Why Azure NIC effective routes different from Get-NetRoute result inside VM?

Question

Hi!
I assumed "Effective routes" of a network interface in Azure should be the same as the response of Get-NetRoute cmdlet in VM that the network interface is attached to.
Why Is the difference and how can I enforce/sync "Effective routes" to be applied for VM?
thanks

Answer 1

Apologies for the confusion here. Yes, both firewall rules and routes at OS level will be different from Azure level routes. The route table created on Azure will not imprint those routes on guest OS level.

Answer 2

Effective routes on the NIC are the combination of routes from the multiple route tables attached to that NIC. Whereas Windows firewall is an OS level firewall system. The NSG's or UDR's created on top of Azure VM level NIC will not alter OS level firewall configuration. To implement route sync between them needs a manual configuration.

---

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

Answer 3

Thanks for response, but my question is about routing and has nothing to do with firewalls or NSG's.
regards
Szabolcs