Leave address-reuse headroom in an ACI subnet

Source facts

Microsoft’s ACI virtual-network deployment guide recommends a subnet of at least /24, or 256 addresses. It warns that smaller subnets can produce subnet-full failures because ACI cannot release address mappings quickly enough for reuse, leaving containers unable to start, restart or stop. The subnet must be explicitly delegated before deployment and can contain only container groups. Microsoft Learn.

Applicability

Use this capacity check for ACI groups deployed into an Azure virtual network. Confirm current regional and networking prerequisites. Plan outbound connectivity separately using the documented supported configuration; a subnet-size review is not a complete network design.

DSE recommendation

Size the delegated subnet for lifecycle behavior, not just the present running-group count. Have the network owner reserve an appropriate address range and compare it with Microsoft’s current recommendation before rollout. Include planned creation, restart and replacement activity in the capacity discussion. Do not remove unrelated resources from a shared subnet to force it into the ACI design without a separate authorized migration. Keep subnet delegation and address availability visible in the deployment review.

Verification

In an approved representative environment, inspect the delegated subnet and observe the intended container creation and restart sequence. Retain subnet-full errors and group-state transitions if they occur. Confirm that lifecycle operations complete with the chosen allocation. Do not interpret a single successful deployment in a small subnet as evidence that repeated replacements will have sufficient address-reuse headroom.

Official references

Microsoft Learn: Deploy container group to Azure virtual network.