topic Re: Azure, vmss cluster, outbound connections to multiple public IPs in Cloud Firewall

Azure, vmss cluster, outbound connections to multiple public IPs

Vortok — Mon, 07 Aug 2023 13:17:11 GMT

Hello,

I've got VMSS cluster deployed in Azure.

By default the outgoing traffic is NATted to the outbound interface of each of the gateways (they have public IPs).

What I need to do is to have one specific server from behind the Checkpoint, to go out with static public IP, which is different from the public IPs of the gateways.

Any ideas on how to do that ?

Re: Azure, vmss cluster, outbound connections to multiple public IPs

Nir_Shamir — Tue, 08 Aug 2023 04:27:22 GMT

there a few options , some will affect all the traffic.

1) outbound NAT on the external LB, this will affect of course all outgoing traffic.

2) deploy a NAT GW so all the traffic will go out from the NAT GW IP , again affects all traffic.

3) work with Cluster HA , which can have one specific IP for outgoing connections. here you can add more then one specific external IP and have multiple outgoing NAT if you need it later on.