You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/nat-gateway.md
+5-10Lines changed: 5 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: asudbring
6
6
ms.subservice: aks-networking
7
7
ms.custom: devx-track-azurecli
8
8
ms.topic: how-to
9
-
ms.date: 05/30/2023
9
+
ms.date: 01/10/2024
10
10
ms.author: allensu
11
11
---
12
12
@@ -25,20 +25,17 @@ This article shows you how to create an Azure Kubernetes Service (AKS) cluster w
25
25
## Create an AKS cluster with a managed NAT gateway
26
26
27
27
* Create an AKS cluster with a new managed NAT gateway using the [`az aks create`][az-aks-create] command with the `--outbound-type managedNATGateway`, `--nat-gateway-managed-outbound-ip-count`, and `--nat-gateway-idle-timeout` parameters. If you want the NAT gateway to operate out of a specific availability zone, specify the zone using `--zones`.
28
-
* If no zone is specified when creating a managed NAT gateway, than NAT gateway is deployed to "no zone" by default. No zone NAT gateway resources are deployed to a single availability zone for you by Azure. For more information on non-zonal deployment model, see [non-zonal NAT gateway](/azure/nat-gateway/nat-availability-zones#non-zonal).
28
+
* If no zone is specified when creating a managed NAT gateway, then NAT gateway is deployed to "no zone" by default. When NAT gateway is placed in **no zone**, Azure places the resource in a zone for you. For more information on non-zonal deployment model, see [non-zonal NAT gateway](/azure/nat-gateway/nat-availability-zones#non-zonal).
29
29
* A managed NAT gateway resource can't be used across multiple availability zones.
30
30
31
-
```azurecli-interactive
31
+
```azurecli-interactive
32
32
az aks create \
33
33
--resource-group myResourceGroup \
34
34
--name myNatCluster \
35
35
--node-count 3 \
36
36
--outbound-type managedNATGateway \
37
37
--nat-gateway-managed-outbound-ip-count 2 \
38
38
--nat-gateway-idle-timeout 4
39
-
```
40
-
41
-
### Update the number of outbound IP addresses
42
39
43
40
* Update the outbound IP address or idle timeout using the [`az aks update`][az-aks-update] command with the `--nat-gateway-managed-outbound-ip-count` or `--nat-gateway-idle-timeout` parameter.
44
41
@@ -53,9 +50,7 @@ This article shows you how to create an Azure Kubernetes Service (AKS) cluster w
53
50
54
51
This configuration requires bring-your-own networking (via [Kubenet][byo-vnet-kubenet] or [Azure CNI][byo-vnet-azure-cni]) and that the NAT gateway is preconfigured on the subnet. The following commands create the required resources for this scenario.
55
52
56
-
> [!IMPORTANT]
57
-
> Zonal configuration for your NAT gateway resource can be done with managed or user-assigned NAT gateway resources.
58
-
> If no value for the outbound IP address is specified, the default value is one.
53
+
59
54
60
55
1. Create a resource group using the [`az group create`][az-group-create] command.
> A single NAT gateway resource cannot be used across multiple availability zones. To ensure zone-resiliency, it is recommended to deploy a NAT gateway resource to each availability zone and assign to subnets containing AKS clusters in each zone. For more information on this deployment model, see [NAT gateway for each zone](/azure/nat-gateway/nat-availability-zones#zonal-nat-gateway-resource-for-each-zone-in-a-region-to-create-zone-resiliency).
93
+
> A single NAT gateway resource can't be used across multiple availability zones. To ensure zone-resiliency, it is recommended to deploy a NAT gateway resource to each availability zone and assign to subnets containing AKS clusters in each zone. For more information on this deployment model, see [NAT gateway for each zone](/azure/nat-gateway/nat-availability-zones#zonal-nat-gateway-resource-for-each-zone-in-a-region-to-create-zone-resiliency).
99
94
> If no zone is configured for NAT gateway, the default zone placement is "no zone", in which Azure places NAT gateway into a zone for you.
100
95
101
96
5. Create a virtual network using the [`az network vnet create`][az-network-vnet-create] command.
0 commit comments