Private Link reality bites: Azure Firewall app rules
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints…
10/02/2025
DRY Terraform code for Private Link and DNS
After last week’s almost-philosophical post on network complexity, let’s move on to more mundane tasks. Today I will focus on how to write efficient Terraform code to connect private endpoints and DNS, without having to copy/paste literally hundreds of lines.
First things first: what the heck am I talking…
19/08/2023 Article Bloggers Jose Moreno
You may be interested in
VNet Flow Logs recipes
You might have heard about the General Availability of Virtual Network Flow Logs in Azure, and even read the announcement blog post. When writing that post with Harsha CS I…08/05/2024NSG: any protocol, specific port?
This one is going to be quick. The question is the following: if you have an Network Security Group rule in Azure that matches any protocol, but a specific TCP…03/12/2024Get certificates with Azure Key Vault extension to your Linux VMs
Certificate management is one of those IT disciplines that is nobody’s dream, and still it can have quite a dramatic (negative) impact in your web presence if not done properly,…18/09/2023Application Gateway for Containers: a not-so-gentle intro (3)
This post will take you one step further from the hello-world configuration that I described in the first post by adding TLS end-to-end, a scenario described in the public docs…14/03/2025Getting visibility into your Azure Traffic with NSG Flow Logs
In every network you want to know what traffic is using it. Networking devices offer multiple options to report on traffic, such as Netflow, sFlow or IPFIX. However, these options…20/04/2023Private Link reality bites: NXDomainRedirect
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an…11/02/2025ExpressRoute traffic visibility: Flow Logs or Traffic Collector?
You might have heard about VNet Flow Logs, I posted about this new Azure feature here. One of the applications of VNet Flow Logs is to gain visibility into traffic…25/06/2024ExpressRoute multi-region: triangles or squares?
I know, I know, this was the question you had in your head when you woke up this morning. If that wasn’t the case, let me try to explain what…29/11/2024Deploy (Azure) Network-as-Code as a champ
Virtually every expert out there recommends following an Infrastructure-as-Code approach to manage Azure Networks, and even more so when dealing with traffic segmentation features such as firewall rulesets and network…08/06/2023Taxonomy of Azure PaaS service access
Azure PaaS service networking is quite a complex landscape to navigate. Documentation in Azure about this topic is located in different areas (under Networking and each specific PaaS service), and…12/01/2024Simulating VPN sites in Azure with Ubuntu 24.04 and StrongSwan
Disclaimer: this post is going to be quite geeky. So this is not the kind of post you want to read if you don’t need this stuff. But hey, I…05/07/2024