We are looking for a Azure service to route the port based traffic between all vnets and Azure Firewall.

Siddarth Gera 25

Is there any Azure service (IaaS, PaaS etc) to setup port based network routing between all vnets and Azure Firewall Or between Azure Firewall and VPN gateway which can manage the traffic.

We need to send only 443 traffic to a third party firewall. How should we route the traffic with the use of ports ?

GitaraniSharma-MSFT 47,676 Reputation points Microsoft Employee

2023-01-23T13:16:33.41+00:00

Hello @Siddarth Gera ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Could you please provide some more details about your existing network setup and requirement?

There is no readily available port-based routing service.

We have port-based network filtering services like Azure NSGs (Network Security Groups) and Azure Firewall which can filter the network traffic by source and destination IP address, port, and protocol.

And we have UDRs (User defined Routes) or custom routes which can be created in Azure to override Azure's default system routes, or to add more routes to a subnet's route table to define how traffic initiated in that subnet is routed.

You may combine NSGs and UDRs to achieve the desired routing.

Regards,
Gita
GitaraniSharma-MSFT 47,676 Reputation points Microsoft Employee

2023-01-27T19:14:27.1133333+00:00

@Siddarth Gera , could you please provide an update on this post and share the requested details for further discussion?

1 answer

Siddarth Gera 25 Reputation points

2023-02-08T12:16:31.3566667+00:00

This has been resolved with the help of Microsoft Enterprise support, thank you very much!
Please sign in to rate this answer.
GitaraniSharma-MSFT 47,676 Reputation points Microsoft Employee

2023-02-08T12:24:55.0833333+00:00

@Siddarth Gera , thank you for the update. Glad to hear that the issue is now resolved. It would be great if you could share the summary of the resolution in your answer for the benefit of the community.

Siddarth Gera 25 Reputation points

2023-02-08T12:32:57.57+00:00

Hi Gita, This issue got resolved after removing an incorrect route which was available on gateway subnet UDR, which wasn't needed.

The resolution was based on the concept of Azure (longest prefix match) for routing, Thank You!
Sign in to comment