We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF or read online on Scribd
You are on page 1/ 4
1125124, 737 PM ‘Azure Load Balancer NAT Pool fo NAT Rule Migration | Micosaft Learn
Tutorial: Migrate from Inbound NAT
Pools to NAT Rules
Article + 10/10/2023
Azure Load Balancer NAT Pools are the legacy approach for automatically assigning Load
Balancer front end ports to each instance in a Virtual Machine Scale Set. NAT Rules on
Standard SKU Load Balancers have replaced this functionality with an approach that is both
easier to manage and faster to configure.
Why Migrate to NAT Rules?
NAT Rules provide the same functionality as NAT Pools, but have the following advantages:
* NAT Rules can be managed using the Portal
* NAT Rules can leverage Backend Pools, simplifying configuration
* NAT Rules configuration changes apply more quickly than NAT Pools
* NAT Pools cannot be used in conjunction with user-configured NAT Rules
~ Migration Process
The migration process will create a new Backend Pool for each Inbound NAT Pool existing
on the target Load Balancer. A corresponding NAT Rule will be created for each NAT Pool
and associated with the new Backend Pool. Existing Backend Pool membership will be
retained.
@ Important
The migration process removes the Virtual Machine Scale Set(s) from the NAT Pools
before associating the Virtual Machine Scale Set(s) with the new NAT Rules. This
requires an update to the Virtual Machine Scale Set(s) model, which may cause a brief
downtime while instances are upgraded with the model
QO Note
ntips:leam mierosof.comlen-ustazurelload-balancerloae-balancer-nat;poolmigration wa‘vasa, 737 Pm ‘Azure Load Balancer NAT Poa o NAT Rule Migration | Merosaft Learn
Frontend port mapping to Virtual Machine Scale Set instances may change with the
move to NAT Rules, especially in situations where a single NAT Pool has multiple
associated Virtual Machine Scale Sets. The new port assignment will align sequentially
to instance ID numbers; when there are multiple Virtual Machine Scale Sets, ports will
be assigned to all instances in one scale set, then the next, continuing
O Note
Service Fabric Clusters take significantly longer to update the Virtual Machine Scale Set
model (up to an hour).
Prerequisites
In order to migrate a Load Balancer's NAT Pools to NAT Rules, the Load Balancer SKU
must be ‘Standard’. To automate this upgrade process, see the steps provided in
Upgrade a Basic Load Balancer to Standard with PowerShell
Virtual Machine Scale Sets associated with the target Load Balancer must use either a
‘Manual’ or 'Automatic! upgrade policy-'Rolling' upgrade policy is not supported. For
more information, see Virtual Machine Scale Sets Upgrade Policies
Install the latest version of PowerShell
Install the Azure PowerShell modules
Install the ‘AzureLoadBalancerNATPoolMigration’ module
Install the module from the PowerShell Gallery
Azure PowerShell
Install-Module -Name AzureLoadBalancerNATPoolMigration -Scope CurrentUser -
Repository PSGallery -Force
Use the module to upgrade NAT Pools to NAT Rules
1. Connect to Azure with Connect-AzAccount
2. Find the target Load Balancer for the NAT Rules upgrade and note its name and
Resource Group name
3. Run the migration command
nttps:leam mierosot.comlen-ustazurelload-balancerloae-balancer-nat;poolmigration 218Example: specify the Load Balancer name and Resource Group name
saute PowerShel
Start-AzNATPoolMigration -ResourceGroupNane -
LoadBalancerName
Example: pass a Load Balancer from the pipeline
‘Azure PowerShell
Get-AzLoadBalancer -ResourceGroupName -ResourceGroupName
-Name | Start-
AZNATPooIMigration
Common Questions
Will migration cause downtime to my NAT ports?
Yes, because we must first remove the NAT Pools before we can create the NAT Rules, there
will be a brief time where there is no mapping of the front end port to a back end port.
O Note
Downtime for NAT‘ed port on Service Fabric clusters will be significantly longer--up to
an hour for a Silver cluster in testing.
Do I need to keep both the new Backend Pools created
during the migration and my existing Backend Pools if the
membership is the same?
No, following the migration, you can review the new backend pools. If the membership is
the same between backend pools, you can replace the new backend pool in the NAT Rule
with an existing backend pool, then remove the new backend pool
nttps:leam mierosof.comlen-ustazurelload-balancerloae-balancer-nat;poolmigration aia“125124, 7.37 PM ‘Azure Load Balancer NAT Pool fo NAT Rule Migration | Microsoft Learn
Next steps
* Learn about Managing Inbound NAT Rules
* Learn about Azure Load Balancer NAT Pools and NAT Rules
hntps:leam mirosof.conver-usiazurelload-Dalancerlload-balancer-natpookmigration 48