Skip to content

Commit 8ad9d0f

Browse files
Update virtual-network-concepts.md
Based on a recent, large customer experience, I am proposing clarifications through examples for our subnet guidance. ------- cc: @dlepow, @mikebudzynski @kyleburnsdev
1 parent e945dd8 commit 8ad9d0f

File tree

1 file changed

+16
-2
lines changed

1 file changed

+16
-2
lines changed

articles/api-management/virtual-network-concepts.md

Lines changed: 16 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -83,14 +83,28 @@ The following are virtual network resource requirements for API Management. Some
8383

8484
The minimum size of the subnet in which API Management can be deployed is /29, which gives three usable IP addresses. Each extra scale [unit](api-management-capacity.md) of API Management requires two more IP addresses. The minimum size requirement is based on the following considerations:
8585

86-
* Azure reserves some IP addresses within each subnet that can't be used. The first and last IP addresses of the subnets are reserved for protocol conformance. Three more addresses are used for Azure services. For more information, see [Are there any restrictions on using IP addresses within these subnets?](../virtual-network/virtual-networks-faq.md#are-there-any-restrictions-on-using-ip-addresses-within-these-subnets).
86+
* Azure reserves five IP addresses within each subnet that can't be used. The first and last IP addresses of the subnets are reserved for protocol conformance. Three more addresses are used for Azure services. For more information, see [Are there any restrictions on using IP addresses within these subnets?](../virtual-network/virtual-networks-faq.md#are-there-any-restrictions-on-using-ip-addresses-within-these-subnets).
8787

8888
* In addition to the IP addresses used by the Azure VNet infrastructure, each API Management instance in the subnet uses:
89-
* Two IP addresses per unit of Premium SKU, or
89+
* Two IP addresses per unit of Basic, Standard, or Premium SKU, or
9090
* One IP address for the Developer SKU.
9191

9292
* When deploying into an [internal VNet](./api-management-using-with-internal-vnet.md), the instance requires an extra IP address for the internal load balancer.
9393

94+
#### Examples
95+
96+
* For Basic, Standard, or Premium SKUs:
97+
98+
* **/29 subnet**: 8 possible IPs - 5 reserved Azure IPs - 2 API Management IPs for one instance - 1 IP for internal load balancer, if used in internal mode = 0 remaining IPs left for scaling units.
99+
100+
* **/28 subnet**: 16 possible IPs - 5 reserved Azure IPs - 2 API Management IPs for one instance - 1 IP for internal load balancer, if used in internal mode = 8 remaining IPs left for four scale-out units (2 IPs/scale-out unit) for a total of five units. **This subnet efficiently maximizes Basic and Standard SKU scale-out limits.**
101+
102+
* **/27 subnet**: 32 possible IPs - 5 reserved Azure IPs - 2 API Management IPs for one instance - 1 IP for internal load balancer, if used in internal mode = 24 remaining IPs left for twelve scale-out units (2 IPs/scale-out unit) for a total of thirteen units. **This subnet efficiently maximizes the soft-limit Premium SKU scale-out limit.**
103+
104+
* **/26 subnet**: 64 possible IPs - 5 reserved Azure IPs - 2 API Management IPs for one instance - 1 IP for internal load balancer, if used in internal mode = 56 remaining IPs left for twenty-eight scale-out units (2 IPs/scale-out unit) for a total of twenty-nine units. It is possible, with an Azure Support ticket, to scale the Premium SKU past twelve units. If you foresee such high demand, consider the /26 subnet.
105+
106+
* **/25 subnet**: 128 possible IPs - 5 reserved Azure IPs - 2 API Management IPs for one instance - 1 IP for internal load balancer, if used in internal mode = 120 remaining IPs left for sixty scale-out units (2 IPs/scale-out unit) for a total of sixty-one units. This is an extremely large, theoretical number of scale-out units.
107+
94108
### Routing
95109

96110
See the Routing guidance when deploying your API Management instance into an [external VNet](./api-management-using-with-vnet.md#routing) or [internal VNet](./api-management-using-with-internal-vnet.md#routing).

0 commit comments

Comments
 (0)