Skill

azure-virtual-network

Expert knowledge for Azure Virtual Network development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, and configuration. Use when designing VNets, NSGs, service endpoints, VNet peering, VPN gateways, or Azure Firewall/NAT gateways, and other Azure Virtual Network related development tasks. Not for Azure Networking (use azure-networking), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Virtual WAN (use azure-virtual-wan), Azure VPN Gateway (use azure-vpn-gateway).

npx claudepluginhub atc-net/atc-agentic-toolkit --plugin azure

Tool Access

This skill uses the workspace's default tool permissions.

Preview

This skill provides expert guidance for Azure Virtual Network. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

SKILL.md

Similar Skills

azure-compute

902

Routes Azure VM/VMSS queries to recommenders for sizing, pricing, autoscale, orchestration or troubleshooters for connectivity like RDP/SSH failures, NSG blocks, black screens.

azure

network-architecture

Guides AWS VPC network design: subnet tiers (public/private/database), AZ distribution, CIDR ranges, NAT gateways, private endpoints, DNS zones, API gateways.

2 files

cloud-foundation-principles

payload

41.6k

Guides Payload CMS config (payload.config.ts), collections, fields, hooks, access control, APIs. Debugs validation errors, security, relationships, queries, transactions, hook behavior.

11 files

payload

Stats

Parent Repo Stars1

Parent Repo Forks1

Last CommitApr 3, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

Azure Virtual Network Skill

How to Use This Skill

IMPORTANT for Agent: This file may be large. Use the Category Index below to locate relevant sections, then use read_file with specific line ranges (e.g., L136-L144) to read the sections needed for the user's question This skill requires network access to fetch documentation content. Use mcp_microsoftdocs:microsoft_docs_fetch to retrieve full articles.

Fallback: Use the built-in WebFetch tool if the Microsoft Learn MCP server is not available.

Category Index

Category	Lines	Description
Troubleshooting	L29-L33	Diagnosing and fixing Azure VM/VNet connectivity issues: routing and NSG problems, NVAs and routing appliances, SMTP blocking, VNet peering, encryption, and VNet deletion errors.
Best Practices	L35-L45	Network performance and connectivity guidance: VNet design, NSGs, service endpoints, outbound access, MTU/TCP tuning, and tools to test throughput and latency on Azure VMs.
Decision Making	L47-L55	Guidance on design choices: when to use accelerated networking, routing preferences, VNets vs appliances, IP upgrade paths, VNet integration options, and cost/performance trade-offs.
Architecture & Design Patterns	L57-L65	Designing VNet architectures: subnet extension for migrations, VNet peering, hybrid two-tier apps, traffic mirroring with TAP, topology planning, and custom routing options.
Limits & Quotas	L67-L72	VM networking limits: MANA support per VM size, static public IP assignment and quotas, and per-VM network throughput caps and constraints.
Security	L74-L81	Securing virtual networks with policies and encryption, including Kubernetes network policies, Azure Policy for VNets, VNet encryption, and restricting storage egress via service endpoint policies.
Configuration	L83-L110	Configuring Azure Virtual Network behavior: IPs (public/private/custom), NAT/load balancer/firewall/VPN, DNS, DHCP, monitoring, policies, subnet delegation, and encryption.

Troubleshooting

Topic	URL
Register and create Azure Virtual Network routing appliances	https://learn.microsoft.com/en-us/azure/virtual-network/how-to-create-virtual-network-routing-appliance
Troubleshoot Azure Virtual Network encryption scenarios	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-encryption-faq

Best Practices

Topic	URL
Understand Azure Accelerated Networking internals on Linux	https://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-how-it-works
Apply Azure Virtual Network design best practices	https://learn.microsoft.com/en-us/azure/virtual-network/concepts-and-best-practices
Tune MTU settings for Azure virtual machines	https://learn.microsoft.com/en-us/azure/virtual-network/how-to-virtual-machine-mtu
Understand and control default outbound access for Azure VMs	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access
Configure Azure NSG rules and traffic processing	https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works
Optimize Azure VM network throughput settings	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-optimize-network-bandwidth
Configure and use Azure VNet service endpoints	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview
Apply TCP/IP performance tuning on Azure VMs	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-tcpip-performance-tuning

Decision Making

Topic	URL
Decide when to use Azure Accelerated Networking	https://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-overview
Plan and execute upgrade from Basic to Standard public IPs	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-basic-upgrade-guidance
Choose Azure routing preference via Microsoft or ISP network	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/routing-preference-overview
Use routing preference unmetered for Azure-to-CDN traffic	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/routing-preference-unmetered
Optimize Azure Virtual Network costs and trade-offs	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-cost-optimization
Choose Azure VNet integration options for service isolation	https://learn.microsoft.com/en-us/azure/virtual-network/vnet-integration-for-azure-services

Architecture & Design Patterns

Topic	URL
Design subnet extension strategies for Azure migrations	https://learn.microsoft.com/en-us/azure/virtual-network/subnet-extension
Design and configure Azure Virtual Network peering	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
Implement hybrid two-tier application with Azure VNets	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-scenario-udr-gw-nva
Use Azure virtual network TAP for traffic mirroring	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-tap-overview
Plan Azure virtual network topology and connectivity	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm
Design and customize Azure virtual network routing	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

Limits & Quotas

Topic	URL
Check MANA support and constraints for existing VM sizes	https://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-mana-existing-sizes
Create Azure VM with static public IP and understand IP limits	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/virtual-network-static-public-ip
Understand Azure VM network throughput limits	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-machine-network-throughput

Security

Topic	URL
Configure Kubernetes network policies on Azure	https://learn.microsoft.com/en-us/azure/virtual-network/kubernetes-network-policies
Secure Azure Virtual Network deployments with layered controls	https://learn.microsoft.com/en-us/azure/virtual-network/secure-virtual-network
Apply Azure Policy compliance controls to Virtual Network	https://learn.microsoft.com/en-us/azure/virtual-network/security-controls-policy
Understand and use Azure Virtual Network encryption	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-encryption-overview
Secure Azure Storage egress with service endpoint policies	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview

Configuration

Topic	URL
Configure MANA behavior for NVA workloads with Azure Policy	https://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-mana-network-virtual-appliance-opt-out
Create and configure an encrypted Azure virtual network	https://learn.microsoft.com/en-us/azure/virtual-network/how-to-create-encryption
Deploy a DHCP server VM for on-premises clients	https://learn.microsoft.com/en-us/azure/virtual-network/how-to-dhcp-azure
Configure public IP addresses for Azure Application Gateway frontends	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-application-gateway
Configure public IP addresses for Azure Firewall deployments	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-firewall
Configure public IP usage with Azure Load Balancer	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-load-balancer
Configure public IPs with Azure NAT Gateway for outbound SNAT	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-nat-gateway
Manage public IP addresses for Azure Virtual Machines	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-vm
Configure public IP addresses for Azure VPN gateways	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-vpn-gateway
Onboard and configure custom IPv6 address prefixes in Azure	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/create-custom-ip-address-prefix-ipv6-portal
Onboard and configure custom IPv4 address prefixes in Azure	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/create-custom-ip-address-prefix-portal
Manage Azure custom IP address prefixes and migrations	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/manage-custom-ip-address-prefix
Create and manage Azure public IP address prefixes	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/manage-public-ip-address-prefix
Configure monitoring and alerts for Azure Public IP addresses	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/monitor-public-ip
Reference metrics and logs for monitoring Azure Public IPs	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/monitor-public-ip-reference
Configure Azure public IP address prefixes and zones	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-address-prefix
Configure private and public IPs on Azure network interfaces	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/virtual-network-network-interface-addresses
Create and manage Azure public IP address resources	https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/virtual-network-public-ip-address
Configure monitoring for Azure Virtual Network with Azure Monitor	https://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network
Reference monitoring metrics and logs for Azure VNets	https://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network-reference
Use built-in Azure Policy definitions for Virtual Network	https://learn.microsoft.com/en-us/azure/virtual-network/policy-reference
Configure subnet delegation for Azure PaaS services	https://learn.microsoft.com/en-us/azure/virtual-network/subnet-delegation-overview
Set up dynamic DNS registration for Azure VMs	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-ddns
Configure DNS name resolution for Azure virtual networks	https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances
Understand and configure Azure IP 168.63.129.16 usage	https://learn.microsoft.com/en-us/azure/virtual-network/what-is-ip-address-168-63-129-16