You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/load-balancer/tutorial-gateway-outbound-connectivity.md
+20-18Lines changed: 20 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,12 @@
1
1
---
2
2
title: 'Tutorial: Configure outbound connectivity with a gateway load balancer'
3
3
titleSuffix: Azure Load Balancer
4
-
description: Learn to configure gateway load balancer using the Azure portal higher scalability and performance with network virtual appliances.
4
+
description: Learn how to deploy Azure Gateway Load Balancer for higher scalability and performance on outbound connections when using network virtual appliances.
5
5
author: mbender-ms
6
6
ms.author: mbender
7
7
ms.service: load-balancer
8
8
ms.topic: tutorial
9
-
ms.date: 03/16/2023
9
+
ms.date: 03/22/2023
10
10
ms.custom: template-tutorial
11
11
---
12
12
@@ -24,7 +24,7 @@ In this tutorial, you learn how to:
24
24
25
25
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
26
26
- An existing public standard SKU Azure Load Balancer. For more information on creating a load balancer, see **[Create a public load balancer using the Azure portal](quickstart-load-balancer-standard-public-portal.md)**.
27
-
- For the purposes of this tutorial, the load balancer in the examples is named **myLoadBalancer** and is located in a resource group called **myResourceGroup**.
27
+
- For the purposes of this tutorial, the standard load balancer is named **myLoadBalancer** and is located in a resource group called **myResourceGroup**.
28
28
- An existing Gateway SKU Azure Load Balancer. For more information on creating a gateway load balancer, see [Create a gateway load balancer using the Azure portal](tutorial-gateway-portal.md).
29
29
- For the purposes of this tutorial, the gateway load balancer in the examples is name **myGatewayLoadBalancer**.
30
30
@@ -39,12 +39,12 @@ In this section, you chain an existing virtual machine’s public IP to a gatewa
39
39
:::image type="content" source="media/gateway-configure-outbound-connectivity/confirm-sku.png" alt-text="Screenshot of virtual machine overview highlighting standard sku." lightbox="media/gateway-configure-outbound-connectivity/confirm-sku-thumb.png":::
40
40
41
41
1. Return to your virtual machine.
42
-
1. In the **Overview** page of the virtual machine, select **Networking** under **Settings**.
42
+
1. In **Overview of the virtual machine, select **Networking** under **Settings**.
43
43
1. Select the network interface attached to the virtual machine. This example uses **myvm1229**.
44
44
45
45
:::image type="content" source="media/gateway-configure-outbound-connectivity/select-network-interface.png" alt-text="Screenshot of network interface attached to virtual machine.":::
46
46
47
-
1. In the **Network interface** page, select **IP configurations** under **Settings**.
47
+
1. In **Network interface**, select **IP configurations** under **Settings**.
48
48
6. Select **myFrontend** in **Gateway Load balancer**.
49
49
50
50
:::image type="content" source="media/gateway-configure-outbound-connectivity/select-gateway-load-balancer.png" alt-text="Screenshot of gateway load balancer selection in IP configuration settings.":::
@@ -55,7 +55,7 @@ In this section, you chain an existing virtual machine’s public IP to a gatewa
55
55
56
56
In this section, you create a new frontend IP configuration for outbound traffic in our existing standard public load balancer. Using separate public IPs for inbound and outbound traffic is a recommend best practice. Reusing the same public IP for inbound and outbound traffic can increase the risk of SNAT exhaustion, as load balancing and inbound NAT rules decrease the number of available SNAT ports.
57
57
58
-
1. Navigate to your existing standard public load balancer and go to the **Frontend IP configuration** under **Settings**.
58
+
1. Navigate to **myLoadBalancer** or your existing standard public load balancer and go to the **Frontend IP configuration** under **Settings**.
59
59
60
60
:::image type="content" source="media/gateway-configure-outbound-connectivity/frontend-settings.png" alt-text="Screenshot of frontend IP configuration.":::
61
61
@@ -67,25 +67,26 @@ In this section, you create a new frontend IP configuration for outbound traffic
67
67
| Name | Enter **myOutboundFrontend**. |
68
68
| IP version | Select **IPv4**. |
69
69
| IP type | Select **IP address**. |
70
-
| Public IP address ||
70
+
| Public IP address |<br> Select **Create new**.</br> <br/> In **Add a public IP address**, enter **myOutboundPublicIP** for name, and select **Ok**.<br/>|
:::image type="content" source="media/gateway-configure-outbound-connectivity/add-frontend-ip-configuration.png" alt-text="Screenshot of Add frontend ip configuration screen.":::
75
-
<<PickUpdHere>>
76
-
1. Select Save.
75
+
76
+
1. Select **Add**.
77
77
78
78
> [!NOTE]
79
-
> This step will “chain” your frontend to the gateway load balancer frontend specified.
79
+
> This step will *chain* your frontend to the gateway load balancer frontend specified.
80
80
> Any inbound or outbound traffic served by this frontend is redirected to the gateway load balancer for inspection by the configured NVAs before being distributed to this load balancer’s backend instances.
81
+
81
82
## Create outbound rule
82
83
83
-
1. In the **Load balancer** page, select **Outbound rules** under **Settings**.
84
+
1. In **Load balancer**, select **Outbound rules** under **Settings**.
84
85
2. Select **+ Add** in **Outbound rules** to add a rule.
85
86
86
87
:::image type="content" source="media/gateway-configure-outbound-connectivity/outbound-rules.png" alt-text="Screenshot of Load Balancer Outbound rules settings.":::
87
88
88
-
1. Enter or select the following information in**Add outbound rule**:
89
+
1.In **Add outbound rule** window, Enter or select the following information in:
89
90
90
91
| Setting | Value |
91
92
| --- | --- |
@@ -107,11 +108,12 @@ In this section, you create a new frontend IP configuration for outbound traffic
107
108
108
109
1. Select **Add**.
109
110
110
-
## Limitations
111
-
112
-
- Gateway load balancer doesn't currently support chaining with NAT Gateway. Outbound traffic originating from Azure virtual machines, served through NAT Gateway, goes directly to the Internet. And that NAT Gateway takes precedence over any instance-level public IPs or load balancers for outbound traffic.
113
-
- NAT Gateway can be configured for outbound connectivity together with a Standard Public Load Balancer and Gateway Load Balancer architecture for inbound connectivity. In this scenario, all inbound traffic flows as expected through the GWLB to the Standard LB, while outbound traffic goes to the Internet directly.
114
-
- If NVAs need to be inserted for outbound traffic, apply the methods described in this article. For examples, chaining an ILPIP or outbound rules LB frontend to a gateway load balancer.
111
+
> [!IMPORTANT]
112
+
>Gateway load balancer doesn't currently support chaining with NAT Gateway. Outbound traffic originating from Azure virtual machines, served through NAT Gateway, goes directly to the Internet. And that NAT Gateway takes precedence over any instance-level public IPs or load balancers for outbound traffic.
113
+
>
114
+
> NAT Gateway can be configured for outbound connectivity together with a Standard Public Load Balancer and Gateway Load Balancer architecture for inbound connectivity. In this scenario, all inbound traffic flows as expected through the GWLB to the Standard LB, while outbound traffic goes to the Internet directly.
115
+
>
116
+
> If NVAs need to be inserted for outbound traffic, apply the methods described in this article. For example, chaining an instance-level public IP or outbound rules load balancer frontend to a gateway load balancer.
115
117
116
118
## Clean up resources
117
119
@@ -125,4 +127,4 @@ In this tutorial, you learned how to:
125
127
- Created a new load balancer frontend IP configuration.
126
128
- Created an outbound rule for virtual machine traffic.
127
129
128
-
Learn how to [Deploy highly available NVAs](/azure/architecture/reference-architectures/dmz/nva-ha) with Azure Load Balancer.
130
+
Learn how to [deploy highly available NVAs](/azure/architecture/reference-architectures/dmz/nva-ha) with Azure Load Balancer.
0 commit comments