skills/ MicrosoftDocs/Agent-Skills

azure-virtual-network

Expert knowledge for Azure Virtual Network development including best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when configuring VNet IP/DNS, peering and routing, NSGs/service endpoints, MANA/CNI networking, or hybrid co

0
Installs
—
Rating
—
Success rate
1
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

1 files scannedscanner v1.2.0Oct 11, 2026

Content sha256 040960078f4ddfd2… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Azure Virtual Network Skill

This skill provides expert guidance for Azure Virtual Network. Covers best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
Best PracticesL35-L43Designing secure, high-performance VNets: NSG rule patterns, traffic flow, VM throughput tuning, TCP/IP optimization, and secure use of VNet service endpoints.
Decision MakingL44-L53Guidance on choosing VNet-related options: MANA support for VM sizes, upgrading Basic to Standard public IPs, routing preference and unmetered CDN traffic, cost trade-offs, and VNet integration for isolation.
Architecture & Design PatternsL54-L60Designing VNet architectures: subnet extension for migrations, VNet peering, hybrid two-tier apps, traffic mirroring with TAP, topology planning, and custom routing options.
Limits & QuotasL61-L68Network resource limits and behaviors for Azure VMs/VNets: accelerated networking support, public IP quotas, VM throughput caps, and Virtual Network scale/performance constraints.
SecurityL69-L78Securing Virtual Networks: network policies, encryption, service tags, service endpoint policies, and applying Azure Policy/security controls to VNets and Kubernetes traffic.
ConfigurationL79-L114Configuring Azure VNets: IPs (public/private, prefixes, IPv4/IPv6), DNS, MTU, DHCP, subnet delegation/peering, monitoring, and CNI/MANA networking for VMs, NVAs, Kubernetes, and PaaS.
DeploymentL115-L118Guidance for upgrading Azure Basic public IP addresses to Standard SKU, including requirements, steps, and considerations for network resources and downtime.

Best Practices

TopicURL
Apply Azure Virtual Network design best practiceshttps://learn.microsoft.com/en-us/azure/virtual-network/concepts-and-best-practices
Configure Azure NSG rules and traffic processinghttps://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works
Optimize Azure VM network throughput settingshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-optimize-network-bandwidth
Implement Azure virtual network service endpoints securelyhttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview
Apply TCP/IP performance tuning on Azure VMshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-tcpip-performance-tuning

Decision Making

TopicURL
Decide MANA support for existing Azure VM sizeshttps://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-mana-existing-sizes
Upgrade Azure Basic public IPs to Standard SKUhttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-basic-upgrade-guidance
Choose Azure routing preference via Microsoft or ISP networkhttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/routing-preference-overview
Use routing preference unmetered for Azure-to-CDN traffichttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/routing-preference-unmetered
Optimize Azure Virtual Network costs and trade-offshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-cost-optimization
Choose Azure VNet integration options for service isolationhttps://learn.microsoft.com/en-us/azure/virtual-network/vnet-integration-for-azure-services

Architecture & Design Patterns

TopicURL
Design subnet extension strategies for Azure migrationshttps://learn.microsoft.com/en-us/azure/virtual-network/subnet-extension
Implement hybrid two-tier application with Azure VNetshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-scenario-udr-gw-nva
Plan Azure virtual network topology and connectivityhttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm

Limits & Quotas

TopicURL
Understand limits and support for Azure Accelerated Networkinghttps://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-overview
Create Azure VM with static public IP and understand IP limitshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/virtual-network-static-public-ip
Understand Azure VM network throughput limitshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-machine-network-throughput
Understand Azure Virtual Network limits and behaviorshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq

Security

TopicURL
Configure Kubernetes network policies on Azurehttps://learn.microsoft.com/en-us/azure/virtual-network/kubernetes-network-policies
Apply security controls to Azure Virtual Networkshttps://learn.microsoft.com/en-us/azure/virtual-network/secure-virtual-network
Apply Azure Policy compliance controls to Virtual Networkhttps://learn.microsoft.com/en-us/azure/virtual-network/security-controls-policy
Configure Azure service tags for network security ruleshttps://learn.microsoft.com/en-us/azure/virtual-network/service-tags-overview
Configure and manage Azure Virtual Network encryptionhttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-encryption-faq
Secure Azure Storage egress with service endpoint policieshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview

Configuration

TopicURL
Configure Azure Network Adapter (MANA) for Linux VMshttps://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-mana-linux
Configure MANA behavior for NVAs on existing VM sizeshttps://learn.microsoft.com/en-us/azure/virtual-network/accelerated-networking-mana-network-virtual-appliance-opt-out
Configure Azure CNI for Kubernetes virtual networkshttps://learn.microsoft.com/en-us/azure/virtual-network/deploy-container-networking
Install and configure Azure CNI on Linux Docker hostshttps://learn.microsoft.com/en-us/azure/virtual-network/deploy-container-networking-docker-linux
Configure advertised gateway prefixes for hub VNetshttps://learn.microsoft.com/en-us/azure/virtual-network/how-to-advertised-gateway-prefixes
Configure subnet peering in Azure virtual networkshttps://learn.microsoft.com/en-us/azure/virtual-network/how-to-configure-subnet-peering
Create and configure an encrypted Azure virtual networkhttps://learn.microsoft.com/en-us/azure/virtual-network/how-to-create-encryption
Deploy a DHCP server VM for on-premises clientshttps://learn.microsoft.com/en-us/azure/virtual-network/how-to-dhcp-azure
Configure MTU settings for Azure virtual machineshttps://learn.microsoft.com/en-us/azure/virtual-network/how-to-virtual-machine-mtu
Configure public IP addresses for Azure Application Gateway frontendshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-application-gateway
Configure public IP addresses for Azure Firewall deploymentshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-firewall
Configure public IP usage with Azure Load Balancerhttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-load-balancer
Configure public IPs with Azure NAT Gateway for outbound SNAThttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-nat-gateway
Manage public IP addresses for Azure Virtual Machineshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-vm
Configure public IP addresses for Azure VPN gatewayshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-vpn-gateway
Onboard and configure custom IPv6 address prefixes in Azurehttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/create-custom-ip-address-prefix-ipv6-portal
Onboard and configure custom IPv4 address prefixes in Azurehttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/create-custom-ip-address-prefix-portal
Configure default outbound access for Azure VMshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access
Manage Azure custom IP address prefixes and migrationshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/manage-custom-ip-address-prefix
Create and manage Azure public IP address prefixeshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/manage-public-ip-address-prefix
Configure monitoring and alerts for Azure Public IP addresseshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/monitor-public-ip
Use Azure Monitor metrics for Public IP addresseshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/monitor-public-ip-reference
Configure Azure public IP address prefixes and zoneshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-address-prefix
Configure private and public IPs on Azure network interfaceshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/virtual-network-network-interface-addresses
Configure and manage Azure public IP addresseshttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/virtual-network-public-ip-address
Configure monitoring for Azure Virtual Network with Azure Monitorhttps://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network
Reference for Azure Virtual Network monitoring datahttps://learn.microsoft.com/en-us/azure/virtual-network/monitor-virtual-network-reference
Use built-in Azure Policy definitions for Virtual Networkhttps://learn.microsoft.com/en-us/azure/virtual-network/policy-reference
Configure subnet delegation for Azure PaaS serviceshttps://learn.microsoft.com/en-us/azure/virtual-network/subnet-delegation-overview
Set up dynamic DNS registration for Azure VMshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-ddns
Configure DNS name resolution for Azure virtual networkshttps://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances
Understand and configure Azure IP 168.63.129.16 usagehttps://learn.microsoft.com/en-us/azure/virtual-network/what-is-ip-address-168-63-129-16

Deployment

TopicURL
Upgrade Azure Basic public IPs to Standard SKUhttps://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-upgrade

Files

1
12.4 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from MicrosoftDocs/Agent-Skills8

azure-active-directory-b2c

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configur

Scan passed 0
azure-advisor

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azu

Scan passed 0
azure-ai-vision

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Visio

Scan passed 0
azure-aks-edge-essentials

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc,

Scan passed 0
azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-

Scan passed 0
azure-anomaly-detector

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomal

Scan passed 0
azure-anyscale-on-azure

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, and deployment. Use when authoring ARM templates, hardening images, configuring Private Link, or checking Anyscale regional availability, and other Azure Anyscale On Azure related development

Scan passed 0
azure-api-center

Expert knowledge for Azure Api Center development including best practices, security, configuration, integrations & coding patterns, and deployment. Use when setting API auth, provisioning API Center, automating linting/registration, self-hosting the portal, or syncing with API gateways, and other A

Scan passed 0

Related devops skillsscan passed

kubernetes-patterns

Kubernetes workload patterns, resource management, RBAC, probes, autoscaling, ConfigMap/Secret handling, and kubectl debugging for production-grade deployments. Use when writing or reviewing Kubernetes manifests, or debugging probes, RBAC, autoscaling, or resource limits.

Scan passed 0
land-and-deploy

Land and deploy workflow. (gstack)

Scan passed 0
wrangler

Run or troubleshoot Wrangler CLI commands and configure Worker projects for local development, Previews, deployment, and Cloudflare resource management.

Scan passed 0
adapter-fetch

Deploy tRPC on WinterCG-compliant edge runtimes with fetchRequestHandler() from @trpc/server/adapters/fetch. Supports Cloudflare Workers, Deno Deploy, Vercel Edge Runtime, Astro, Remix, SolidStart. FetchCreateContextFnOptions provides req (Request) and resHeaders (Headers) for context creation. The

Scan passed 0
shipping-and-launch

Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

Scan passed 0
firebase-app-hosting-basics

Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when deploying Next.js/Angular apps, configuring apphosting.yaml or firebase.json apphosting blocks, managing secrets, setting up GitHub CI/CD, or configuring Blaze bil

Scan passed 0