When designing IP addressing for Azure virtual network subnets, which resource type must be assigned IP addresses from the subnet range?

Internal Load Balancers (ILBs) require IP addresses from the subnet range because they distribute incoming network traffic to virtual machines within that subnet. The ILB's frontend IP configuration must be an IP address from the subnet where the backend pool VMs reside. Azure Virtual Network NAT provides outbound internet connectivity, not internal IP assignments. Service endpoint policies control access to Azure services, not IP allocation. Virtual network peering connects two virtual networks, but doesn't assign IP addresses to resources within a subnet.