Network Watcher tool that tests a packet and reports whether it would be let through or dropped, naming the deciding NSG rule.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains IP flow verify in context, with comparison tables and the common traps.
Terms in this definition
- Network Watcher
Collection of Azure network troubleshooting tools: next hop, IP flow verify, packet capture, Connection Monitor and flow logs, among others.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- Default security rules
Built-in NSG rules at priorities 65000-65500: AllowVnetInBound, AllowAzureLoadBalancerInBound and DenyAllInBound, plus AllowVnetOutBound, AllowInternetOutBound and DenyAllOutBound. Removal is impossible; custom rules at 100-4096 take precedence.
Related terms
- 5-tuple
The five values that identify a flow: protocol plus the source and destination IP addresses and ports. Azure Load Balancer hashes them by default to spread traffic, and IP flow verify in Network Watcher takes them as its input.
- Network Watcher NSG diagnostics
Covers cases IP flow verify cannot, simulating a flow (ICMP too) against a VM, NIC, scale set NIC or Application Gateway v2 to report allow or deny and the rules involved.