Aidan Finn • 3/23/2026

When To Add Subnets To An Azure Virtual Network

This article debunks common misconceptions about subnet usage in Azure Virtual Networks, arguing that subnets themselves offer no security benefits—only NSGs do. The author demonstrates that Azure VNets are flat routing domains, and subnets are merely logical groupings. For security, NSGs applied at the subnet or NIC level are what control traffic. The article recommends flattening the network to a single subnet and relying on NSG rules for segmentation, simplifying architecture without sacrificing security. It targets Azure architects and engineers looking to optimize VNet design.

0 comments

#Subnets #Network Segmentation #Nsg