You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-network/ip-services/public-ip-addresses.md
+56-22Lines changed: 56 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,40 +7,50 @@ author: asudbring
7
7
ms.service: virtual-network
8
8
ms.subservice: ip-services
9
9
ms.topic: conceptual
10
-
ms.date: 12/27/2021
10
+
ms.date: 11/16/2022
11
11
ms.author: allensu
12
12
---
13
13
14
14
# Public IP addresses
15
15
16
16
Public IP addresses allow Internet resources to communicate inbound to Azure resources. Public IP addresses enable Azure resources to communicate to Internet and public-facing Azure services. The address is dedicated to the resource, until it's unassigned by you. A resource without a public IP assigned can communicate outbound. Azure dynamically assigns an available IP address that isn't dedicated to the resource. For more information about outbound connections in Azure, see [Understand outbound connections](../../load-balancer/load-balancer-outbound-connections.md?toc=%2fazure%2fvirtual-network%2ftoc.json).
17
17
18
-
In Azure Resource Manager, a [public IP](virtual-network-public-ip-address.md) address is a resource that has its own properties. Some of the resources you can associate a public IP address resource with:
18
+
In Azure Resource Manager, a [public IP](virtual-network-public-ip-address.md) address is a resource that has its own properties.
19
+
20
+
The following resources can be associated with a public IP address:
19
21
20
22
* Virtual machine network interfaces
21
-
* Virtual machine scale sets
23
+
24
+
* Virtual Machine Scale Sets
25
+
22
26
* Public Load Balancers
27
+
23
28
* Virtual Network Gateways (VPN/ER)
29
+
24
30
* NAT gateways
31
+
25
32
* Application Gateways
33
+
26
34
* Azure Firewall
35
+
27
36
* Bastion Host
37
+
28
38
* Route Server
29
39
30
40
For Virtual Machine Scale Sets, use [Public IP Prefixes](public-ip-address-prefix.md).
31
41
32
42
## At-a-glance
33
43
34
-
The following table shows the property a public IP can be associated to a resource and the allocation methods. Note that public IPv6 support isn't available for all resource types at this time.
44
+
The following table shows the property a public IP can be associated to a resource and the allocation methods. Public IPv6 support isn't available for all resource types at this time.
35
45
36
46
| Top-level resource | IP Address association | Dynamic IPv4 | Static IPv4 | Dynamic IPv6 | Static IPv6 |
| Virtual Network Gateway (VPN) |Gateway IP configuration |Yes (non-AZ only) |Yes | No |No |
51
+
| Virtual Network Gateway (ER) |Gateway IP configuration |Yes | No | Yes (preview) |No |
42
52
| NAT gateway |Gateway IP configuration |No |Yes | No |No |
43
-
| Application gateway|Front-end configuration |Yes (V1 only) |Yes (V2 only) | No | No |
53
+
| Application Gateway|Front-end configuration |Yes (V1 only) |Yes (V2 only) | No | No |
44
54
| Azure Firewall | Front-end configuration | No | Yes | No | No |
45
55
| Bastion Host | Public IP configuration | No | Yes | No | No |
46
56
| Route Server | Front-end configuration | No | Yes | No | No |
@@ -66,24 +76,32 @@ Public IP addresses are created with one of the following SKUs:
66
76
> Basic SKU IPv4 addresses can be upgraded after creation to Standard SKU. To learn about SKU upgrade, refer to [Public IP upgrade](public-ip-upgrade-portal.md).
67
77
68
78
>[!IMPORTANT]
69
-
> Matching SKUs are required for Load Balancer and Public IP resources. You can't have a mixture of Basic SKU resources and standard SKU resources. You can't attach standalone virtual machines, virtual machines in an availability set resource, or a virtual machine scale set resources to both SKUs simultaneously. New designs should consider using Standard SKU resources. Please review [Standard Load Balancer](../../load-balancer/load-balancer-overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json) for details.
79
+
> Matching SKUs are required for load balancer and public IP resources. You can't have a mixture of basic SKU resources and standard SKU resources. You can't attach standalone virtual machines, virtual machines in an availability set resource, or a virtual machine scale set resources to both SKUs simultaneously. New designs should consider using Standard SKU resources. For more information about a standard load balancer, see [Standard Load Balancer](../../load-balancer/load-balancer-overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json).
70
80
71
81
## IP address assignment
72
82
73
83
Public IPs have two types of assignments:
84
+
74
85
-**Static** - The resource is assigned an IP address at the time it's created. The IP address is released when the resource is deleted.
75
-
-**Dynamic** - The IP address *isn't* given to the resource at the time of creation when selecting dynamic. The IP is assigned when you associate the public IP address with a resource. The IP address is released when you stop, or delete the resource
86
+
87
+
-**Dynamic** - The IP address **isn't** given to the resource at the time of creation when selecting dynamic. The IP is assigned when you associate the public IP address with a resource. The IP address is released when you stop, or delete the resource.
76
88
77
89
**Static public IP addresses** are commonly used in the following scenarios:
90
+
78
91
* When you must update firewall rules to communicate with your Azure resources.
92
+
79
93
* DNS name resolution, where a change in IP address would require updating A records.
94
+
80
95
* Your Azure resources communicate with other apps or services that use an IP address-based security model.
96
+
81
97
* You use TLS/SSL certificates linked to an IP address.
82
98
83
99
> [!NOTE]
84
100
> Even when you set the allocation method to **static**, you cannot specify the actual IP address assigned to the public IP address resource. Azure assigns the IP address from a pool of available IP addresses in the Azure location the resource is created in.
85
101
86
-
**Basic public IP addresses** are commonly used for when there is no dependency on the IP address. For example, a public IP resource is released from a resource named **Resource A**. **Resource A** receives a different IP on start-up if the public IP resource is reassigned. Any associated IP address is released if the allocation method is changed from **static** to **dynamic**. Any associated IP address is unchanged if the allocation method is changed from **dynamic** to **static**. Set the allocation method to **static** to ensure the IP address remains the same.
102
+
**Basic public IP addresses** are commonly used for when there's no dependency on the IP address.
103
+
104
+
For example, a public IP resource is released from a resource named **Resource A**. **Resource A** receives a different IP on start-up if the public IP resource is reassigned. Any associated IP address is released if the allocation method is changed from **static** to **dynamic**. Any associated IP address is unchanged if the allocation method is changed from **dynamic** to **static**. Set the allocation method to **static** to ensure the IP address remains the same.
87
105
88
106
| Resource | Static | Dynamic |
89
107
| --- | --- | --- |
@@ -94,62 +112,78 @@ Public IPs have two types of assignments:
94
112
95
113
## DNS Name Label
96
114
97
-
Select this option to specify a DNS label for a public IP resource. This functionality works for both IPv4 addresses (32-bit A records) and IPv6 addresses (128-bit AAAA records). This selection creates a mapping for **domainnamelabel**.**location**.cloudapp.azure.com to the public IP in the Azure-managed DNS.
115
+
Select this option to specify a DNS label for a public IP resource. This functionality works for both IPv4 addresses (32-bit A records) and IPv6 addresses (128-bit AAAA records). This selection creates a mapping for **domainnamelabel**.**location**.cloudapp.azure.com to the public IP in the Azure-managed DNS.
98
116
99
-
For instance, creation of a public IP with:
117
+
For instance, creation of a public IP with the following settings:
100
118
101
119
***contoso** as a **domainnamelabel**
120
+
102
121
***West US** Azure **location**
103
122
104
123
The fully qualified domain name (FQDN) **contoso.westus.cloudapp.azure.com** resolves to the public IP address of the resource.
105
124
106
125
> [!IMPORTANT]
107
126
> Each domain name label created must be unique within its Azure location.
108
127
109
-
If a custom domain is desired for services that use a Public IP, you can use [Azure DNS](../../dns/dns-custom-domain.md?toc=%2fazure%2fvirtual-network%2ftoc.json#public-ip-address) or an external DNS provider for your DNS Record.
128
+
If a custom domain is desired for services that use a public IP, you can use [Azure DNS](../../dns/dns-custom-domain.md?toc=%2fazure%2fvirtual-network%2ftoc.json#public-ip-address) or an external DNS provider for your DNS Record.
110
129
111
130
## Availability Zone
112
131
113
-
Public IP addresses with a Standard SKU can be created as non-zonal, zonal, or zone-redundant in [regions that support availability zones](../../availability-zones/az-region.md). A zone-redundant IP is created in all zones for a region and can survive any single zone failure. A zonal IP is tied to a specific availability zone, and shares fate with the health of the zone. A "non-zonal" public IP addresses is placed into a zone for you by Azure and does not give a guarantee of redundancy.
132
+
Public IP addresses with a standard SKU can be created as non-zonal, zonal, or zone-redundant in [regions that support availability zones](../../availability-zones/az-region.md).
133
+
134
+
A zone-redundant IP is created in all zones for a region and can survive any single zone failure. A zonal IP is tied to a specific availability zone, and shares fate with the health of the zone. A "non-zonal" public IP addresses are placed into a zone for you by Azure and doesn't give a guarantee of redundancy.
114
135
115
136
In regions without availability zones, all public IP addresses are created as non-zonal. Public IP addresses created in a region that is later upgraded to have availability zones remain non-zonal.
116
137
117
138
> [!NOTE]
118
-
> All Basic SKU public IP addresses are created as non-zonal. Any IP that is upgraded from a Basic SKU to Standard SKU remains non-zonal.
139
+
> All basic SKU public IP addresses are created as non-zonal. Any IP that is upgraded from a basic SKU to standard SKU remains non-zonal.
119
140
120
141
## Other public IP address features
121
142
122
143
There are other attributes that can be used for a public IP address.
123
144
124
145
* The Global **Tier** allows a public IP address to be used with cross-region load balancers.
146
+
125
147
* The Internet **Routing Preference** option minimizes the time that traffic spends on the Microsoft network, lowering the egress data transfer cost.
126
148
127
149
> [!NOTE]
128
-
> At this time, both the **Tier** and **Routing Preference** feature are available for standard SKU IPv4 addresses only. They also cannot be utilized on the same IP address concurrently.
150
+
> At this time, both the **Tier** and **Routing Preference** feature are available for standard SKU IPv4 addresses only. They can't be utilized on the same IP address concurrently.
The limits for IP addressing are listed in the full set of [limits for networking](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#networking-limits) in Azure. The limits are per region and per subscription. [Contact support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade) to increase above the default limits based on your business needs.
157
+
The limits for IP addressing are listed in the full set of [limits for networking](../../azure-resource-manager/management/azure-subscription-service-limits.md?toc=%2fazure%2fvirtual-network%2ftoc.json#networking-limits) in Azure. The limits are per region and per subscription.
158
+
159
+
[Contact support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade) to increase above the default limits based on your business needs.
136
160
137
161
## Pricing
138
162
139
-
Public IPv4 addresses have a nominal charge; Public IPv6 addresses have no charge. To learn more about IP address pricing in Azure, review the [IP address pricing](https://azure.microsoft.com/pricing/details/ip-addresses) page.
163
+
Public IPv4 addresses have a nominal charge; Public IPv6 addresses have no charge.
164
+
165
+
To learn more about IP address pricing in Azure, review the [IP address pricing](https://azure.microsoft.com/pricing/details/ip-addresses) page.
140
166
141
167
## Limitations for IPv6
142
168
143
-
* VPN gateways cannot be used in a virtual network with IPv6 enabled, either directly or peered with "UseRemoteGateway".
169
+
* VPN gateways can't be used in a virtual network with IPv6 enabled, either directly or peered with "UseRemoteGateway".
170
+
144
171
* Public IPv6 addresses are locked at an idle timeout of 4 minutes.
172
+
145
173
* Azure doesn't support IPv6 communication for containers.
174
+
146
175
* Use of IPv6-only virtual machines or virtual machines scale sets aren't supported. Each NIC must include at least one IPv4 IP configuration (dual-stack).
147
-
* When adding IPv6 to existing IPv4 deployments, IPv6 ranges can't be added to a virtual network with existing resource navigation links.
176
+
177
+
* IPv6 ranges can't be added to a virtual network with existing resource navigation links when adding IPv6 to existing IPv4 deployments.
178
+
148
179
* Forward DNS for IPv6 is supported for Azure public DNS. Reverse DNS isn't supported.
149
-
* Routing Preference and cross-region load-balancing isn't supported.
180
+
181
+
* Routing Preference and cross-region load balancer aren't supported.
150
182
151
183
For more information on IPv6 in Azure, see [here](ipv6-overview.md).
152
184
153
185
## Next steps
186
+
154
187
* Learn about [Private IP Addresses in Azure](private-ip-addresses.md)
188
+
155
189
*[Deploy a VM with a static public IP using the Azure portal](./virtual-network-deploy-static-pip-arm-portal.md)
0 commit comments