{"id":"c6eeca33-f765-4363-b74e-3c81a2fe7ac4","shortId":"5YTaF9","kind":"skill","title":"azure-networking","tagline":"Expert knowledge for Azure Networking development including troubleshooting, best practices, decision making, architecture & design patterns, security, and integrations & coding patterns. Use when designing hub-spoke VNets, Azure Firewall/NSG rules, WAF (App GW/Front Door), Accel","description":"# Azure Networking Skill\n\nThis skill provides expert guidance for Azure Networking. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L34-L38 | Diagnosing and resolving Microsoft.Network resource provisioning failures in Azure, including common error patterns, causes, and step-by-step remediation guidance. |\n| Best Practices | L39-L43 | Guidance on boosting Azure NVA and VM network throughput/latency using Accelerated Connections, including configuration, tuning, and performance best practices. |\n| Decision Making | L44-L51 | Guidance on choosing Azure network architectures: using region latency data, selecting secure topologies and app delivery options, and planning networking for remote and hybrid work scenarios. |\n| Architecture & Design Patterns | L52-L58 | Routing and traffic flow design in Azure: analyzing control vs data plane paths, and building secure hub-spoke network architectures for web apps. |\n| Security | L59-L70 | Zero Trust security for Azure networking: policies, NSGs, Azure Firewall, DDoS, App Gateway/Front Door WAF hardening, and securing virtual networks for web apps. |\n| Integrations & Coding Patterns | L71-L74 | Using Azure Resource Graph to query, filter, and analyze Azure networking resources at scale (e.g., VNets, NSGs, public IPs) for inventory, compliance, and reporting. |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Troubleshoot Microsoft.Network failed provisioning states | https://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Optimize NVA and VM performance with Accelerated Connections | https://learn.microsoft.com/en-us/azure/networking/nva-accelerated-connections |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Use Azure region latency stats for architecture planning | https://learn.microsoft.com/en-us/azure/networking/azure-network-latency |\n| Choose secure Azure application delivery options | https://learn.microsoft.com/en-us/azure/networking/secure-application-delivery |\n| Select a secure Azure network topology | https://learn.microsoft.com/en-us/azure/networking/secure-network-topology |\n| Plan Azure networking for remote work scenarios | https://learn.microsoft.com/en-us/azure/networking/working-remotely-support |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Analyze control plane routing interoperability in Azure | https://learn.microsoft.com/en-us/azure/networking/connectivity-interoperability-control-plane |\n| Analyze data plane paths across Azure networks | https://learn.microsoft.com/en-us/azure/networking/connectivity-interoperability-data-plane |\n| Design a secure hub-spoke network for Azure web apps | https://learn.microsoft.com/en-us/azure/networking/cross-service-scenarios/design-secure-hub-spoke-network |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Deploy a Zero Trust virtual network for web apps | https://learn.microsoft.com/en-us/azure/networking/create-zero-trust-network-web-apps |\n| Use built-in Azure Policy definitions for networking | https://learn.microsoft.com/en-us/azure/networking/policy-reference |\n| Apply Azure Policy compliance controls to networking | https://learn.microsoft.com/en-us/azure/networking/security-controls-policy |\n| Secure Application Gateway WAF with Zero Trust guidance | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-application-gateway-waf |\n| Harden Azure Firewall with Zero Trust settings | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-azure-firewall |\n| Implement Zero Trust for Azure DDoS Protection | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-ddos-protection |\n| Secure Front Door WAF at the edge with Zero Trust | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-front-door-waf |\n| Apply Zero Trust recommendations to Azure network security | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-network-security |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Run Azure Resource Graph queries for networking resources | https://learn.microsoft.com/en-us/azure/networking/fundamentals/resource-graph-samples |","tags":["azure","networking","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions","azure-kubernetes-service"],"capabilities":["skill","source-microsoftdocs","skill-azure-networking","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-networking","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (5,446 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T06:53:35.428Z","embedding":null,"createdAt":"2026-04-18T21:59:36.570Z","updatedAt":"2026-04-22T06:53:35.428Z","lastSeenAt":"2026-04-22T06:53:35.428Z","tsv":"'/en-us/azure/networking/azure-network-latency':418 '/en-us/azure/networking/connectivity-interoperability-control-plane':461 '/en-us/azure/networking/connectivity-interoperability-data-plane':471 '/en-us/azure/networking/create-zero-trust-network-web-apps':500 '/en-us/azure/networking/cross-service-scenarios/design-secure-hub-spoke-network':485 '/en-us/azure/networking/fundamentals/resource-graph-samples':593 '/en-us/azure/networking/nva-accelerated-connections':403 '/en-us/azure/networking/policy-reference':512 '/en-us/azure/networking/secure-application-delivery':427 '/en-us/azure/networking/secure-network-topology':436 '/en-us/azure/networking/security-controls-policy':522 '/en-us/azure/networking/security/zero-trust-application-gateway-waf':533 '/en-us/azure/networking/security/zero-trust-azure-firewall':543 '/en-us/azure/networking/security/zero-trust-ddos-protection':553 '/en-us/azure/networking/security/zero-trust-front-door-waf':566 '/en-us/azure/networking/security/zero-trust-network-security':577 '/en-us/azure/networking/troubleshoot-failed-state':388 '/en-us/azure/networking/working-remotely-support':446 '/microsoftdocs/mcp/blob/main/readme.md)':163 '3':134 'accel':38 'acceler':251,399 'accept':202 'access':168 'across':466 'agent':83,127,186,200 'analyz':304,362,452,462 'app':35,279,320,336,347,482,497 'appli':513,567 'applic':422,524 'architectur':16,56,270,291,317,414,447 'avail':153 'azur':2,7,31,39,48,223,244,268,303,329,333,355,363,409,421,431,438,458,467,480,505,514,535,548,572,584 'azure-network':1 'best':12,52,236,258,389 'boost':243 'build':311 'built':503 'built-in':502 'capabl':75 'categori':86,94,110,206,208 'caus':228 'choos':267,419 'code':22,62,349,579 'combin':65 'common':225 'complianc':375,516 'configur':254 'connect':252,400 'content':70,172 'control':305,453,517 'cover':50 'data':274,307,463 'ddos':335,549 'decis':14,54,260,404 'definit':507 'deliveri':280,423 'deploy':489 'descript':210 'design':17,26,57,292,301,448,472 'develop':9 'diagnos':215 'doc':178 'document':73,171 'door':37,338,556 'e.g':98,114,368 'edg':560 'error':226 'expert':4,45 'fail':383 'failur':221 'fallback':190 'fetch':74,170,179,192 'file':104,112,119,124 'filter':360 'firewal':334,536 'firewall/nsg':32 'flow':300 'front':555 'gateway':525 'gateway/front':337 'github.com':162 'github.com/microsoftdocs/mcp/blob/main/readme.md)':161 'graph':357,586 'guid':160 'guidanc':46,235,241,265,530 'gw/front':36 'harden':340,534 'hub':28,314,476 'hub-spok':27,313,475 'hybrid':288 'implement':544 'import':81,125 'includ':10,224,253 'index':87,207 'instal':157,159 'integr':21,61,348,578 'interoper':456 'inventori':374 'ip':372 'knowledg':5 'l120':101 'l34':213 'l34-l38':212 'l35':100 'l35-l120':99 'l38':214 'l39':239 'l39-l43':238 'l43':240 'l44':263 'l44-l51':262 'l51':264 'l52':295 'l52-l58':294 'l58':296 'l59':323 'l59-l70':322 'l70':324 'l71':352 'l71-l74':351 'l74':353 'latenc':273,411 'latest':142 'learn':185,199 'learn-agent-skil':184,198 'learn.microsoft.com':387,402,417,426,435,445,460,470,484,499,511,521,532,542,552,565,576,592 'learn.microsoft.com/en-us/azure/networking/azure-network-latency':416 'learn.microsoft.com/en-us/azure/networking/connectivity-interoperability-control-plane':459 'learn.microsoft.com/en-us/azure/networking/connectivity-interoperability-data-plane':469 'learn.microsoft.com/en-us/azure/networking/create-zero-trust-network-web-apps':498 'learn.microsoft.com/en-us/azure/networking/cross-service-scenarios/design-secure-hub-spoke-network':483 'learn.microsoft.com/en-us/azure/networking/fundamentals/resource-graph-samples':591 'learn.microsoft.com/en-us/azure/networking/nva-accelerated-connections':401 'learn.microsoft.com/en-us/azure/networking/policy-reference':510 'learn.microsoft.com/en-us/azure/networking/secure-application-delivery':425 'learn.microsoft.com/en-us/azure/networking/secure-network-topology':434 'learn.microsoft.com/en-us/azure/networking/security-controls-policy':520 'learn.microsoft.com/en-us/azure/networking/security/zero-trust-application-gateway-waf':531 'learn.microsoft.com/en-us/azure/networking/security/zero-trust-azure-firewall':541 'learn.microsoft.com/en-us/azure/networking/security/zero-trust-ddos-protection':551 'learn.microsoft.com/en-us/azure/networking/security/zero-trust-front-door-waf':564 'learn.microsoft.com/en-us/azure/networking/security/zero-trust-network-security':575 'learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state':386 'learn.microsoft.com/en-us/azure/networking/working-remotely-support':444 'line':96,108,209 'link':113,122 'local':66 'locat':90 'make':15,55,261,405 'markdown':189,205 'mcp':148,175 'metadata.generated':129 'microsoft':177 'microsoft.network':218,382 'microsoftdoc':149,176 'month':135 'network':3,8,40,49,167,248,269,284,316,330,344,364,432,439,468,478,494,509,519,573,589 'nsgs':332,370 'nva':245,394 'old':136 'optim':393 'option':281,424 'path':309,465 'pattern':18,23,58,63,227,293,350,449,580 'perform':257,397 'plan':283,415,437 'plane':308,454,464 'polici':331,506,515 'practic':13,53,237,259,390 'prefer':173 'protect':550 'provid':44 'provis':220,384 'public':371 'pull':140 'queri':181,195,359,587 'quick':68 'quick-refer':67 'rang':97 'read':103,118 'recommend':570 'refer':69,123 'region':272,410 'relev':91 'remedi':234 'remot':72,286,441 'report':377 'repositori':146 'requir':166 'resolv':217 'resourc':219,356,365,585,590 'return':188,204 'rout':297,455 'rule':33 'run':583 'scale':367 'scenario':290,443 'section':92 'secur':19,59,276,312,321,327,342,420,430,474,486,523,554,574 'security.md':115,116 'select':275,428 'set':540 'skill':41,43,80,165,187,201 'skill-azure-networking' 'source-microsoftdocs' 'specifi':107 'spoke':29,315,477 'stat':412 'state':385 'step':231,233 'step-by-step':230 'string':182,196 'suggest':137,154 'text/markdown':203 'throughput/latency':249 'tool':150 'topic':379,391,406,450,487,581 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'topolog':277,433 'traffic':299 'troubleshoot':11,51,211,378,381 'trust':326,492,529,539,546,563,569 'tune':255 'url':380,392,407,451,488,582 'use':24,78,84,102,117,174,191,250,271,354,408,501 'user':139,156 'version':143 'virtual':343,493 'vm':247,396 'vnet':30,369 'vs':306 'waf':34,339,526,557 'web':319,346,481,496 'webpag':193 'work':289,442 'zero':325,491,528,538,545,562,568","prices":[{"id":"283b9dc7-2f79-4cec-b1ff-86b323dc861f","listingId":"c6eeca33-f765-4363-b74e-3c81a2fe7ac4","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:59:36.570Z"}],"sources":[{"listingId":"c6eeca33-f765-4363-b74e-3c81a2fe7ac4","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-networking","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-networking","isPrimary":false,"firstSeenAt":"2026-04-18T21:59:36.570Z","lastSeenAt":"2026-04-22T06:53:35.428Z"}],"details":{"listingId":"c6eeca33-f765-4363-b74e-3c81a2fe7ac4","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-networking","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-22T01:37:27Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"c60811c2f1b1f50b41c787ddeca9681205004008","skill_md_path":"skills/azure-networking/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-networking"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-networking","description":"Expert knowledge for Azure Networking development including troubleshooting, best practices, decision making, architecture & design patterns, security, and integrations & coding patterns. Use when designing hub-spoke VNets, Azure Firewall/NSG rules, WAF (App GW/Front Door), Accelerated Networking, or Resource Graph queries, and other Azure Networking related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Virtual WAN (use azure-virtual-wan), Azure Network Watcher (use azure-network-watcher).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-networking"},"updatedAt":"2026-04-22T06:53:35.428Z"}}