Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365

How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365

Written By Anoop C Nair
Last Updated June 6, 2025
Posted In Azure AD
SHARE

Let’s discuss How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365. Microsoft is going to launch a new improvement on Windows 365 and Azure Virtual Desktop called TURN relay. This is a dedicated IP range across the Microsoft Azure public cloud.

TURN Relays new range 51.5.0.0/16 enhances RDP Shortpath connectivity and delivers faster. It improve the reliable performance of Azure Virtual Desktop and Windows 365 users in 40 regions worldwide. Microsoft will launch this feature on 15 June 2025.

Have you heard about Traversal Using Relays Around NAT (TURN). TURN is a protocol that acts as a firewall behind devices or NAT (Network Address Translation). This is designed to provide a reliable UDP connection. When direct UDP-based Connections are not possible, TURN acts as a fallback with RDP shortpath for Public networks.

TURN relay ensures low-latency, high-reliability remote desktop sessions. When this transition happens, connections will gradually move away from the existing ACS TURN Relay range (20.202.0.0/16). In this blog, I will help you to know more about the TURN Relay Expansion for AVD and Windows 365.

Patch My PC
Traversal Using Relays Around NAT TURN Relay Regional Expansion for AVD and Windows 365 - Fig.1
How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365 – Fig.1

How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365

As mentioned above, with this transition, connections will gradually move away from the existing ACS TURN Relay range (20.202.0.0/16). These changes can’t be seen because they will occur behind the scenes. You can proactively bypass the new TURN relay range (51.5.0.0/16) to avoid uninterrupted service.

How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365 - Fig.2 - Creds to MS
How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365 – Fig.2 – Creds to MS

Benefits of the New TURN Relay

TURN relay initiative offers you more control, optimised routing, and a higher success rate for UDP-based communications by combining a dedicated IP range for Azure Virtual Desktop and Windows 365 traffic. The following are the benefits of a dedicated IP range for Azure Virtual Desktop and Windows 365 traffic.

Expanding Regional CoverageDedicated IP Range for Azure Virtual Desktop and Windows 365 Traffic
Data travels shorter distances, resulting in faster connections and reduced lag. So latency will lowerOptimized traffic flow for Azure Virtual Desktop and Windows 365.
Fewer dropped connections and more stable sessions, especially for real-time applications.Improved control over network security configurations.
Higher UDP success rates: Better performance for voice, video, and real-time data even under variable network conditions.Customers can navigate restrictive security setups without compromising performance.
Enhanced quality and speed for traffic, free from generic filtering
How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365 – Table.1
How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365 - Fig.3 - Creds to MS
How New TURN Relay IP Range Enhances RDP Shortpath for AVD and Windows 365 – Fig.3 – Creds to MS

Preparations for TURN Relay for Windows 365 and Azure Virtual Desktop

The new IP subnet will form a critical part of the resilient and performant connectivity provided for Windows 365 and Azure Virtual Desktop. Microsoft will progressively redirect from the current Azure Communication Service (ACS) TURN relay range (20.202.0.0/16) to a newly designated subnet (51.5.0.0/16). Users must ensure that traffic is both accessible and optimised.

  • Accessible
    • For Windows 365 or Azure Virtual Desktop connectivity, your environment can access this subset and will be accessible from all networks
    • For Microsoft Hosted Network deployments in Windows 365, this underlying connectivity is already in place.
    • For Azure Virtual Desktop and Windows 365 – Azure network connection ANC deployments, the ‘WindowsVirtualDesktop’ service tag contains this subnet, so connectivity may already be in place.
  • Optimized
    • Ensure the new IP range is bypassed by VPNs, proxies, and Secure Web Gateways (SWGs)
    • Confirm the subnet is accessible from your network to maintain seamless service
    • No TLS inspection required traffic is already encrypted and optimised for performance

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM,  Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Azure AD

Microsoft Azure Removes Default Internet Access for New Virtual Networks

Key Takeaways Here, we are discussing Microsoft Azure Removes Default Internet Access for New Virtual Networks. According to the latest news coming that After March 31, 2026, any newly created Virtual Network (VNet) will no longer have automatic access to the internet. This update was highlighted by Christiaan Brinkhoff on his social media platform. Microsoft […]

AC Anoop C Nair 4 min read
Azure AD

PowerShell Script to Track Upcoming Microsoft Entra App Secret Expirations

PowerShell Script to Track Upcoming Microsoft Entra App Secret Expirations! In this article, I’ll walk you through a powerful automation designed to enhance proactive security and lifecycle management for Microsoft Entra applications. You’ll learn how to monitor Entra app registrations and automate the detection of upcoming secret key expirations, ensuring your identity infrastructure stays secure […]

SN Sujin Nelladath 7 min read
Azure AD

How to use Entra Require App Protection Policy in Conditional Access for Secure Access

Hey there, Let’s discuss about enable the Require app protection policy setting in conditional access. The “Require app protection policy” setting in Conditional Access is a security feature designed to ensure that access to corporate resources is only granted through apps that have specific protection policies applied. What is conditional access? yes, we all know […]

AC Anoop C Nair 3 min read