Skip to content

Commit a41ca6c

Browse files
committed
modified for clarity about default outbound access
1 parent e0f2ed3 commit a41ca6c

File tree

2 files changed

+6
-14
lines changed

2 files changed

+6
-14
lines changed

articles/load-balancer/load-balancer-outbound-connections.md

Lines changed: 3 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -82,21 +82,10 @@ A public IP assigned to a VM is a 1:1 relationship (rather than 1: many) and imp
8282

8383
:::image type="content" source="./media/load-balancer-outbound-connections/default-outbound-access.png" alt-text="Diagram of default outbound access.":::
8484

85-
>[!NOTE]
86-
> This method is **NOT recommended** for production workloads as it adds risk of exhausting ports. Please refrain from using this method for production workloads to avoid potential connection failures.
85+
In Azure, virtual machines created in a virtual network without explicit outbound connectivity defined are assigned a default outbound public IP address. This IP address enables outbound connectivity from the resources to the Internet. This access is referred to as [default outbound access](../virtual-network/ip-services/default-outbound-access). This method of access is **not recommended** as it is insecure and the IP addresses are subject to change.
8786

88-
Default outbound access is when An Azure resource is allocated a minimal number of ports for outbound. This access occurs when the resource meets any of the following conditions:
89-
90-
- doesn't have a public IP associated to it.
91-
- doesn't have a load balancer with outbound Rules in front of it.
92-
- isn't part of Virtual Machine Scale Sets flexible orchestration mode.
93-
- doesn't have a NAT gateway resource associated to its subnet.
94-
95-
Some other examples of default outbound access are:
96-
97-
- Use of a basic SKU load balancer
98-
- A virtual machine in Azure (without the associations mentioned above). In this case, outbound connectivity is provided by the default outbound access IP. This IP is a dynamic IP assigned by Azure that you can't control. Default SNAT isn't recommended for production workloads and can cause connectivity failures.
99-
- A virtual machine in the backend pool of a load balancer without outbound rules. As a result, you use the frontend IP address of a load balancer for outbound and inbound and are more prone to connectivity failures from SNAT port exhaustion.
87+
>[!Important]
88+
>On September 30, 2025, default outbound access for new deployments will be retired. For more information, see the [official announcement](https://azure.microsoft.com/updates/upgrade-to-standard-sku-public-ip-addresses-in-azure-by-30-september-2025-basic-sku-will-be-retired/). It is reccomended to use one the explict forms of connectivity as shown in options 1-3 above.
10089
10190
### What are SNAT ports?
10291

articles/virtual-network/ip-services/default-outbound-access.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ ms.date: 08/24/2023
1212
ms.custom: FY23 content-maintenance
1313
---
1414

15+
>[!Important]
16+
>On September 30, 2025, default outbound access for new deployments will be retired. For more information, see the [official announcement](https://azure.microsoft.com/updates/upgrade-to-standard-sku-public-ip-addresses-in-azure-by-30-september-2025-basic-sku-will-be-retired/). It is reccomended to use one the explict forms of connectivity discussed below.
17+
1518
# Default outbound access in Azure
1619

1720
In Azure, virtual machines created in a virtual network without explicit outbound connectivity defined are assigned a default outbound public IP address. This IP address enables outbound connectivity from the resources to the Internet. This access is referred to as default outbound access.

0 commit comments

Comments
 (0)