{"id":"ede5eafb-62ce-458b-b851-e2fb78205d15","shortId":"ycKAkD","kind":"skill","title":"azure-nat-gateway","tagline":"Expert knowledge for Azure NAT Gateway development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, configuration, and deployment. Use when managing SNAT ports, outbound IPs, flow logs, hub-spoke egress, or migrations to","description":"# Azure NAT Gateway Skill\n\nThis skill provides expert guidance for Azure NAT Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L35-L39 | Diagnosing and fixing NAT Gateway issues: reading flow logs, resolving misconfigurations, connectivity failures with Azure services, and outbound internet connection problems. |\n| Best Practices | L40-L44 | Guidance on reducing SNAT port exhaustion and optimizing outbound connectivity patterns when using Azure NAT Gateway. |\n| Decision Making | L45-L50 | Guidance on planning and executing migrations to NAT Gateway StandardV2, and moving existing Azure outbound internet access and resources to use NAT Gateway. |\n| Architecture & Design Patterns | L51-L56 | Design patterns for placing NAT Gateway in VNets, hub-spoke, with NVAs, and with internal/public load balancers, plus scaling outbound traffic and combining with Azure Firewall. |\n| Limits & Quotas | L57-L61 | NAT Gateway limits, SNAT port quotas, connection scaling behavior, per-resource caps, and FAQs on throughput, IPs, and troubleshooting limit-related issues. |\n| Configuration | L62-L70 | Configuring NAT Gateway V2 (IPs, deployment via ARM/Bicep/Terraform), plus monitoring setup: metrics, alerts, and flow logs for traffic and diagnostics |\n| Deployment | L71-L75 | Guides for redeploying NAT Gateway after cross-region moves and migrating VM outbound traffic from public IPs to use NAT Gateway |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Monitor and troubleshoot with NAT Gateway flow logs | https://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-flow-logs |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Optimize SNAT usage with Azure NAT Gateway | https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-snat |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Plan and execute migration to NAT Gateway StandardV2 | https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-v2-migrate |\n| Migrate Azure outbound access to NAT Gateway | https://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-outbound-nat |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Design virtual networks using Azure NAT Gateway | https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-design |\n| Scale outbound traffic with NAT Gateway and Azure Firewall | https://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-hub-spoke-nat-firewall |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Azure NAT Gateway FAQs with limits and behavior | https://learn.microsoft.com/en-us/azure/nat-gateway/faq |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Manage Azure NAT Gateway configuration and IPs | https://learn.microsoft.com/en-us/azure/nat-gateway/manage-nat-gateway |\n| Reference for Azure NAT Gateway monitoring data | https://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-reference |\n| Enable and use StandardV2 NAT Gateway flow logs | https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-flow-logs |\n| Configure metrics and alerts for Azure NAT Gateway | https://learn.microsoft.com/en-us/azure/nat-gateway/nat-metrics |\n| Deploy NAT Gateway V2 using ARM, Bicep, or Terraform | https://learn.microsoft.com/en-us/azure/nat-gateway/quickstart-create-nat-gateway-v2-templates |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Redeploy NAT gateway after cross-region resource moves | https://learn.microsoft.com/en-us/azure/nat-gateway/region-move-nat-gateway |\n| Move VM public IP outbound traffic to NAT Gateway | https://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-ilip-nat |","tags":["azure","nat","gateway","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions"],"capabilities":["skill","source-microsoftdocs","skill-azure-nat-gateway","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-nat-gateway","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.700","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 549 github stars · SKILL.md body (4,862 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T18:53:56.236Z","embedding":null,"createdAt":"2026-04-18T21:59:33.544Z","updatedAt":"2026-05-18T18:53:56.236Z","lastSeenAt":"2026-05-18T18:53:56.236Z","tsv":"'/en-us/azure/nat-gateway/faq':496 '/en-us/azure/nat-gateway/manage-nat-gateway':509 '/en-us/azure/nat-gateway/monitor-nat-gateway-flow-logs':415 '/en-us/azure/nat-gateway/monitor-nat-gateway-reference':519 '/en-us/azure/nat-gateway/nat-gateway-design':469 '/en-us/azure/nat-gateway/nat-gateway-flow-logs':530 '/en-us/azure/nat-gateway/nat-gateway-snat':429 '/en-us/azure/nat-gateway/nat-gateway-v2-migrate':444 '/en-us/azure/nat-gateway/nat-metrics':541 '/en-us/azure/nat-gateway/quickstart-create-nat-gateway-v2-templates':553 '/en-us/azure/nat-gateway/region-move-nat-gateway':568 '/en-us/azure/nat-gateway/tutorial-hub-spoke-nat-firewall':481 '/en-us/azure/nat-gateway/tutorial-migrate-ilip-nat':580 '/en-us/azure/nat-gateway/tutorial-migrate-outbound-nat':454 '/microsoftdocs/mcp/blob/main/readme.md)':168 '3':139 'accept':207 'access':173,283,448 'agent':88,132,191,205 'alert':368,534 'architectur':18,61,290,455 'arm':547 'arm/bicep/terraform':363 'avail':158 'azur':2,8,42,52,234,259,280,321,424,446,464,477,486,501,512,536 'azure-nat-gateway':1 'balanc':313 'behavior':336,493 'best':14,57,241,416 'bicep':548 'cap':340 'capabl':80 'categori':91,99,115,211,213 'combin':70,319 'configur':23,66,352,356,497,504,531 'connect':231,239,255,334 'content':75,177 'cover':55 'cross':387,562 'cross-region':386,561 'data':516 'decis':16,59,262,430 'deploy':25,68,361,376,542,554 'descript':215 'design':19,62,291,296,456,460 'develop':11 'diagnos':220 'diagnost':375 'doc':183 'document':78,176 'e.g':103,119 'egress':38 'enabl':520 'execut':271,436 'exhaust':251 'exist':279 'expert':5,49 'failur':232 'fallback':195 'faq':342,489 'fetch':79,175,184,197 'file':109,117,124,129 'firewal':322,478 'fix':222 'flow':33,227,370,411,526 'gateway':4,10,44,54,224,261,275,289,301,329,358,384,401,410,426,440,451,466,475,488,503,514,525,538,544,559,577 'github.com':167 'github.com/microsoftdocs/mcp/blob/main/readme.md)':166 'guid':165,380 'guidanc':50,246,267 'hub':36,305 'hub-spok':35,304 'import':86,130 'includ':12 'index':92,212 'instal':162,164 'internal/public':311 'internet':238,282 'ip':32,345,360,397,506,572 'issu':225,351 'knowledg':6 'l120':106 'l35':105,218 'l35-l120':104 'l35-l39':217 'l39':219 'l40':244 'l40-l44':243 'l44':245 'l45':265 'l45-l50':264 'l50':266 'l51':294 'l51-l56':293 'l56':295 'l57':326 'l57-l61':325 'l61':327 'l62':354 'l62-l70':353 'l70':355 'l71':378 'l71-l75':377 'l75':379 'latest':147 'learn':190,204 'learn-agent-skil':189,203 'learn.microsoft.com':414,428,443,453,468,480,495,508,518,529,540,552,567,579 'learn.microsoft.com/en-us/azure/nat-gateway/faq':494 'learn.microsoft.com/en-us/azure/nat-gateway/manage-nat-gateway':507 'learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-flow-logs':413 'learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-reference':517 'learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-design':467 'learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-flow-logs':528 'learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-snat':427 'learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-v2-migrate':442 'learn.microsoft.com/en-us/azure/nat-gateway/nat-metrics':539 'learn.microsoft.com/en-us/azure/nat-gateway/quickstart-create-nat-gateway-v2-templates':551 'learn.microsoft.com/en-us/azure/nat-gateway/region-move-nat-gateway':566 'learn.microsoft.com/en-us/azure/nat-gateway/tutorial-hub-spoke-nat-firewall':479 'learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-ilip-nat':578 'learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-outbound-nat':452 'limit':21,64,323,330,349,482,491 'limit-rel':348 'line':101,113,214 'link':118,127 'load':312 'local':71 'locat':95 'log':34,228,371,412,527 'make':17,60,263,431 'manag':28,500 'markdown':194,210 'mcp':153,180 'metadata.generated':134 'metric':367,532 'microsoft':182 'microsoftdoc':154,181 'migrat':40,272,391,437,445 'misconfigur':230 'monitor':365,405,515 'month':140 'move':278,389,565,569 'nat':3,9,43,53,223,260,274,288,300,328,357,383,400,409,425,439,450,465,474,487,502,513,524,537,543,558,576 'network':172,462 'nvas':308 'old':141 'optim':253,420 'outbound':31,237,254,281,316,393,447,471,573 'pattern':20,63,256,292,297,457 'per':338 'per-resourc':337 'place':299 'plan':269,434 'plus':314,364 'port':30,250,332 'practic':15,58,242,417 'prefer':178 'problem':240 'provid':48 'public':396,571 'pull':145 'queri':186,200 'quick':73 'quick-refer':72 'quota':22,65,324,333,483 'rang':102 'read':108,123,226 'redeploy':382,557 'reduc':248 'refer':74,128,510 'region':388,563 'relat':350 'relev':96 'remot':77 'repositori':151 'requir':171 'resolv':229 'resourc':285,339,564 'return':193,209 'scale':315,335,470 'section':97 'security.md':120,121 'servic':235 'setup':366 'skill':45,47,85,170,192,206 'skill-azure-nat-gateway' 'snat':29,249,331,421 'source-microsoftdocs' 'specifi':112 'spoke':37,306 'standardv2':276,441,523 'string':187,201 'suggest':142,159 'terraform':550 'text/markdown':208 'throughput':344 'tool':155 'topic':403,418,432,458,484,498,555 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'traffic':317,373,394,472,574 'troubleshoot':13,56,216,347,402,407 'url':404,419,433,459,485,499,556 'usag':422 'use':26,83,89,107,122,179,196,258,287,399,463,522,546 'user':144,161 'v2':359,545 'version':148 'via':362 'virtual':461 'vm':392,570 'vnet':303 'webpag':198","prices":[{"id":"b573c031-0e89-4252-8719-979f8783cee9","listingId":"ede5eafb-62ce-458b-b851-e2fb78205d15","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:59:33.544Z"}],"sources":[{"listingId":"ede5eafb-62ce-458b-b851-e2fb78205d15","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-nat-gateway","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-nat-gateway","isPrimary":false,"firstSeenAt":"2026-04-18T21:59:33.544Z","lastSeenAt":"2026-05-18T18:53:56.236Z"}],"details":{"listingId":"ede5eafb-62ce-458b-b851-e2fb78205d15","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-nat-gateway","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":549,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-05-17T02:50:05Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"4b2223dc0f78d1df765f649330210640b067dcd6","skill_md_path":"skills/azure-nat-gateway/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-nat-gateway"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-nat-gateway","description":"Expert knowledge for Azure NAT Gateway development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, configuration, and deployment. Use when managing SNAT ports, outbound IPs, flow logs, hub-spoke egress, or migrations to NAT Gateway V2, and other Azure NAT Gateway related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Load Balancer (use azure-load-balancer), Azure Virtual WAN (use azure-virtual-wan), Azure VPN Gateway (use azure-vpn-gateway).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-nat-gateway"},"updatedAt":"2026-05-18T18:53:56.236Z"}}