azure-docs icon indicating copy to clipboard operation
azure-docs copied to clipboard

Cloud Shell Integration - why 3 subnet we can merge it into 2 is this supported and what's min addr sizes for each subnet

Open eilz opened this issue 2 years ago • 4 comments

CloudShell VNET Integration is a little puzzling: a) Why do we need 3 subnets (the diagram only shows 1 subnet) it doesn't state that both storage and relay need its own subnet.
b) If I amended the sample JSON template we can merge this to use 2 subnets e.g. (merge Relay and Storage Subnet) in one, just have to enable the Service Endpoint for MS.Storage to allow this to work, is there any reason why we cant use this set up, is it supported ? c) Also as we have 3 subnets what is the minimum addr space size of each of these subnet, for example when we launch multiple cloud shell instances we only ever see 1 IP being used from the Relay Subnet, so why do we need and waste IPs from the other subnets, e.g. what's the smallest size subnet we can use on each of the 3 default subnets.
Thanks Eilz


Document details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

eilz avatar Oct 05 '22 14:10 eilz

@eilz Thanks for your feedback! We will investigate and update as appropriate.

ManoharLakkoju-MSFT avatar Oct 05 '22 15:10 ManoharLakkoju-MSFT

@theJasonHelmick Please review. This issue was routed to Azure Resource Manager.

davidsmatlak avatar Oct 05 '22 19:10 davidsmatlak

#label:"cloud-shell/svc"

davidsmatlak avatar Oct 05 '22 21:10 davidsmatlak

@SwathiDhanwada-MSFT please remove the label azure-resource-manager/svc because this issue is for a Cloud Shell article. Thanks!

cc: @theJasonHelmick @maertendMSFT

davidsmatlak avatar Oct 19 '22 15:10 davidsmatlak

#reassign:theJasonHelmick

sdwheeler avatar Nov 16 '22 17:11 sdwheeler

Hi @eilz - Thank you for the question and reporting this. You are correct that you may be able to use fewer subnets, however this is not recommended and not supported. We support three subnets. You need at least 1 IP address for the Relay subnet and enough IP address in the container subnet to support the number of concurrent sessions you expect to use for Cloud Shell.

We will update the docs with this information - thank you for your help and questions

theJasonHelmick avatar Sep 29 '23 16:09 theJasonHelmick