Generally Available: Host Network Security Group (NSG) control in AKS

You can now specify allowed host ports on node pools and add these pools to Application Security Group by directly configuring allowed ports in your node pool settings.

For AKS nodes with public IPs hosting services, you must add a Network Security Group (NSG) rule to allow traffic. When you specify ports in the node pool configuration, it automatically creates "allow" rules in the cluster's NSG. This enhances security and traffic management for AKS nodes using public IPs.

Learn more.