You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/firewall/firewall-performance.md
+7-25Lines changed: 7 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: firewall
5
5
author: vhorne
6
6
ms.service: firewall
7
7
ms.topic: conceptual
8
-
ms.date: 01/11/2022
8
+
ms.date: 01/24/2022
9
9
ms.author: victorh
10
10
---
11
11
@@ -17,16 +17,16 @@ Azure Firewall has two versions: Standard and Premium.
17
17
18
18
- Azure Firewall Standard
19
19
20
-
Azure Firewall Standard has been generally available since September 2018. It's cloud native, highly available, with built-in auto scaling firewall-as-a-service. You can centrally govern and log all your traffic flows using a DevOps approach. The service supports both application and network level-filtering rules, and is integrated with the Microsoft Threat Intelligence feed for filtering known malicious IP addresses and domains.
20
+
Azure Firewall Standard has been generally available since September 2018. It is cloud native, highly available, with built-in auto scaling firewall-as-a-service. You can centrally govern and log all your traffic flows using a DevOps approach. The service supports both application and network level-filtering rules, and is integrated with the Microsoft Threat Intelligence feed for filtering known malicious IP addresses and domains.
21
21
- Azure Firewall Premium
22
22
23
-
Azure Firewall Premium is a next generation firewall with capabilities that are required for highly sensitive and regulated environments. The features that might affect the performance of the Firewall are TLS inspection and IDPS (Intrusion Detection and Prevention).
23
+
Azure Firewall Premium is a next generation firewall. It has capabilities that are required for highly sensitive and regulated environments. The features that might affect the performance of the Firewall are TLS (Transport Layer Security) inspection and IDPS (Intrusion Detection and Prevention).
24
24
25
25
For more information about Azure Firewall, see [What is Azure Firewall?](overview.md)
26
26
27
27
## Performance testing
28
28
29
-
Before deploying Azure Firewall, the performance needs to be tested and evaluated to ensure it meets your expectations. Not only should Azure Firewall handle the current traffic on a network, but it should also be ready for potential traffic growth. It's recommended to evaluate on a test network and not in a production environment. The testing should attempt to replicate the production environment as close as possible. This includes the network topology, and emulating the actual characteristics of the expected traffic through the firewall.
29
+
Before deploying Azure Firewall, the performance needs to be tested and evaluated to ensure it meets your expectations. Not only should Azure Firewall handle the current traffic on a network, but it should also be ready for potential traffic growth. It is recommended to evaluate on a test network and not in a production environment. The testing should attempt to replicate the production environment as close as possible. This includes the network topology, and emulating the actual characteristics of the expected traffic through the firewall.
30
30
31
31
## Performance data
32
32
@@ -44,7 +44,7 @@ The following set of performance results demonstrates the maximal Azure Firewall
44
44
> [!NOTE]
45
45
> IPS (Intrusion Prevention System) takes place when one or more signatures are configured to *Alert and Deny* mode.
46
46
47
-
Azure Firewall Premium’s new performance boost functionality is now in public preview and provides you with enhancements to the overall firewall performance as shown below:
47
+
Azure Firewall Premium’s new performance boost functionality is now in public preview and provides you with the following enhancements to the overall firewall performance:
48
48
49
49
50
50
|Firewall use case |Without performance boost (Gbps) |With performance boost (Gbps) |
@@ -55,29 +55,11 @@ Azure Firewall Premium’s new performance boost functionality is now in public
55
55
56
56
Performance values are calculated with Azure Firewall at full scale and with Premium performance boost enabled. Actual performance may vary depending on your rule complexity and network configuration. These metrics are updated periodically as performance continuously evolves with each release.
57
57
58
-
## How to configure Premium performance boost (preview)
58
+
## Configure Premium performance boost (preview)
59
59
60
60
As more applications are moved to the cloud, the network element performance becomes a bottleneck. As a result, Premium performance boost (preview) for Azure Firewall Premium is available to allow more scalability for those deployments.
61
61
62
-
To enable the Azure Firewall Premium performance boost, run the following Azure PowerShell commands. This feature is applied at the **subscription** level for all Firewalls (VNet Firewalls and SecureHub Firewalls). Currently, Azure Firewall Premium Performance boost is not recommended SecureHub Firewalls. Check back here for the latest updates as we work to change this recommendation. Also, this setting does not have any effect on standard Firewalls.
63
-
64
-
After you run the Azure PowerShell commands, an update operation needs to be run on the Azure Firewall for the feature to immediately take effect. This update operation can be a rule change (least intrusive), a setting configuration, or a Stop/Start operation. Otherwise, the firewall/s will update with the feature within several days.
65
-
66
-
Run the following Azure PowerShell to configure the Azure Firewall Premium performance boost:
67
-
68
-
```azurepowershell
69
-
Connect-AzAccount
70
-
71
-
Select-AzSubscription -Subscription "subscription_id or subscription_name"
To enable the Azure Firewall Premium performance boost, see [Azure Firewall preview features](firewall-preview.md#azure-firewall-premium-performance-boost-preview).
Copy file name to clipboardExpand all lines: articles/firewall/firewall-preview.md
+5-1Lines changed: 5 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,14 +5,18 @@ services: firewall
5
5
author: vhorne
6
6
ms.service: firewall
7
7
ms.topic: conceptual
8
-
ms.date: 01/21/2022
8
+
ms.date: 01/24/2022
9
9
ms.author: victorh
10
10
---
11
11
12
12
# Azure Firewall preview features
13
13
14
14
The following Azure Firewall preview features are available publicly for you to deploy and test. Some of the preview features are available on the Azure portal, and some are only visible using a feature flag.
15
15
16
+
> [!IMPORTANT]
17
+
> These features are currently in PREVIEW.
18
+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
19
+
16
20
## Feature flags
17
21
18
22
As new features are released to preview, some of them will be behind a feature flag. To enable the functionality in your environment, you must enable the feature flag on your subscription. These features are applied at the subscription level for all firewalls (VNet firewalls and SecureHub firewalls).
0 commit comments