Azure VM Internet Access Options

The options to enable Internet access from resources in an Azure virtual network.
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
00:00 - Introduction
00:19 - Background to VM Internet access
02:50 - Explicit Internet Access
03:12 - Instance level
04:21 - External Standard Load Balancer
07:25 - NAT Gateway
12:31 - Azure Firewall
15:14 - Implicit public IP
18:04 - Summary
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
🥇 Certification Content Repository
🔗 github.com/johnthebrit/Certif...
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
🧠 Mentoring Content
🔗 • Virtual Mentoring
❔ Questions? Maybe I answered it in my FAQ
🔗 savilltech.com/faq
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
👂 Enable the subtitles and from there you can translate to your native language via the auto-translate feature in settings! • KZbin Captions and A... for a demo of using this feature.
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azure #johnsavillstechnicaltraining #onboardtoazure #cloud

[@NTFAQGuy]

The ways to enable Internet access from resources in a virtual network! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 🤔 Due to the channel growth and number of people wanting help I no longer can answer or even read questions and they will just stay in the moderation queue never to be seen so please post questions to other sites like Reddit, Microsoft Community Hub etc. 👂 Translate the captions to your native language via the auto-translate feature in settings! kzbin.info/www/bejne/rGbFZmZjhcx4o6s for a demo of using this feature. Thanks for watching! 🤙

[@papajohnscookie]

I have a ticket in my queue at work to research this, thanks for the video!

[@DerekBMoore]

It seems like every enterprise tenant in azure I’ve been in can’t think outside of using some proxy for internet, this is great. Thank you John.

[@robertkenyon4640]

In two years, this video is going to explode in popularity.

[@NTFAQGuy]

ROFL

[@ansariwn]

Amazing video, the reason I like it is because you covered all the options available which makes it so useful to watch. Many thanks!

[@NTFAQGuy]

Glad it was helpful!

[@lanetltd]

Another great video. One really good and important point to remember as explained here. The NAT Gateway is not zone redundant...

[@Hemanadhkurra]

Hi john. Big fan of u. Like the way you explain in depth and how it works in the backend

[@NTFAQGuy]

Hey, thanks!

[@ezziukas]

Loved this one. Exactly what I was struggling to understand by myself - and this video is nicely put everything in placed.

[@NTFAQGuy]

Awesome!

[@johnthompson3530]

Excellent video. Thanks John for a great explanation.

[@NTFAQGuy]

Very welcome

[@henriquealexandreh]

Thanks for the heads-up John. This is super important!

[@NTFAQGuy]

You bet!

[@nathanmcgee2732]

I love how whenever an Azure announcement comes up that I find concerning it's shortly followed by one of your videos explaining everything perfectly. I can see this affecting a lot of ASR deployments as the majority of Azure DR environments seem to just be a placeholder vnet. Also interested to see if Microsoft will make any changes to some of the issues we see with forced tunneling, like windows activation failing.

[@NTFAQGuy]

Maybe as part of the recovery plan it spins up a nat gateway via infra as code? Just a change in our behavior I guess.

[@Dikimkd]

Loved this. Keep up the good work!!! 💪

[@NTFAQGuy]

Thank you!!

[@mikestechstuff3289]

So funny I was just looking for this solution for my AVD pool! Thanks John!

[@NTFAQGuy]

Glad to help!

[@MohamedRoushdy]

I\ve always been wondering why do the VMs have access to the internet by default, now I jnow. Thanks a million. You are THE BEST!!

[@NTFAQGuy]

You are welcome!

[@cazmaj]

Thank you john, really interesting!

[@NTFAQGuy]

Glad you enjoyed it

[@bkisme]

As an alternative to Azure Firewall (which is relatively expensive to use) I've seen virtual firewalls like Cisco ASA deployed as virtual machines with directly-assigned public IP addresses. That is kind-of the nice thing about Azure in-general; you're not restricted to using Microsoft's built-in solutions. Great video.

[@NTFAQGuy]

I did briefly mention you could use an NVA. Should have drew it :)

[@aqueleAntonino]

as usual fantastic video. extremely educational. I'll take a L size tshirt or XL hoodie version of that your shirt please! ☁

[@ShadowRaxx]

Thanks John

[@IncorrectTarget.]

Thank you so much!

[@NTFAQGuy]

Glad it helped!

[@Indiantr102]

first like❤

[@NTFAQGuy]

lol

[@mikehsu754]

Thanks for the video. Quick question.. does that mean if I don't explicitly implement outbound access I won't be able to reach Azure services (like Azure Storage, etc), since those are connecting via public IP?

[@NTFAQGuy]

You could use private link for example to not require Internet access.

[@mikehsu754]

I was wondering more from the perspective of what will break with existing automated deployment scripts in 9/2025. I guess we'll need to include some mechanism to reach Azure services and not count on them being accessible by default any more. Thanks again for your great videos!!

[@samnadim9913]

Can we UDR to an egress fw to get around needing a nat gateway due to the new Microsoft announcement about default outbound access changing?

[@NTFAQGuy]

I cover this in the video

[@GregThomson]

Have MS indicated they will have a free option for for labs and small deployments that have simple needs or is the "dirty" route your only option?

[@vegasjosejavier]

Other than the "free trial" not much

[@JazzyStahh]

Is it just me or are John’s muscles getting bigger?

[@NTFAQGuy]

nah my head is shrinking.

[@JazzyStahh]

@@NTFAQGuy 😂😂😂

[@IrlymMylros]

Thanks, did you forget about BASTION?.

[@NTFAQGuy]

Bastion is not an egress Internet service.

[@IrlymMylros]

Yes Thanks for clearifying

[@joeeager495]

Very disappointed that implicit is going away. That and bastion was a great way to spin up an isolated vm but still have easy outgoing internet access.