How do I block replication traffic passing through Azure NSv?

03/26/2020 2 People found this article helpful 480,514 Views

Description

If you are using an NSv firewall to control outbound network traffic from VMs, the appliance might get throttled if all the replication traffic passes through the NSv. We recommend creating a network service endpoint in your virtual network for "Storage" so that the replication traffic does not go to the NSv.

Note that:

Azure's default system route for Azure VM replication is 0.0.0.0/0.
Typically, NSv deployments also define a default route (0.0.0.0/0) that forces outbound Internet traffic to flow through the NSv. The default route is used when no other specific route configuration can be found.
The same limitation also applies when using default routes for routing all Azure VM traffic to on-premises deployments.

Resolution

1. Creating Network Service Endpoint for Storage Under Home | Virtual Networks | [Your Virtual Network].

Select your Azure virtual network and click on 'Service endpoints'.

2. Click Add and select ‘Microsoft Storage ‘ under ‘Service and Subnets should be selected as Select All and click ‘Add’.

This will re-route the storage traffic away from Sonicwall NSv firewall.

Not Finding Your Answers?

ASK THE COMMUNITY

Was This Article Helpful?

YES NO

How do I block replication traffic passing through Azure NSv?

Description

Resolution

Related Articles

Categories

Not Finding Your Answers?

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Follow Us

Subscribe to newsletter

Stay In Touch