Azure now has full LB and VM IPv6 support (azure.microsoft.com)

So a VM can reach the Internet (and vice versa) using NAT66 at the load balancer. VM-to-VM communication is not possible.

Seems inelegant, but better than ENETUNREACH.