What is a key difference between kubenet and Azure CNI networking in AKS?

With Azure CNI, pods get first-class VNet IPs, which enables direct connectivity from VNet resources but consumes address space fast (nodes reserve IPs for their max pod count). kubenet only gives nodes VNet IPs and NATs pod traffic, and it does not support Windows pools.