Public IP that is always static and may be zone-redundant, zonal or IPv6. It blocks inbound traffic until an NSG permits it, and Bastion, Azure Firewall, VPN gateways and Standard Load Balancer all require it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Standard SKU public IP in context, with comparison tables and the common traps.
Terms in this definition
- Zone-redundant
Distributed over every availability zone in a region, allowing it to withstand losing one zone; a StandardV2 NAT gateway is an example.
- Zonal
Placed in a single availability zone, as with a Standard NAT gateway. It continues to serve subnet resources located in other zones, but goes down if its own zone fails.
- IPv6
Addressing based on 128 bits, available in Standard public IPs and dual-stack VNets. Public IPs for Azure Firewall and Bastion have to be IPv4.
- Default security rules
Built-in NSG rules at priorities 65000-65500: AllowVnetInBound, AllowAzureLoadBalancerInBound and DenyAllInBound, plus AllowVnetOutBound, AllowInternetOutBound and DenyAllOutBound. Removal is impossible; custom rules at 100-4096 take precedence.
- Azure Firewall
Stateful network firewall run by Azure as a managed service; it can be placed in Virtual WAN hubs and administered through Firewall Manager.
- VPN
Traffic sent through an encrypted tunnel across a public network, as in a site-to-site connection to a VPN gateway in an Azure GatewaySubnet.
- Azure Load Balancer
Layer-4 load balancer operating within a region, with zone redundancy on the Standard SKU; it has no WAF, doesn't terminate TLS and can't route by URL.
- ALL
A DAX function that ignores any filters and gives back every row of a table or every value of the named columns. Used within CALCULATE, it works as a modifier that clears filters, although REMOVEFILTERS states that intent more clearly where it is available.