Forum Discussion

VOatMH1265's avatar
VOatMH1265
Copper Contributor
Jun 10, 2024

Can STUN/TURN traffic for AVD vnet be routed directly to internet and not AzureFirewall/NVA?

I got a simple AVD pool with 4 hosts located in regionA. All hosts are in single vnetA which is globally peered with vnetB in regionB where AzureFirewall is. Route table is assigned to vnetA to route AVD traffic to internet and 0.0.0.0/0 to private IP of AF  in vnetB.

 

With the ShortPath being made available for Public networks I left it turned on and added following ranges to route directly to internet from vnetA:

  • 20.202.0.0/16
  • 13.107.17.41/32
  • 13.107.64.0/18
  • 52.112.0.0/14
  • 52.120.0.0/14

RTT is anywhere from 80 to 180ms for all clients that are local to the vnetA region where hosts are, which seems high.

 

Turning off ShortPath resulted in unexpected "GraphicsCapsNotReceived" errors which is a separate issue.

1 Reply

  • VOatMH1265's avatar
    VOatMH1265
    Copper Contributor
    Maybe this is better suited in networking category, but also as I re-read my post and looking over STUN and TURN ShortPath it hit me. STUN will not work in this scenario because it is for direct connections. TURN should work as it is an intermediary in the region.