I’ve recently been digging into the weeds of doing an Azure VNet Hub and Spoke design for a customer and it’s brought about revisiting a topic from a while back.

For some quick context- for any given VNet in Azure there is a System RouteTable that holds basic routing information for that VNets network traffic flows within that VNet as well as inbound and outbound of the VNet. The following table outlines what the default System RouteTable routes consist of (table information source):

So, what's the problem with that?

Well, wheres and why hasn’t Microsoft included that range in the default VNet System RouteTable? I want answers!

Most organisations use the RFC1918 range of or smaller for their address space on their entire network. You’d got an entire /8 block containing up to 16,777,216 possible IP addresses so plenty to go round (though I’ve never seen that assigned to single VNets, even though a max CIDR range for a VNet is /16). Smaller organisations or home networks commonly use the network range with again plenty of room with lots of 16 addresses.

More uncommon is the carrier-grade NAT private network range (RFC6598) that Microsoft lists with the range

I have two theories about why it’s not been included.

  1. Either Microsoft uses this range for internal infrastructure or;
  2. No one at likes and there''s a vendetta against the private range

Either way, I think some Comunicado Oficial should be made to address this serious and urgent matter. Maybe you dear reader could get involved? Check out the GitHub issue on this very matter and request answers!