Skip to content

Commit 4a5be71

Browse files
authored
Merge pull request #218665 from asudbring/ip-concepts-freshness
Freshness update to public IP address conceptual information article
2 parents 40098a4 + cf39b38 commit 4a5be71

File tree

1 file changed

+56
-22
lines changed

1 file changed

+56
-22
lines changed

articles/virtual-network/ip-services/public-ip-addresses.md

Lines changed: 56 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -7,40 +7,50 @@ author: asudbring
77
ms.service: virtual-network
88
ms.subservice: ip-services
99
ms.topic: conceptual
10-
ms.date: 12/27/2021
10+
ms.date: 11/16/2022
1111
ms.author: allensu
1212
---
1313

1414
# Public IP addresses
1515

1616
Public IP addresses allow Internet resources to communicate inbound to Azure resources. Public IP addresses enable Azure resources to communicate to Internet and public-facing Azure services. The address is dedicated to the resource, until it's unassigned by you. A resource without a public IP assigned can communicate outbound. Azure dynamically assigns an available IP address that isn't dedicated to the resource. For more information about outbound connections in Azure, see [Understand outbound connections](../../load-balancer/load-balancer-outbound-connections.md?toc=%2fazure%2fvirtual-network%2ftoc.json).
1717

18-
In Azure Resource Manager, a [public IP](virtual-network-public-ip-address.md) address is a resource that has its own properties. Some of the resources you can associate a public IP address resource with:
18+
In Azure Resource Manager, a [public IP](virtual-network-public-ip-address.md) address is a resource that has its own properties.
19+
20+
The following resources can be associated with a public IP address:
1921

2022
* Virtual machine network interfaces
21-
* Virtual machine scale sets
23+
24+
* Virtual Machine Scale Sets
25+
2226
* Public Load Balancers
27+
2328
* Virtual Network Gateways (VPN/ER)
29+
2430
* NAT gateways
31+
2532
* Application Gateways
33+
2634
* Azure Firewall
35+
2736
* Bastion Host
37+
2838
* Route Server
2939

3040
For Virtual Machine Scale Sets, use [Public IP Prefixes](public-ip-address-prefix.md).
3141

3242
## At-a-glance
3343

34-
The following table shows the property a public IP can be associated to a resource and the allocation methods. Note that public IPv6 support isn't available for all resource types at this time.
44+
The following table shows the property a public IP can be associated to a resource and the allocation methods. Public IPv6 support isn't available for all resource types at this time.
3545

3646
| Top-level resource | IP Address association | Dynamic IPv4 | Static IPv4 | Dynamic IPv6 | Static IPv6 |
3747
| --- | --- | --- | --- | --- | --- |
3848
| Virtual machine |Network interface |Yes | Yes | Yes | Yes |
39-
| Public Load balancer |Front-end configuration |Yes | Yes | Yes |Yes |
40-
| Virtual Network gateway (VPN) |Gateway IP configuration |Yes (non-AZ only) |Yes | No |No |
41-
| Virtual Network gateway (ER) |Gateway IP configuration |Yes | No | Yes (preview) |No |
49+
| Public Load Balancer |Front-end configuration |Yes | Yes | Yes |Yes |
50+
| Virtual Network Gateway (VPN) |Gateway IP configuration |Yes (non-AZ only) |Yes | No |No |
51+
| Virtual Network Gateway (ER) |Gateway IP configuration |Yes | No | Yes (preview) |No |
4252
| NAT gateway |Gateway IP configuration |No |Yes | No |No |
43-
| Application gateway |Front-end configuration |Yes (V1 only) |Yes (V2 only) | No | No |
53+
| Application Gateway |Front-end configuration |Yes (V1 only) |Yes (V2 only) | No | No |
4454
| Azure Firewall | Front-end configuration | No | Yes | No | No |
4555
| Bastion Host | Public IP configuration | No | Yes | No | No |
4656
| Route Server | Front-end configuration | No | Yes | No | No |
@@ -66,24 +76,32 @@ Public IP addresses are created with one of the following SKUs:
6676
> Basic SKU IPv4 addresses can be upgraded after creation to Standard SKU. To learn about SKU upgrade, refer to [Public IP upgrade](public-ip-upgrade-portal.md).
6777
6878
>[!IMPORTANT]
69-
> Matching SKUs are required for Load Balancer and Public IP resources. You can't have a mixture of Basic SKU resources and standard SKU resources. You can't attach standalone virtual machines, virtual machines in an availability set resource, or a virtual machine scale set resources to both SKUs simultaneously. New designs should consider using Standard SKU resources. Please review [Standard Load Balancer](../../load-balancer/load-balancer-overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json) for details.
79+
> Matching SKUs are required for load balancer and public IP resources. You can't have a mixture of basic SKU resources and standard SKU resources. You can't attach standalone virtual machines, virtual machines in an availability set resource, or a virtual machine scale set resources to both SKUs simultaneously. New designs should consider using Standard SKU resources. For more information about a standard load balancer, see [Standard Load Balancer](../../load-balancer/load-balancer-overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json).
7080
7181
## IP address assignment
7282

7383
Public IPs have two types of assignments:
84+
7485
- **Static** - The resource is assigned an IP address at the time it's created. The IP address is released when the resource is deleted.
75-
- **Dynamic** - The IP address *isn't* given to the resource at the time of creation when selecting dynamic. The IP is assigned when you associate the public IP address with a resource. The IP address is released when you stop, or delete the resource
86+
87+
- **Dynamic** - The IP address **isn't** given to the resource at the time of creation when selecting dynamic. The IP is assigned when you associate the public IP address with a resource. The IP address is released when you stop, or delete the resource.
7688

7789
**Static public IP addresses** are commonly used in the following scenarios:
90+
7891
* When you must update firewall rules to communicate with your Azure resources.
92+
7993
* DNS name resolution, where a change in IP address would require updating A records.
94+
8095
* Your Azure resources communicate with other apps or services that use an IP address-based security model.
96+
8197
* You use TLS/SSL certificates linked to an IP address.
8298

8399
> [!NOTE]
84100
> Even when you set the allocation method to **static**, you cannot specify the actual IP address assigned to the public IP address resource. Azure assigns the IP address from a pool of available IP addresses in the Azure location the resource is created in.
85101
86-
**Basic public IP addresses** are commonly used for when there is no dependency on the IP address. For example, a public IP resource is released from a resource named **Resource A**. **Resource A** receives a different IP on start-up if the public IP resource is reassigned. Any associated IP address is released if the allocation method is changed from **static** to **dynamic**. Any associated IP address is unchanged if the allocation method is changed from **dynamic** to **static**. Set the allocation method to **static** to ensure the IP address remains the same.
102+
**Basic public IP addresses** are commonly used for when there's no dependency on the IP address.
103+
104+
For example, a public IP resource is released from a resource named **Resource A**. **Resource A** receives a different IP on start-up if the public IP resource is reassigned. Any associated IP address is released if the allocation method is changed from **static** to **dynamic**. Any associated IP address is unchanged if the allocation method is changed from **dynamic** to **static**. Set the allocation method to **static** to ensure the IP address remains the same.
87105

88106
| Resource | Static | Dynamic |
89107
| --- | --- | --- |
@@ -94,62 +112,78 @@ Public IPs have two types of assignments:
94112

95113
## DNS Name Label
96114

97-
Select this option to specify a DNS label for a public IP resource. This functionality works for both IPv4 addresses (32-bit A records) and IPv6 addresses (128-bit AAAA records). This selection creates a mapping for **domainnamelabel**.**location**.cloudapp.azure.com to the public IP in the Azure-managed DNS.
115+
Select this option to specify a DNS label for a public IP resource. This functionality works for both IPv4 addresses (32-bit A records) and IPv6 addresses (128-bit AAAA records). This selection creates a mapping for **domainnamelabel**.**location**.cloudapp.azure.com to the public IP in the Azure-managed DNS.
98116

99-
For instance, creation of a public IP with:
117+
For instance, creation of a public IP with the following settings:
100118

101119
* **contoso** as a **domainnamelabel**
120+
102121
* **West US** Azure **location**
103122

104123
The fully qualified domain name (FQDN) **contoso.westus.cloudapp.azure.com** resolves to the public IP address of the resource.
105124

106125
> [!IMPORTANT]
107126
> Each domain name label created must be unique within its Azure location.
108127
109-
If a custom domain is desired for services that use a Public IP, you can use [Azure DNS](../../dns/dns-custom-domain.md?toc=%2fazure%2fvirtual-network%2ftoc.json#public-ip-address) or an external DNS provider for your DNS Record.
128+
If a custom domain is desired for services that use a public IP, you can use [Azure DNS](../../dns/dns-custom-domain.md?toc=%2fazure%2fvirtual-network%2ftoc.json#public-ip-address) or an external DNS provider for your DNS Record.
110129

111130
## Availability Zone
112131

113-
Public IP addresses with a Standard SKU can be created as non-zonal, zonal, or zone-redundant in [regions that support availability zones](../../availability-zones/az-region.md). A zone-redundant IP is created in all zones for a region and can survive any single zone failure. A zonal IP is tied to a specific availability zone, and shares fate with the health of the zone. A "non-zonal" public IP addresses is placed into a zone for you by Azure and does not give a guarantee of redundancy.
132+
Public IP addresses with a standard SKU can be created as non-zonal, zonal, or zone-redundant in [regions that support availability zones](../../availability-zones/az-region.md).
133+
134+
A zone-redundant IP is created in all zones for a region and can survive any single zone failure. A zonal IP is tied to a specific availability zone, and shares fate with the health of the zone. A "non-zonal" public IP addresses are placed into a zone for you by Azure and doesn't give a guarantee of redundancy.
114135

115136
In regions without availability zones, all public IP addresses are created as non-zonal. Public IP addresses created in a region that is later upgraded to have availability zones remain non-zonal.
116137

117138
> [!NOTE]
118-
> All Basic SKU public IP addresses are created as non-zonal. Any IP that is upgraded from a Basic SKU to Standard SKU remains non-zonal.
139+
> All basic SKU public IP addresses are created as non-zonal. Any IP that is upgraded from a basic SKU to standard SKU remains non-zonal.
119140
120141
## Other public IP address features
121142

122143
There are other attributes that can be used for a public IP address.
123144

124145
* The Global **Tier** allows a public IP address to be used with cross-region load balancers.
146+
125147
* The Internet **Routing Preference** option minimizes the time that traffic spends on the Microsoft network, lowering the egress data transfer cost.
126148

127149
> [!NOTE]
128-
> At this time, both the **Tier** and **Routing Preference** feature are available for standard SKU IPv4 addresses only. They also cannot be utilized on the same IP address concurrently.
150+
> At this time, both the **Tier** and **Routing Preference** feature are available for standard SKU IPv4 addresses only. They can't be utilized on the same IP address concurrently.
129151
>
130152
131153
[!INCLUDE [ephemeral-ip-note.md](../../../includes/ephemeral-ip-note.md)]
132154

133155
## Limits
134156

135-
The limits for IP addressing are listed in the full set of [limits for networking](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#networking-limits) in Azure. The limits are per region and per subscription. [Contact support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade) to increase above the default limits based on your business needs.
157+
The limits for IP addressing are listed in the full set of [limits for networking](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#networking-limits) in Azure. The limits are per region and per subscription.
158+
159+
[Contact support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade) to increase above the default limits based on your business needs.
136160

137161
## Pricing
138162

139-
Public IPv4 addresses have a nominal charge; Public IPv6 addresses have no charge. To learn more about IP address pricing in Azure, review the [IP address pricing](https://azure.microsoft.com/pricing/details/ip-addresses) page.
163+
Public IPv4 addresses have a nominal charge; Public IPv6 addresses have no charge.
164+
165+
To learn more about IP address pricing in Azure, review the [IP address pricing](https://azure.microsoft.com/pricing/details/ip-addresses) page.
140166

141167
## Limitations for IPv6
142168

143-
* VPN gateways cannot be used in a virtual network with IPv6 enabled, either directly or peered with "UseRemoteGateway".
169+
* VPN gateways can't be used in a virtual network with IPv6 enabled, either directly or peered with "UseRemoteGateway".
170+
144171
* Public IPv6 addresses are locked at an idle timeout of 4 minutes.
172+
145173
* Azure doesn't support IPv6 communication for containers.
174+
146175
* Use of IPv6-only virtual machines or virtual machines scale sets aren't supported. Each NIC must include at least one IPv4 IP configuration (dual-stack).
147-
* When adding IPv6 to existing IPv4 deployments, IPv6 ranges can't be added to a virtual network with existing resource navigation links.
176+
177+
* IPv6 ranges can't be added to a virtual network with existing resource navigation links when adding IPv6 to existing IPv4 deployments.
178+
148179
* Forward DNS for IPv6 is supported for Azure public DNS. Reverse DNS isn't supported.
149-
* Routing Preference and cross-region load-balancing isn't supported.
180+
181+
* Routing Preference and cross-region load balancer aren't supported.
150182

151183
For more information on IPv6 in Azure, see [here](ipv6-overview.md).
152184

153185
## Next steps
186+
154187
* Learn about [Private IP Addresses in Azure](private-ip-addresses.md)
188+
155189
* [Deploy a VM with a static public IP using the Azure portal](./virtual-network-deploy-static-pip-arm-portal.md)

0 commit comments

Comments
 (0)