New efficiency and logging capabilities in Azure Firewall | Azure Weblog and Updates


Organizations are rushing up workload migration to Azure to benefit from the rising set of revolutionary cloud providers, scale, and financial advantages of the general public cloud. Purposes migration to the cloud consequently will increase the community visitors throughput demand. This places stress on community parts and extra particularly on Azure Firewall which is within the crucial path of most community visitors. At the moment, Azure Firewall helps 30 Gbps which is ample to fulfill present throughput calls for for a lot of of our prospects. Nevertheless, we’re seeing some organizations require much more throughput and in direction of this, we’re saying new Azure Firewall capabilities in addition to updates for January 2022:

  • Azure Firewall community rule title logging.
  • Azure Firewall premium efficiency enhance.
  • Efficiency whitepaper.

Azure Firewall community rule title logging

We now have heard your suggestions and are completely satisfied to announce the rule title availability within the Community logs. Like software guidelines, community rule title is now accessible within the logs.

Beforehand, the occasion of a community rule hit would present the supply, vacation spot IP/port, and the motion, enable or deny. With the brand new performance, the occasion logs for community guidelines may also comprise the coverage title, Rule Assortment Group, Rule Assortment, and the rule title hit.

After enabling the function, the next info shall be offered for a community rule hit occasion within the logs:

Screenshot of Network Rule event in the logs after enabling the “Network Rule name logging” feature.

Determine 1: Community rule occasion within the logs after enabling the “community rule title logging” function.

Word: For Basic Firewalls (these not managed by an Azure Firewall coverage), solely the rule title shall be seen.

To allow the community rule title logging function, comply with the directions.

Azure Firewall Premium efficiency enhance

As extra functions are moved to the cloud, the efficiency of community parts would possibly turn out to be a bottleneck. The firewall because the central piece of any community design wants to have the ability to assist all these workloads. Therefore, we’re completely satisfied to announce that the Azure Firewall Premium efficiency enhance performance goes to preview to permit extra scalability for these deployments.

This function will increase the utmost throughput of the Azure Firewall Premium by greater than 300 % (to 100Gbps). See the efficiency whitepaper part beneath for extra particulars.

To allow the Azure Firewall Premium efficiency enhance function, comply with the directions.

*Be sure to additionally try the complete testing finished by Andrew Myers for an in depth evaluation and as a reference to construct your individual check setting.

Azure Firewall Efficiency whitepaper

Dependable firewall efficiency is important to function and shield your digital networks in Azure. Not solely ought to Azure Firewall deal with the present visitors on a community, however it must also be prepared for potential visitors progress. To supply prospects with a greater visibility into the anticipated efficiency of Azure Firewall, we’re releasing the Azure Firewall Efficiency documentation.

As we’re all the time working to enhance the Azure Firewall service, the metrics highlighted within the doc shall be up to date to mirror the most recent efficiency outcomes you possibly can anticipate from the Azure Firewall. So, ensure that to bookmark the web page to remain updated with the most recent info.

Study extra about Azure Firewall

For extra info on the whole lot we lined above, see the next documentation: