I am having trouble understanding default inbound rules in a Network Security Group.
My way of thinking:
- A NSG is applied at a NIC or a subnet level.
- Thus, resources that have their inbound traffic filtered by an inbound rule must be a part of a Virtual Network.
Assuming the above is true, it should not matter if I specify
VirtualNetwork as a destination, as
Any must be a part of a Virtual Network.
To give a concrete example, take this default rule for traffic from a Load Balancer:
Priority: 65001 Name: AllowAzureLoadBalancerInBound Port: Any Protocol: Any Source: AzureLoadBalancer Destination: Any Action: Allow
Would it make any difference if it was defined with a