Home > Enterprise >  How to allow outbound traffic on internal load balancer
How to allow outbound traffic on internal load balancer

Time:04-13

I have several machines in a backend pool associated with an internal load balancer. However, they currently do not have outbound access. The azure portal error message

where all the interesting info is cut off. What am I missing?

CodePudding user response:

Even VM's in the backend pool of an ILB should have a default outbound IP. If you don't have outbound access have you checked the security group rules to make sure outbound traffic is allowed?

CodePudding user response:

I'm afraid you can't do this on the same LB for both inbound & outbound traffic.

  1. If you happen to use the Basic SKU, VMs behind the LB have internet access as outbound connections are NAT'ed by Azure. But, all VMs have to be in the same AZ. This wasn't a great idea & we declined it
  2. If you use a Standard SKU, outbound connections to the internet are not possible. We learned this after many failed & painful attempts. More details here
  3. As discussed in the above link, attaching a public IP to each VM nic isn't a good idea either
  4. What worked for us is to create another LoadBalancer specifically for outbound connections, attach public IP to that LB & configure outbound rules. More details here
  • Related