Skip to content

Networking

All inefficiencies

Each entry explains the waste, the billing model behind it, how to detect it and how to fix it.

59 inefficiencies

  • Azure NAT GatewayCER-0319

    Idle Azure NAT Gateway Attached to Subnet Without Active Workloads

    Azure NAT Gateways are commonly deployed to provide outbound internet connectivity for resources within virtual network subnets. Over time, the workloads that originally required this outbound access may be scaled down, migrated, or...

    Networking

  • Azure Private LinkCER-0318

    Orphaned Private Endpoints After Target Service Deletion

    Azure Private Endpoints are network interfaces that provide private connectivity from a virtual network to Azure PaaS services such as Storage Accounts, SQL Databases, or Key Vaults. When the target service behind a private endpoint is...

    Networking

  • Azure FirewallCER-0313

    Azure Firewall Premium SKU Deployed Without Using Premium Features

    Azure Firewall is available in three SKUs - Basic, Standard, and Premium - each designed for different security requirements and priced accordingly. The Premium SKU includes advanced threat protection capabilities such as TLS inspection,...

    Networking

  • Azure BastionCER-0312

    Idle or Underutilized Azure Bastion Deployment

    Azure Bastion incurs continuous hourly charges from the moment it is deployed until the resource is deleted - regardless of whether any connections are actively being made. This means a Bastion host sitting idle in a development or test...

    Networking

  • Azure Load BalancerCER-0292

    Idle Azure Load Balancers in Non-Production Environments

    Azure Load Balancers remain provisioned after the backend workloads they supported have been scaled down, stopped, or decommissioned. This is common in non-production environments where virtual machines are shut down outside business...

    Networking

  • Azure Virtual WANCER-0300

    Overprovisioned Azure Virtual WAN Hub Capacity

    An Azure Virtual WAN hub is provisioned with more capacity than required to support real network traffic. Because hub costs scale with the number of configured scale units, overprovisioned hubs continue to incur higher charges even when...

    Networking

  • Azure Data Factory V2CER-0261

    Suboptimal Integration Runtime Region Selection in Azure Data Factory

    When Integration Runtimes use the default "Auto Resolve" region setting, the work does not always run in the region where the data lives. For copy activities, Azure makes a best effort to run in the sink data store's region (or the closest...

    Networking

  • GCP Cloud NATCER-0174

    Idle Cloud NAT Gateway Without Active Traffic

    Each Cloud NAT gateway provisioned in GCP incurs hourly charges for each external IP address attached, regardless of whether traffic is flowing through the gateway. In many environments, NAT configurations are created for temporary access...

    Networking

  • GCP Load BalancersCER-0202

    Idle Load Balancer

    Provisioned load balancers continue to generate costs even when they are no longer serving meaningful traffic. This often occurs when applications are decommissioned, testing infrastructure is left behind, or backend services are removed...

    Networking

Showing 12 of 59