You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/nat-gateway/faq.yml
+17-9Lines changed: 17 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ sections:
13
13
questions:
14
14
- question: What is Azure NAT Gateway?
15
15
answer: |
16
-
Azure NAT Gateway is a fully managed, highly resilient outbound connectivity solution for Azure virtual networks. Attach NAT gateway to subnets within a virtual network and to at least one static public IP address to achieve secure and scalable outbound connectivity.
16
+
Azure NAT Gateway is a fully managed, highly resilient outbound connectivity solution for Azure virtual networks. To achieve secure and scalable outbound connectivity, attach NAT gateway to subnets within a virtual network and to at least one static public IP address.
17
17
18
18
- question: What is the pricing for Azure NAT Gateway?
19
19
answer: |
@@ -47,25 +47,25 @@ sections:
47
47
48
48
- question: Does NAT gateway support IP fragmentation?
49
49
answer: |
50
-
No, NAT gateway does not support IP fragmentation for TCP or UDP protocols.
50
+
No, NAT gateway doesn't support IP fragmentation for TCP or UDP protocols.
51
51
52
52
- name: NAT gateway metrics
53
53
questions:
54
54
- question: What is the difference between SNAT Connection Count and Total SNAT Connection Count metrics for NAT gateway?
55
55
answer: |
56
-
The [SNAT Connection Count](nat-metrics.md#snat-connection-count) metric shows the number of new SNAT connections made per second. The [Total SNAT Connection Count](nat-metrics.md#total-snat-connection-count) metric shows the total amount of active connections on NAT gateway.
56
+
The [SNAT Connection Count](nat-metrics.md#snat-connection-count) metric shows the number of new SNAT connections made per second. The [Total SNAT Connection Count](nat-metrics.md#total-snat-connection-count) metric shows the total number of active connections on NAT gateway.
57
57
58
58
- question: How can I see SNAT port usage on NAT gateway?
59
59
answer: |
60
60
There's no SNAT port usage metric for NAT gateway. Use the SNAT Connection Count and Total SNAT Connection Count metrics to help you evaluate the SNATing capacity of your NAT gateway.
61
61
62
62
- question: How can I store my NAT gateway metrics long-term?
63
63
answer: |
64
-
NAT gateway metrics can be retrived by using the [metrics REST API](/rest/api/monitor/metrics/list). Alternatively, you can select Share and then Download to Excel from the NAT gateway metrics page in the Azure portal.
64
+
NAT gateway metrics can be retrieved by using the [metrics REST API](/rest/api/monitor/metrics/list). Alternatively, you can select Share and then Download to Excel from the NAT gateway metrics page in the Azure portal.
65
65
66
66
- question: Can NAT gateway metrics be retrieved using diagnostic settings?
67
67
answer: |
68
-
No, NAT gateway metrics can't be exported using [diagnostic settings](/azure/azure-monitor/reference/supported-metrics/microsoft-network-natgateways-metrics). NAT gateway metrics are multi-dimensional. Diagnostic settings doesn't support the export of [multi-dimensional metrics](/azure/azure-monitor/reference/supported-metrics/metrics-index#exporting-platform-metrics-to-other-locations).
68
+
No, NAT gateway metrics can't be exported using [diagnostic settings](/azure/azure-monitor/reference/supported-metrics/microsoft-network-natgateways-metrics). NAT gateway metrics are multi-dimensional. Diagnostic settings don't support the export of [multi-dimensional metrics](/azure/azure-monitor/reference/supported-metrics/metrics-index#exporting-platform-metrics-to-other-locations).
69
69
70
70
- name: Outbound connectivity with NAT gateway
71
71
questions:
@@ -84,6 +84,10 @@ sections:
84
84
- question: If multiple public IP addresses are assigned to a NAT gateway, is traffic flow disrupted when one of the IP addresses is removed?
85
85
answer: |
86
86
Any active connections associated with a public IP address terminate upon the public IP address being removed. If the NAT gateway resource has multiple public IPs, new traffic is distributed among the assigned IPs.
87
+
88
+
- question: What does it mean when I see an IP being used to connect outbound that is different from my NAT gateway public IP?
89
+
answer: |
90
+
There are a few possible reasons for why you could be seeing a different IP being used to connect outbound than the one associated to your NAT gateway. To help troubleshoot, refer to the [NAT Gateway connectivity troubleshooting guide](/azure/nat-gateway/troubleshoot-nat-connectivity#nat-gateway-public-ip-isnt-used-to-connect-outbound).
87
91
88
92
- name: Traffic routes
89
93
questions:
@@ -111,7 +115,7 @@ sections:
111
115
112
116
- question: How can I use custom IP prefixes (BYOIP) with NAT gateway?
113
117
answer: |
114
-
You can use public IP prefixes and addresses derived from custom IP prefixes (BYOIP) with your NAT gateway. See [Custom IP address prefix (BYOIP)](../virtual-network/ip-services/custom-ip-address-prefix.md) to learn more.
118
+
You can use public IP prefixes and addresses derived from custom IP prefixes (BYOIP) with your NAT gateway. To learn more, see [Custom IP address prefix (BYOIP)](../virtual-network/ip-services/custom-ip-address-prefix.md).
115
119
116
120
- question: Can an IPv6 public IP address be used with NAT gateway?
117
121
answer: |
@@ -171,14 +175,14 @@ sections:
171
175
172
176
- question: Can a zone-redundant public IP address be attached to a NAT gateway?
173
177
answer: |
174
-
A zone-redundant public IP address can be attached to a "no zone" NAT gateway only. A NAT gateway designated to a specific zone must be attached to a public IP address from the same zone.
178
+
A zone-redundant public IP address can be attached to either a no zone NAT gateway or a NAT gateway assigned to a specific availability zone. For more information, see [NAT Gateway and availability zones](/azure/nat-gateway/nat-availability-zones).
175
179
176
180
- name: NAT gateway and basic SKU resources
177
181
questions:
178
182
- question: Are basic SKU resources (Basic Load Balancer and Basic public IP addresses) compatible with NAT gateway?
179
183
answer: |
180
-
No. NAT gateway is compatible with standard SKU resources. Learn more from [NAT gateway basics](./nat-overview.md#azure-nat-gateway-basics)
181
-
You can upgrade your basic Load balancer and basic public IP address to standard in order to work with NAT gateway.
184
+
No. NAT gateway is compatible with standard SKU resources. Learn more from [NAT gateway basics](./nat-overview.md#azure-nat-gateway-basics).
185
+
Upgrade your basic Load balancer and basic public IP address to standard in order to work with NAT gateway.
182
186
183
187
To upgrade a basic Load balancer to standard, see [Upgrade Azure Public Load Balancer](../load-balancer/upgrade-basic-standard.md).
184
188
To upgrade a basic public IP to standard, see [Upgrade a public IP address](../virtual-network/ip-services/public-ip-upgrade-portal.md).
@@ -214,6 +218,10 @@ sections:
214
218
answer: |
215
219
Yes. The addition of a NAT gateway to a subnet with service endpoints doesn't affect the endpoints. [Virtual Network service endpoints](../virtual-network/virtual-network-service-endpoints-overview.md) enable a more specific route for the destination Azure service traffic they represent. Traffic for the service endpoint traverses the Azure backbone instead of the internet. Private Link is recommended over service endpoints when connecting to Azure PaaS services directly from your Azure network.
216
220
221
+
- question: Can I use NAT gateway with my Databricks workspace?
222
+
answer: |
223
+
Yes. NAT gateway can be used in one of two ways with Databricks if you enable secure cluster connectivity in your workspace. If you use secure cluster connectivity with the **default VNet** that Azure Databricks creates, Azure Databricks automatically creates a NAT gateway for outbound traffic from your workspace's subnets. The NAT gateway is created within the managed resource group managed by Azure Databricks. You can't modify this resource group or any resources provisioned within it. If you enable secure cluster connectivity on your workspace that uses VNet injection, you can deploy a NAT gateway on both of the workspace's subnets to provide outbound connectivity. You can modify the configuration for customized outbound connectivity requirements in this case. For more information, see [Secure cluster connectivity](/azure/databricks/security/network/classic/secure-cluster-connectivity).
0 commit comments