{"id":24065,"date":"2025-02-21T08:08:58","date_gmt":"2025-02-21T08:08:58","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=24065"},"modified":"2025-02-21T08:10:39","modified_gmt":"2025-02-21T08:10:39","slug":"how-many-subnets-do-i-need","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=24065","title":{"rendered":"How Many Subnets Do I Need In An Azure Virtual Network?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">You&#8217;re designing a new virtual network in Azure. You&#8217;re going to have three different security zones in your application. How many subnets do you need? I will help you understand why many of you gave the incorrect answer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Back To Basics<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In a previous post, I explained that <a href=\"https:\/\/aidanfinn.com\/?p=23991\" target=\"_blank\" rel=\"noopener\" title=\"\">virtual networks do not exist<\/a>. Therefore, subnets do not exist. That&#8217;s why you cannot ping a default gateway. Packets do not leave a source NIC and route via default gateway to enter another subnet. Packets go from the source NIC, disappear in the physical network of Azure, and reappear at the destination NIC, whether it is on the same host, in the same data centre, in a neighbouring data centre, or on the other side of the world. Say it after me:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Subnets do not exist.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">If packets go straight from source to destination, what is the logic of creating subnets to isolate resources?<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Did We Segment Networks Using Subnets?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In the on-premises world, there are many reasons to segment a network. A common reason was to control the size of broadcast\/multicast domains. That&#8217;s not an issue in Azure because virtual networks do not support broadcasts\/multicasts. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From a security perspective, we segmented networks because we needed to isolate a firewall. The firewall is a central resource. A network runs from a top-of-rack switch to an ethernet interface in the firewall. That subnet uses the firewall to route to other subnets, possibly using the same cable (VLANs) or using different cables to other top-of-rack switches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Earlier I asked you to imagine a workload with three security zones. Let&#8217;s call them:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Web<\/li>\n\n\n\n<li>Application<\/li>\n\n\n\n<li>Database<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">That&#8217;s not too crazy. My security model requires me to ensure:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Internet users can only reach the web servers on HTTPS<\/li>\n\n\n\n<li>The Application server can only be talked to by the web servers.<\/li>\n\n\n\n<li>The database servers can only be talked to by the application servers.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">How would I create that? I&#8217;d set up three VLANs or subnets. Each VLAN would use a default gateway which is either the firewall or uses the firewall as a next hop to reach other VLANs. The firewall would then enforce my security intent, ensuring that only desired traffic could enter a VLAN to reach the required machines.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"655\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-1024x655.png\" alt=\"\" class=\"wp-image-24079\" srcset=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-1024x655.png 1024w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-300x192.png 300w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-768x491.png 768w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-1536x982.png 1536w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-2048x1309.png 2048w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-9-1200x767.png 1200w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This design works perfectly well in on-premises cable-oriented networks because the networks (physical or virtual) are connected via cable(s) running to the firewall.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Bringing Cable-Oriented Designs To Azure<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There is no finger-pointing here &#8211; I still have nightmares about an early Azure design I did where I created a VNet diagram with somewhere between 10-20 subnets. We all learn, and I&#8217;m hoping you learn from my mistakes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Using the same requirements as before for our workload, we can produce the below design &#8230; based on cable-oriented patterns.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"468\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-1024x468.png\" alt=\"\" class=\"wp-image-24080\" srcset=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-1024x468.png 1024w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-300x137.png 300w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-768x351.png 768w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-1536x702.png 1536w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-2048x936.png 2048w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-10-1200x548.png 1200w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">We create a single virtual network broken into 3 subnets. Each subnet has VMs for each role in the application. We then isolate each of the machines using NSGs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That seems perfect, right? It is secure. Traffic will get from A to B. If we implement the rules correctly, then only the correct traffic will flow. But this design does display a lack of understanding.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Remember: packets go directly from source to destination. There is no default gateway. If an NSG that is processing rules on an Application Server NIC is allowing or denying traffic, then what is the point of the subnet? The subnet is not doing the segmentation; the NSG is doing the segmentation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Can We Segment Networks In Azure?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The most basic segmentation method in an Azure virtual network is the Network Security Group (NSG). While the previous Azure diagram is not technically wrong, the below diagram displays a better understanding of the underlying technology:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"468\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-1024x468.png\" alt=\"\" class=\"wp-image-24085\" srcset=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-1024x468.png 1024w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-300x137.png 300w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-768x351.png 768w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-1536x702.png 1536w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-2048x936.png 2048w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-11-1200x548.png 1200w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In this design, we are accepting that neither the virtual network nor the subnet exist. We are using rules in the NSG to isolate each tier of the application:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Look at the below NSG to see how this isolation can be done with a very simple example:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"159\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12-1024x159.png\" alt=\"\" class=\"wp-image-24087\" srcset=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12-1024x159.png 1024w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12-300x47.png 300w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12-768x120.png 768w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12-1200x187.png 1200w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-12.png 1240w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The NSG denies all traffic by default (rule 4000). Then the only traffic permitted is what we modeled previously using subnets. The rules are processed on the NICs, so the only way traffic enters a VM is if it is compliant with the above NSG.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Yes, I could use groups of IP addresses, or better, Application Security Groups that make the rules more readable and allow aggregation\/abstraction of NICs &amp; IP addresses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">So Why Do We Create Subnets In Azure<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The primary reason is quite boring: technical requirements. Let me adjust my design a little. The database is going to be implemented using SQL Managed Instance instead of a VM. In the original VM-only design, there were no impediments to using a single subnet. SQL Managed Instance changes the technical requirements because it must be connected to a dedicated subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"468\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-1024x468.png\" alt=\"\" class=\"wp-image-24097\" srcset=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-1024x468.png 1024w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-300x137.png 300w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-768x351.png 768w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-1536x702.png 1536w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-2048x936.png 2048w, https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/image-13-1200x548.png 1200w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">That&#8217;s a simple example. A different example might be that I must use different address prefixes &#8211; see an older post by me on <a href=\"https:\/\/aidanfinn.com\/?p=23021\" target=\"_blank\" rel=\"noopener\" title=\"\">using a Linux VM as a NAT gateway<\/a> where the VM has an internal NIC on a regularly addressed subnet and a second NIC in a subnet that is addressed based on NAT requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Another example might be that you need to create custom routes for different NICs to the same prefix. For example, some NICs will go via your firewall to 0.0.0.0\/0. Other NICs might go to &#8220;None&#8221; (a blackhole that drops packets) for traffic going to 0.0.0.0\/0. The only way to implement that is to have one subnet for each Route Table. I&#8217;m not going to dive into routing here &#8211; let&#8217;s save that for another day.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Taking This Bigger<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">I am eventually going to explain enough things so I can show you why the classic Azure &#8220;big VNet&#8221; likely called production, test, or dev, is both an operational and security nightmare. But the above content, along with my other recent posts, are just part of the puzzle. Watch out for more content coming soon.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>You&#8217;re designing a new virtual network in Azure. You&#8217;re going to have three different security zones in your application. How many subnets do you need? I will help you understand why many of you gave the incorrect answer. Back To Basics In a previous post, I explained that virtual networks do not exist. Therefore, subnets &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=24065\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;How Many Subnets Do I Need In An Azure Virtual Network?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":24071,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-24065","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"AFinn\"\/>\n\t<meta name=\"google-site-verification\" content=\"TDKjbi2McB2eLIfL6KwPB3aQqv5E-mbcb2QYIcovGaI\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/aidanfinn.com\/?p=24065\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Aidan Finn, IT Pro - A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro\" \/>\n\t\t<meta property=\"og:description\" content=\"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/aidanfinn.com\/?p=24065\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-02-21T08:08:58+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-02-21T08:10:39+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@joe_elway\" \/>\n\t\t<meta name=\"twitter:title\" content=\"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro\" \/>\n\t\t<meta name=\"twitter:description\" content=\"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@joe_elway\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#article\",\"name\":\"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro\",\"headline\":\"How Many Subnets Do I Need In An Azure Virtual Network?\",\"author\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#person\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/ArchitectBluePrintCloudNetwork.jpg\",\"width\":1024,\"height\":1024,\"caption\":\"Architect Blueprint Cloud Networks\"},\"datePublished\":\"2025-02-21T08:08:58+00:00\",\"dateModified\":\"2025-02-21T08:10:39+00:00\",\"inLanguage\":\"en-GB\",\"commentCount\":7,\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#webpage\"},\"articleSection\":\"Uncategorized\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/aidanfinn.com\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=1#listItem\",\"name\":\"Uncategorized\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=1#listItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=1\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#listItem\",\"name\":\"How Many Subnets Do I Need In An Azure Virtual Network?\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#listItem\",\"position\":3,\"name\":\"How Many Subnets Do I Need In An Azure Virtual Network?\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=1#listItem\",\"name\":\"Uncategorized\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#person\",\"name\":\"AFinn\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#personImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"AFinn\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1\",\"name\":\"AFinn\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"AFinn\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#webpage\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065\",\"name\":\"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro\",\"description\":\"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/ArchitectBluePrintCloudNetwork.jpg\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065\\\/#mainImage\",\"width\":1024,\"height\":1024,\"caption\":\"Architect Blueprint Cloud Networks\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=24065#mainImage\"},\"datePublished\":\"2025-02-21T08:08:58+00:00\",\"dateModified\":\"2025-02-21T08:10:39+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#website\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/\",\"name\":\"Aidan Finn, IT Pro\",\"description\":\"A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#person\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro","description":"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.","canonical_url":"https:\/\/aidanfinn.com\/?p=24065","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"TDKjbi2McB2eLIfL6KwPB3aQqv5E-mbcb2QYIcovGaI","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/aidanfinn.com\/?p=24065#article","name":"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro","headline":"How Many Subnets Do I Need In An Azure Virtual Network?","author":{"@id":"https:\/\/aidanfinn.com\/?author=1#author"},"publisher":{"@id":"https:\/\/aidanfinn.com\/#person"},"image":{"@type":"ImageObject","url":"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/ArchitectBluePrintCloudNetwork.jpg","width":1024,"height":1024,"caption":"Architect Blueprint Cloud Networks"},"datePublished":"2025-02-21T08:08:58+00:00","dateModified":"2025-02-21T08:10:39+00:00","inLanguage":"en-GB","commentCount":7,"mainEntityOfPage":{"@id":"https:\/\/aidanfinn.com\/?p=24065#webpage"},"isPartOf":{"@id":"https:\/\/aidanfinn.com\/?p=24065#webpage"},"articleSection":"Uncategorized"},{"@type":"BreadcrumbList","@id":"https:\/\/aidanfinn.com\/?p=24065#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/#listItem","position":1,"name":"Home","item":"https:\/\/aidanfinn.com\/","nextItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?cat=1#listItem","name":"Uncategorized"}},{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?cat=1#listItem","position":2,"name":"Uncategorized","item":"https:\/\/aidanfinn.com\/?cat=1","nextItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?p=24065#listItem","name":"How Many Subnets Do I Need In An Azure Virtual Network?"},"previousItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?p=24065#listItem","position":3,"name":"How Many Subnets Do I Need In An Azure Virtual Network?","previousItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?cat=1#listItem","name":"Uncategorized"}}]},{"@type":"Person","@id":"https:\/\/aidanfinn.com\/#person","name":"AFinn","image":{"@type":"ImageObject","@id":"https:\/\/aidanfinn.com\/?p=24065#personImage","url":"https:\/\/secure.gravatar.com\/avatar\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g","width":96,"height":96,"caption":"AFinn"}},{"@type":"Person","@id":"https:\/\/aidanfinn.com\/?author=1#author","url":"https:\/\/aidanfinn.com\/?author=1","name":"AFinn","image":{"@type":"ImageObject","@id":"https:\/\/aidanfinn.com\/?p=24065#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g","width":96,"height":96,"caption":"AFinn"}},{"@type":"WebPage","@id":"https:\/\/aidanfinn.com\/?p=24065#webpage","url":"https:\/\/aidanfinn.com\/?p=24065","name":"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro","description":"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/aidanfinn.com\/#website"},"breadcrumb":{"@id":"https:\/\/aidanfinn.com\/?p=24065#breadcrumblist"},"author":{"@id":"https:\/\/aidanfinn.com\/?author=1#author"},"creator":{"@id":"https:\/\/aidanfinn.com\/?author=1#author"},"image":{"@type":"ImageObject","url":"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/ArchitectBluePrintCloudNetwork.jpg","@id":"https:\/\/aidanfinn.com\/?p=24065\/#mainImage","width":1024,"height":1024,"caption":"Architect Blueprint Cloud Networks"},"primaryImageOfPage":{"@id":"https:\/\/aidanfinn.com\/?p=24065#mainImage"},"datePublished":"2025-02-21T08:08:58+00:00","dateModified":"2025-02-21T08:10:39+00:00"},{"@type":"WebSite","@id":"https:\/\/aidanfinn.com\/#website","url":"https:\/\/aidanfinn.com\/","name":"Aidan Finn, IT Pro","description":"A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...","inLanguage":"en-GB","publisher":{"@id":"https:\/\/aidanfinn.com\/#person"}}]},"og:locale":"en_GB","og:site_name":"Aidan Finn, IT Pro - A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...","og:type":"article","og:title":"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro","og:description":"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.","og:url":"https:\/\/aidanfinn.com\/?p=24065","article:published_time":"2025-02-21T08:08:58+00:00","article:modified_time":"2025-02-21T08:10:39+00:00","twitter:card":"summary","twitter:site":"@joe_elway","twitter:title":"How Many Subnets Do I Need In An Azure Virtual Network? | Aidan Finn, IT Pro","twitter:description":"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.","twitter:creator":"@joe_elway"},"aioseo_meta_data":{"post_id":"24065","title":null,"description":"How many subnets do you need in an Azure Virtual Network? We will go back to Network Security Group (NSG) basics to explain why many get this answer wrong.","keywords":null,"keyphrases":{"focus":{"keyphrase":"Subnet","score":50,"analysis":{"keyphraseInTitle":{"score":3,"maxScore":9,"error":1},"keyphraseInDescription":{"score":3,"maxScore":9,"error":1},"keyphraseLength":{"score":9,"maxScore":9,"error":0,"length":1},"keyphraseInURL":{"score":1,"maxScore":5,"error":1},"keyphraseInIntroduction":{"score":3,"maxScore":9,"error":1},"keyphraseInSubHeadings":{"score":3,"maxScore":9,"error":1},"keyphraseInImageAlt":{"score":3,"maxScore":9,"error":1},"keywordDensity":{"type":"best","score":9,"maxScore":9,"error":0}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2025-02-20 13:17:32","updated":"2025-06-04 17:39:54","seo_analyzer_scan_date":null,"focus_keyword":"Subnet","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/aidanfinn.com\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/aidanfinn.com\/?cat=1\" title=\"Uncategorized\">Uncategorized<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tHow Many Subnets Do I Need In An Azure Virtual Network?\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/aidanfinn.com\/"},{"label":"Uncategorized","link":"https:\/\/aidanfinn.com\/?cat=1"},{"label":"How Many Subnets Do I Need In An Azure Virtual Network?","link":"https:\/\/aidanfinn.com\/?p=24065"}],"amp_enabled":true,"jetpack_featured_media_url":"https:\/\/aidanfinn.com\/wp-content\/uploads\/2025\/02\/ArchitectBluePrintCloudNetwork.jpg","_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/24065","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24065"}],"version-history":[{"count":29,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/24065\/revisions"}],"predecessor-version":[{"id":24101,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/24065\/revisions\/24101"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/media\/24071"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24065"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24065"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24065"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}