VMSS Azure – Is it possible to customize or replace default Load Balancer?

[jennyado]

Hi all,

I’m currently reviewing a VMSS deployment in Azure with Check Point and came across the following limitation:

Creating a VMSS environment with a Load Balancer name different from the default ("frontend-lb" or "backend-lb") is not supported.

This raised a design question for our scenario.

We are evaluating the possibility of deploying an additional (parallel) Load Balancer to handle specific traffic, with the goal of eventually migrating all traffic to this new Load Balancer in a controlled manner.

So the main questions are:

👉 Is it possible to modify or replace the default Load Balancer used by the VMSS deployment?
👉 Has anyone successfully implemented a parallel Load Balancer strategy in this architecture?
👉 Are there any recommended approaches or best practices for gradually migrating traffic in a VMSS-based deployment?

From what I understand, the default Load Balancer seems tightly coupled to the VMSS deployment, but I would like to confirm whether there is any supported workaround or design alternative—especially in scenarios where traffic needs to be split or migrated to external security controls like an IPS.

Any insights or real-world experiences would be greatly appreciated.

Thanks in advance!