In the mean time you can still always make backups with it stopped. That has always worked. Though obviously it's far more inconvenient. We are digging...

@cemyl95 Funnily enough, I came to the same conclusion just this weekend :)

@kilburnflyer Solved: subscriptions/[YOURSUBSCRIPTIONID/resourceGroups/north-europe-default/providers/Microsoft.Network/dnsZones/[YOURDOMAIN] do not put api version in there. in hostname only put value before i.e. RECORD i.e. RECORD.[YOURDOMAIN] Relevant link in source code helped debug

How about multiple public ips?

After contact with microsoft helpdesk I found the solution for me. For future reference: I had to turn on mss clamping and set it to 1350. This is also in the advanced IPSec settings Maybe this settings was defaulted after an update? I wasn't the one who configured it in the first place, so I wouldn't know for sure. I made sure to match my settings to this document https://docs.microsoft.com/nl-nl/azure/vpn-gateway/vpn-gateway-about-vpn-devices @stephenw10 Thanks for the reply, I had this disabled already, but the pointer was appreciated