azure-nat-gateway

Name: azure-nat-gateway
Author: microsoftdocs

github.com/microsoftdocsCloud & DevOps796182 installsUpdated 3d ago

About azure-nat-gateway

azure-nat-gateway is a skill for agents seeking guidance on Azure NAT Gateway. It combines local reference material with remote documentation on troubleshooting, design, security, configuration, and deployment.

Key features

01NAT Gateway troubleshooting
02SNAT usage and best practices
03SKU selection and architecture
04Security and capacity planning
05Monitoring, configuration, and migration

Use cases

01Investigate network issues with flow logs
02Plan NAT Gateway and firewall capacity
03Configure metrics, alerts, and flow logs
04Migrate or redeploy a NAT Gateway

MCP support

The skill can fetch remote documentation through mcp_microsoftdocs:microsoft_docs_fetch, with fetch_webpage as a fallback.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-nat-gateway

After installing, type/azure-nat-gatewayin Claude Code to confirm it loaded.

Details

From the project README

Azure NAT Gateway Skill

This skill provides expert guidance for Azure NAT Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L36-L40	Using NAT Gateway flow logs to monitor traffic, detect connectivity issues, analyze failures, and troubleshoot network/NAT behavior in Azure.
Best Practices	L41-L45	Guidance on reducing SNAT port exhaustion and optimizing outbound connectivity patterns when using Azure NAT Gateway.
Decision Making	L46-L50	Guidance on selecting the right Azure NAT Gateway Standard SKU, comparing features, limits, performance, and cost tradeoffs for different workloads.
Architecture & Design Patterns	L51-L55	Designing VNETs with NAT Gateway, choosing patterns for outbound connectivity, and scaling/combining NAT Gateway with Azure Firewall for secure, high-throughput egress traffic.
Limits & Quotas	L56-L60	Planning NAT Gateway with Azure Firewall, including SNAT port capacity, scaling limits, and how to size and configure outbound connectivity for high-volume workloads.
Security	L61-L65	Security best practices for NAT Gateway: hardening design, minimizing exposure, managing outbound IPs, monitoring traffic, and integrating with NSGs, firewalls, and other Azure security controls.
Configuration	L66-L73	Monitoring and configuring NAT Gateway V2: metrics, alerts, flow logs, and deployment via ARM, Bicep, or Terraform.
Deployment	L74-L79	Guides for deploying and updating NAT Gateway: migrating Standard→StandardV2, redeploying after cross-region moves, and rerouting VM outbound traffic from public IPs to NAT Gateway.

Troubleshooting

Topic	URL
Monitor and troubleshoot with NAT Gateway flow logs	https://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-flow-logs

Best Practices

Topic	URL
Optimize SNAT usage with Azure NAT Gateway	https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-snat

Decision Making

Topic	URL
Choose between Azure NAT Gateway Standard SKUs	https://learn.microsoft.com/en-us/azure/nat-gateway/nat-sku

Architecture & Design Patterns

Topic	URL
Design Azure virtual networks with NAT Gateway	https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-design

Limits & Quotas

Topic	URL
Plan NAT Gateway with Azure Firewall SNAT capacity	https://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-hub-spoke-nat-firewall

Security

Topic	URL
Apply security best practices to Azure NAT Gateway	https://learn.microsoft.com/en-us/azure/nat-gateway/secure-nat-gateway

Configuration

Topic	URL
Reference monitoring metrics and logs for NAT Gateway	https://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-reference
Configure StandardV2 NAT Gateway flow logging	https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-flow-logs
Configure metrics and alerts for Azure NAT Gateway	https://learn.microsoft.com/en-us/azure/nat-gateway/nat-metrics
Deploy NAT Gateway V2 using ARM, Bicep, or Terraform	https://learn.microsoft.com/en-us/azure/nat-gateway/quickstart-create-nat-gateway-v2-templates

Deployment

Topic	URL
Migrate Azure NAT Gateway Standard to StandardV2	https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-v2-migrate
Redeploy NAT gateway after cross-region resource moves	https://learn.microsoft.com/en-us/azure/nat-gateway/region-move-nat-gateway
Move VM public IP outbound traffic to NAT Gateway	https://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-ilip-nat

Comments

Markdown supported

Details

Author: microsoftdocs
Repository: microsoftdocs/agent-skills
Category: Cloud & DevOps
Installs: 182
GitHub stars: 796

Report

More skills

All skills

lark-apps

open.feishu.cn

732.0k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

azure-prepare

github.com/microsoft

571.7k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

wizard

github.com/mattpocock

571.5k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-ai

github.com/microsoft

571.2k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.