Review Bastion's subnet size before planning host scaling

Source facts

Microsoft requires Azure Bastion resources deployed on or after November 2, 2021 to use a subnet of /26 or larger. Earlier /27 deployments can continue operating, but Microsoft recommends expanding them when planning for host scaling. Its configuration guide distinguishes Basic’s two instances from the configurable instance count available with Standard or higher. Microsoft Learn.

Applicability

Use this review for an existing Bastion capacity proposal. Confirm the actual deployment date, subnet prefix, SKU and planned number of sessions or instances. Apply the guide’s SKU-specific conditions rather than assuming the Developer offering follows the dedicated-subnet pattern.

DSE recommendation

DSE recommends checking the address plan before committing to a scaling change. Ask the network owner to document whether subnet expansion is feasible and which neighboring ranges constrain it. Separate continued operation of the existing deployment from approval of future capacity. Preserve the current resource configuration and use a change plan appropriate to the actual subnet work.

Verification

Compare the proposed deployment with the documented subnet and scaling requirements. In an approved environment, confirm the requested instance configuration and representative remote sessions. Retain the final subnet prefix and SKU in the capacity record. A successful session through the old deployment should not substitute for that design check.

Official references

Microsoft Learn: About Azure Bastion configuration settings.