You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this section, you'll create a NAT gateway for outbound internet access for resources in the virtual network.
100
-
101
-
1. In the search box at the top of the portal, enter **NAT gateway**. Select **NAT gateways** in the search results.
102
-
103
-
2. In **NAT gateways**, select **+ Create**.
104
-
105
-
3. In **Create network address translation (NAT) gateway**, enter or select the following information:
106
-
107
-
| Setting | Value |
108
-
| ------- | ----- |
109
-
|**Project details**||
110
-
| Subscription | Select your subscription. |
111
-
| Resource group | Select **CreateZonalLBTutorial-rg**. |
112
-
|**Instance details**||
113
-
| NAT gateway name | Enter **myNATgateway**. |
114
-
| Availability zone | Select **1**. |
115
-
| Idle timeout (minutes) | Enter **15**. |
116
-
117
-
4. Select the **Outbound IP** tab or select the **Next: Outbound IP** button at the bottom of the page.
118
-
119
-
5. In **Outbound IP**, for **Public IP addresses**, select **Create a new public IP address**.
120
-
121
-
6. On the **Add a public IP address** page, for **Name**, enter **myNATGatewayIP**.
122
-
123
-
7. Select **OK**.
124
-
125
-
8. Select the **Subnet** tab or select the **Next: Subnet** button at the bottom of the page.
126
-
127
-
9. On the **Subnet** page, for **Virtual network**, select **myVNet** from the dropdown.
128
-
129
-
10. For **Subnet name**, select **myBackendSubnet**.
130
-
131
-
11. Select the **Review + create** button at the bottom of the page, or select the **Review + create** tab.
132
-
133
-
12. Select **Create**.
134
-
135
-
## Create load balancer
136
-
137
-
In this section, you'll create a zonal load balancer that load balances virtual machines.
138
-
139
-
During the creation of the load balancer, you'll configure:
140
-
141
-
* Frontend IP address
142
-
* Backend pool
143
-
* Inbound load-balancing rules
144
-
145
-
1. In the search box at the top of the portal, enter **Load balancer**. Select **Load balancers** in the search results.
146
-
147
-
2. In the **Load balancer** page, select **Create**.
148
-
149
-
3. In the **Basics** tab of the **Create load balancer** page, enter or select the following information:
150
-
151
-
| Setting | Value |
152
-
| --- | --- |
153
-
|**Project details**||
154
-
| Subscription | Select your subscription. |
155
-
| Resource group | Select **CreateZonalLBTutorial-rg**. |
156
-
|**Instance details**||
157
-
| Name | Enter **myLoadBalancer**|
158
-
| Region | Select **(Europe) West Europe**. |
159
-
| SKU | Leave the default **Standard**. |
160
-
| Type | Select **Public**. |
161
-
| Tier | Leave the default **Regional**. |
162
-
163
-
4. Select **Next: Frontend IP configuration** at the bottom of the page.
164
-
165
-
5. In **Frontend IP configuration**, select **+ Add a frontend IP configuration**.
166
-
167
-
6. For **Name**, type **LoadBalancerFrontend**.
168
-
169
-
7. For **IP version**, select either **IPv4** or **IPv6**.
170
-
171
-
> [!NOTE]
172
-
> IPv6 isn't currently supported with Routing Preference or Cross-region load-balancing (Global Tier).
173
-
174
-
8. For **IP type**, select **IP address**.
175
-
176
-
> [!NOTE]
177
-
> For more information on IP prefixes, see [Azure Public IP address prefix](../virtual-network/ip-services/public-ip-address-prefix.md).
178
-
179
-
9. For **Public IP address**, select **Create new**.
180
-
181
-
10. On the **Add a public IP address** page, for **Name**, enter **myPublicIP**.
182
-
183
-
11. For **Availability zone**, select **1** from the dropdown, then click **OK** to close the **Add a public IP address** page.
184
-
185
-
> [!NOTE]
186
-
> In regions with [Availability Zones](../availability-zones/az-overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json#availability-zones), you have the option to select no-zone (default option), a specific zone, or zone-redundant. The choice will depend on your specific domain failure requirements. In regions without Availability Zones, this field won't appear. </br> For more information on availability zones, see [Availability zones overview](../availability-zones/az-overview.md).
187
-
188
-
12. If you see **Routing preference** settings, leave the default of **Microsoft Network** for **Routing preference**.
189
-
190
-
13. Select **OK**.
191
-
192
-
14. Select **Add**.
193
-
194
-
15. At the bottom of the page, select **Next: Backend pools**.
195
-
196
-
16. On the **Backend pools** page, select **+ Add a backend pool**.
197
-
198
-
17. On the **Add backend pool** page, for **Name**, type **myBackendPool**.
199
-
200
-
18. For **Virtual network**, select **myVNet** from the dropdown.
201
-
202
-
19. For **Backend Pool Configuration**, select either **NIC** or **IP Address**.
203
-
204
-
20. Select **Save**.
205
-
206
-
21. At the bottom of the page, select the **Next: Inbound rules** button.
207
-
208
-
22. On the **Inbound rules** page, for **Load balancing rule**, select **+ Add a load balancing rule**.
209
-
210
-
23. On the **Add load balancing rule** page, enter or select the following information:
211
-
212
-
| Setting | Value |
213
-
| ------- | ----- |
214
-
| Name | Enter **myHTTPRule**|
215
-
| IP Version | Select **IPv4** or **IPv6** depending on your requirements. |
216
-
| Frontend IP address | Select **LoadBalancerFrontend**. |
217
-
| Backend pool | Select **myBackendPool**. |
218
-
| Protocol | Select **TCP**. |
219
-
| Port | Enter **80**. |
220
-
| Backend port | Enter **80**. |
221
-
| Health probe | Select **Create new**. </br> In **Name**, enter **myHealthProbe**. </br> Select **HTTP** in **Protocol**. </br> Leave the rest of the defaults, and select **OK**. |
222
-
| Session persistence | Select **None**. |
223
-
| Idle timeout (minutes) | Enter or select **15**. |
224
-
| TCP reset | Select **Enabled**. |
225
-
| Floating IP | Select **Disabled**. |
226
-
| Outbound source network address translation (SNAT) | Leave the default of **(Recommended) Use outbound rules to provide backend pool members access to the internet.**|
227
-
228
-
24. Select **Add**.
229
-
230
-
25. At the bottom of the page, select the **Review + create** button.
231
-
232
-
26. Select **Create**.
233
-
234
-
> [!NOTE]
235
-
> In this example we created a NAT gateway to provide outbound Internet access. The outbound rules tab in the configuration is bypassed as it's optional isn't needed with the NAT gateway. For more information on Azure NAT gateway, see [What is Azure Virtual Network NAT?](../virtual-network/nat-gateway/nat-overview.md)
236
-
> For more information about outbound connections in Azure, see [Source Network Address Translation (SNAT) for outbound connections](../load-balancer/load-balancer-outbound-connections.md)
| Image | Select **Windows Server 2019 Datacenter - Gen1**|
@@ -272,35 +79,35 @@ These VMs are added to the backend pool of the load balancer that was created ea
272
79
| Setting | Value |
273
80
|-|-|
274
81
|**Network interface**||
275
-
| Virtual network |**myVNet**|
82
+
| Virtual network |**lb-vnet**|
276
83
| Subnet |**myBackendSubnet**|
277
84
| Public IP | Select **None**. |
278
85
| NIC network security group | Select **Advanced**|
279
-
| Configure network security group | Select **Create new**. </br> In the **Create network security group**, enter **myNSG** in **Name**. </br> Under **Inbound rules**, select **+Add an inbound rule**. </br> Under **Service**, select **HTTP**. </br> Under **Priority**, enter **100**. </br> In **Name**, enter **myNSGRule** </br> Select **Add** </br> Select **OK**|
86
+
| Configure network security group | Select **Create new**. </br> In the **Create network security group**, enter **lb-NSG** in **Name**. </br> Under **Inbound rules**, select **+Add an inbound rule**. </br> Under **Service**, select **HTTP**. </br> Under **Priority**, enter **100**. </br> In **Name**, enter **lb-NSG-Rule** </br> Select **Add** </br> Select **OK**|
280
87
|**Load balancing**|
281
88
| Place this virtual machine behind an existing load-balancing solution? | Select the check box. |
1. Select **All services** in the left-hand menu, select **All resources**, and then from the resources list, select **myVM1** that is located in the **CreateZonalLBTutorial-rg** resource group.
110
+
1. Select **All services** in the left-hand menu, select **All resources**, and then from the resources list, select **lb-VM1** that is located in the **load-balancer-rg** resource group.
304
111
305
112
2. On the **Overview** page, select **Connect**, then **Bastion**.
306
113
@@ -329,9 +136,9 @@ These VMs are added to the backend pool of the load balancer that was created ea
329
136
Add-Content -Path "C:\inetpub\wwwroot\iisstart.htm" -Value $("Hello World from " + $env:computername)
330
137
```
331
138
332
-
8. Close the Bastion session with **myVM1**.
139
+
8. Close the Bastion session with **lb-VM1**.
333
140
334
-
9. Repeat steps 1 to 8 to install IIS and the updated iisstart.htm file on **myVM2** and **myVM3**.
141
+
9. Repeat steps 1 to 8 to install IIS and the updated iisstart.htm file on **lb-VM2** and **lb-VM3**.
335
142
336
143
## Test the load balancer
337
144
@@ -345,7 +152,7 @@ These VMs are added to the backend pool of the load balancer that was created ea
345
152
346
153
## Clean up resources
347
154
348
-
When no longer needed, delete the resource group, load balancer, and all related resources. To do so, select the resource group **CreateZonalLBTutorial-rg** that contains the resources and then select **Delete**.
155
+
When no longer needed, delete the resource group, load balancer, and all related resources. To do so, select the resource group **load-balancer-rg** that contains the resources and then select **Delete**.
In this section, you'll create a NAT gateway for outbound internet access for resources in the virtual network. For other options for outbound rules, check out [Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections)
16
+
17
+
1. Sign in to the [Azure portal](https://portal.azure.com).
18
+
19
+
1. In the search box at the top of the portal, enter **NAT gateway**. Select **NAT gateways** in the search results.
20
+
21
+
1. Select **+ Create**.
22
+
23
+
1. In the **Basics** tab of **Create network address translation (NAT) gateway** enter or select the following information:
24
+
25
+
| Setting | Value |
26
+
| ------- | ----- |
27
+
|**Project details**||
28
+
| Subscription | Select your subscription. |
29
+
| Resource group | Select **Create new**. </br> Enter **load-balancer-rg** in Name. </br> Select **OK**. |
30
+
|**Instance details**||
31
+
| NAT gateway name | Enter **lb-nat-gateway**. |
32
+
| Region | Select **East US**. |
33
+
| Availability zone | Select **None**. |
34
+
| Idle timeout (minutes) | Enter **15**. |
35
+
36
+
:::image type="content" source="./media/load-balancer-internal-create-bastion-include/create-nat-gateway.png" alt-text="Screenshot of Create network address translation gateway window in the Azure portal.":::
37
+
38
+
1. Select the **Outbound IP** tab or select the **Next: Outbound IP** button at the bottom of the page.
39
+
40
+
1. Select **Create a new public IP address** under **Public IP addresses**.
41
+
42
+
1. Enter **nat-gw-public-ip** in **Name** in **Add a public IP address**.
43
+
44
+
1. Select **OK**.
45
+
46
+
1. Select the **Subnet** tab or select the **Next: Subnet** button at the bottom of the page.
47
+
48
+
1. On the **Subnet** page, for **Virtual network**, select **lb-vnet** from the dropdown.
49
+
50
+
1. For **Subnet name**, select **backend-subnet**.
51
+
52
+
1. Select the blue **Review + create** button at the bottom of the page, or select the **Review + create** tab.
Copy file name to clipboardExpand all lines: includes/load-balancer-nat-gateway.md
+3-5Lines changed: 3 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,11 +1,11 @@
1
1
---
2
2
title: include file
3
3
description: include file
4
-
services: virtual-network
4
+
services: load-balancer
5
5
author: mbender-ms
6
-
ms.service: virtual-network
6
+
ms.service: load-balancer
7
7
ms.topic: include
8
-
ms.date: 11/29/2023
8
+
ms.date: 12/05/2023
9
9
ms.author: mbender
10
10
ms.custom: include file
11
11
---
@@ -43,8 +43,6 @@ In this section, you'll create a NAT gateway for outbound internet access for re
43
43
44
44
1. Select **OK**.
45
45
46
-
:::image type="content" source="./media/load-balancer-internal-create-bastion-include/create-virtual-network-basics.png" alt-text="Screenshot of Add a public IP address window in the Azure portal":::
47
-
48
46
1. Select the blue **Review + create** button at the bottom of the page, or select the **Review + create** tab.
0 commit comments