Azure Firewall supports the use
of Fully Qualified Domain Names (FQDNs) in DNAT (Destination Network
Address Translation) rules, allowing inbound traffic to be routed to backend
resources using domain names instead of static IP addresses.
This feature is especially useful
for scenarios where backend IP addresses are dynamic or centrally managed via
DNS.
Key Highlights:
- DNS-based backend targeting: Route inbound
traffic to backend servers using FQDNs.
- Dynamic IP support: Ideal for applications where
backend IPs change frequently.
- Monitoring: Monitor DNAT activity using
AZFWNatRule logs.
Learn more: