound connections, only outbound. | To associate a prefix to your load balancer:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. When creating the load balancer, select the IP prefix as associated with the frontend of your load balancer. |
62
+
| NAT Gateway | A public IP prefix can be used to scale a NAT gateway by using the public IPs in the prefix for outbound connections. | To associate a prefix to your NAT Gateway:</br> 1. [Create a prefix.](manage-public-ip-address-prefix.md)</br> 2. When creating the NAT Gateway, select the IP prefix as the Outbound IP. (A NAT Gateway can have no more than 16 IPs in total. A public IP prefix of /28 length is the maximum size that can be used.) |
63
63
64
64
## Limitations
65
65
66
-
- You can't specify the set of IP addresses for the prefix (though you can [specify which IP you want from the prefix](manage-public-ip-address-prefix.md#create-a-static-public-ip-address-from-a-prefix)). Azure gives the IP addresses for the prefix, based on the size that you specify. Additionally, all public IP addresses created from the prefix must exist in the same Azure region and subscription as the prefix. Addresses must be assigned to resources in the same region and subscription.
66
+
- You can't specify the set of IP addresses for the prefix (though you can [specify which IP you want from the prefix](manage-public-ip-address-prefix.md#create-a-static-public-ip-address-from-a-prefix)). Azure gives the IP addresses for the prefix, based on the size that you specify. Additionally, all public IP addresses created from the prefix must exist in the same Azure region and subscription as the prefix. Addresses must be assigned to resources in the same region and subscription.
67
67
68
-
- You can create a prefix of up to 16 IP addresses for Microsoft owned prefixes. Review [Network limits increase requests](/azure/azure-portal/supportability/networking-quota-requests) and [Azure limits](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#azure-resource-manager-virtual-networking-limits) for more information if larger prefixes are required. Also note there is no limit on the number of Public IP Prefixes per region, but the overall number of Public IP addresses per region is limited (each public IP prefix consumes that number of IPs from the public IP address quota for that region).
68
+
- You can create a prefix of up to 16 IP addresses for Microsoft owned prefixes. Review [Network limits increase requests](/azure/azure-portal/supportability/networking-quota-requests) and [Azure limits](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#azure-resource-manager-virtual-networking-limits) for more information if larger prefixes are required. Also note there's no limit on the number of Public IP Prefixes per region, but the overall number of Public IP addresses per region is limited (each public IP prefix consumes that number of IPs from the public IP address quota for that region).
69
69
70
70
- The size of the range can't be modified after the prefix has been created.
# Migrate a classic reserved IP address to a public IP address
15
15
16
-
To benefit from the new capabilities in Azure Resource Manager, you can migrate existing public static IP address, reserved IPs, from the classic deployment model to Azure Resource Manager. The migrated public IP will be a basic SKU type.
16
+
To benefit from the new capabilities in Azure Resource Manager, you can migrate existing public static IP address, reserved IPs, from the classic deployment model to Azure Resource Manager. The migrated public IP is a basic SKU type.
17
17
18
-
In this article, you'll learn how to upgrade a classic reserved IP to a basic public IP address.
18
+
In this article, you learn how to upgrade a classic reserved IP to a basic public IP address.
19
19
20
20
## Prerequisites
21
21
22
-
* An Azure account with an active subscription. [Create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
23
-
* Your Azure subscription registered for migration. For more information, see [Migrate to Resource Manager with PowerShell](/azure/virtual-machines/migration-classic-resource-manager-ps).
24
-
* A classic deployment model reserved IP address.
25
-
* Azure PowerShell Service Management module installed for PowerShell. For more information, see [Installing the Azure PowerShell Service Management module](/powershell/azure/servicemanagement/install-azure-ps).
26
-
* Azure classic CLI installed for Azure CLI instructions. For more information, see [Install the Azure classic CLI](/cli/azure/install-classic-cli).
22
+
- An Azure account with an active subscription. [Create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
23
+
- Your Azure subscription registered for migration. For more information, see [Migrate to Resource Manager with PowerShell](/azure/virtual-machines/migration-classic-resource-manager-ps).
24
+
- A classic deployment model reserved IP address.
25
+
- Azure PowerShell Service Management module installed for PowerShell. For more information, see [Installing the Azure PowerShell Service Management module](/powershell/azure/servicemanagement/install-azure-ps).
26
+
- Azure classic CLI installed for Azure CLI instructions. For more information, see [Install the Azure classic CLI](/cli/azure/install-classic-cli).
27
27
28
28
## Azure PowerShell Service Management module
29
29
30
-
In this section, you'll use the Azure PowerShell Service Management module to migrate a classic reserved IP to an Azure Resource Manager static public IP.
30
+
In this section, you use the Azure PowerShell Service Management module to migrate a classic reserved IP to an Azure Resource Manager static public IP.
31
31
32
32
> [!NOTE]
33
33
> The reserved IP must be removed from any cloud service that the IP address is associated to.
@@ -48,7 +48,7 @@ A new resource group in Azure Resource Manager is created using the name of the
48
48
49
49
## Azure classic CLI
50
50
51
-
In this section, you'll use the Azure classic CLI to migrate a classic reserved IP to an Azure Resource Manager static public IP.
51
+
In this section, you use the Azure classic CLI to migrate a classic reserved IP to an Azure Resource Manager static public IP.
52
52
53
53
> [!NOTE]
54
54
> The reserved IP must be removed from any cloud service that the IP address is associated to.
@@ -67,7 +67,6 @@ A new resource group in Azure Resource Manager is created using the name of the
67
67
68
68
## Next steps
69
69
70
-
71
70
For more information on public IP addresses in Azure, see:
72
71
73
72
-[Public IP addresses in Azure](public-ip-addresses.md)
0 commit comments