Page 1 of 8
Azure CNI Options - Overview
Vighnesh Notes · AKS Networking
Azure CNI Overlay vs Node Subnet vs Pod Subnet
A visual architecture guide to choosing the right Azure Kubernetes Service networking model for IP efficiency, direct pod connectivity, scale, security, and operational simplicity.
I created this visual-note series to make the major Azure CNI networking choices easier to compare. The guide explains how AKS nodes and pods receive IP addresses, how traffic is routed, how each model affects VNet address consumption, and when Overlay, Pod Subnet, or the legacy Node Subnet model is the better architectural fit.
The guide was inspired by the MAK Cloudhance Azure CNI comparison and cross-checked against current Microsoft AKS networking documentation. Azure networking capabilities and recommendations evolve, so production designs should always be validated against current Microsoft Learn documentation and the specific requirements of the target environment.
Topics covered
Eight views from network foundations to architecture choice.
- Azure CNI Options - Overview
- AKS Networking Basics
- Option 1 - Azure CNI Overlay
- Option 2 - Azure CNI Node Subnet
- Option 3 - Azure CNI Pod Subnet
- Comparison at a Glance
- Best Practices & Considerations
- Quick Decision Guide
Visual-note gallery
Eight focused AKS networking sheets.
Download PNG
Page 2 of 8
AKS Networking Basics
Page 3 of 8
Option 1 - Azure CNI Overlay
Page 4 of 8
Option 2 - Azure CNI Node Subnet
Page 5 of 8
Option 3 - Azure CNI Pod Subnet
Page 6 of 8
Comparison at a Glance
Page 7 of 8
Best Practices & Considerations
Page 8 of 8
Quick Decision Guide
About this resource
AKS networking trade-offs made easier to compare.
Why I created these notes
AKS networking choices can look similar at first, but the differences in pod addressing, routing, VNet IP consumption, direct reachability, and subnet design can have a major impact on scalability and operations. I created this visual guide to make those architecture trade-offs easier to understand and discuss.
What this project demonstrates
This resource demonstrates Azure Kubernetes Service networking knowledge, cloud architecture thinking, IP address planning, Kubernetes networking concepts, security and connectivity trade-offs, technical documentation, and visual communication.
Source and attribution
Source and further reading
These independent visual notes were inspired by the MAK Cloudhance comparison and cross-checked against official Microsoft AKS documentation. MAK Cloudhance and Microsoft did not author, sponsor, review, or endorse this resource.
Independent visual notes
These are independent visual notes created by Vighnesh Naik and are not official Microsoft, Kubernetes, or MAK Cloudhance documentation. Microsoft, Azure, Azure Kubernetes Service, Kubernetes, and related product names are trademarks of their respective owners. Networking capabilities, supported configurations, limits, and recommendations can change. Always verify current information through official Microsoft Learn documentation before implementing or migrating a production AKS networking design.
- Version
- 1.0
- Published
- August 2026
- Format
- Eight-page visual guide
- Brand
- vighnesh-notes