azure-nat-gateway

Plan and optimize Azure NAT Gateway deployments with SNAT capacity planning and flow log analysis.

Updated Dec 19, 2025
One-click install
npx skills add https://github.com/appliedailearner/upendra_kumar_portfolio --skill azure-nat-gateway-appliedailearner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-nat-gateway
Source: https://github.com/appliedailearner/upendra_kumar_portfolio/tree/main/.agent/skills/azure-nat-gateway
Command: npx skills add https://github.com/appliedailearner/upendra_kumar_portfolio --skill azure-nat-gateway-appliedailearner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure NAT Gateway deployment and management involve complex decisions around outbound connectivity, SNAT capacity, and deployment strategies. This skill provides expert guidance on troubleshooting, best practices, architecture patterns, limits and quotas, configuration, and deployment for scalable, reliable NAT Gateway setups.

Core Features & Use Cases

  • Troubleshooting NAT Gateway configurations and connectivity issues
  • Architecture & design patterns for placing NAT Gateway in VNets, hub-spoke topologies, and integration with NVAs and load balancers
  • Capacity planning and understanding limits, SNAT ports, IPs, and throughput
  • Configuration, deployment (ARM/Bicep), migration between Standard and StandardV2, and flow log setup
  • Monitoring, metrics, and alerts for NAT gateway traffic

Quick Start

Configure a NAT Gateway in your VNet to enable outbound connectivity and validate SNAT capacity for your workloads.

Frequently Asked Questions about azure-nat-gateway

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan SNAT port capacity for Azure NAT Gateway deployments?

To plan SNAT capacity for Azure NAT Gateway, evaluate your outbound connection volume, allocate sufficient public IP addresses, and monitor SNAT port exhaustion metrics to ensure reliable VNet connectivity.

What is the best way to architect Azure NAT Gateway in a hub-spoke VNet topology?

Architecting Azure NAT Gateway in a hub-spoke VNet topology involves attaching the gateway to the hub subnet for centralized egress, ensuring proper route table propagation, and integrating seamlessly with existing NVAs and load balancers.

How do I troubleshoot SNAT port exhaustion using NAT Gateway flow logs?

Troubleshoot SNAT port exhaustion by analyzing NAT Gateway flow logs to identify high outbound connection volumes, mapping traffic to specific subnets, and adjusting IP configurations or scaling out to increase available SNAT ports.

Can I deploy Azure NAT Gateway using ARM or Bicep templates?

Yes, you can deploy Azure NAT Gateway using ARM or Bicep templates by defining the resource properties, associating it with target subnets, and linking public IP prefixes to establish automated, scalable outbound connectivity.

Does Azure NAT Gateway support migrating between Standard and StandardV2 tiers?

Azure NAT Gateway supports migrating between Standard and StandardV2 tiers to optimize performance, requiring careful validation of VNet configurations, IP associations, and SNAT capacity limits during the deployment workflow.

Why is my Azure NAT Gateway configuration dropping outbound traffic?

Azure NAT Gateway drops outbound traffic when SNAT ports are exhausted, route tables misdirect egress traffic, or subnet associations are missing, requiring flow log analysis and configuration troubleshooting to restore connectivity.