Private Link reality bites: Azure Firewall app rules
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints…
10/02/2025
Taxonomy of Azure PaaS service access
Azure PaaS service networking is quite a complex landscape to navigate. Documentation in Azure about this topic is located in different areas (under Networking and each specific PaaS service), and sometimes using inconsistent terminology. My goal in this blog post is setting a classification of PaaS services that can be…
12/01/2024 Article Bloggers Jose Moreno
You may be interested in
Private Link reality bites – Private endpoints are an illusion
Welcome to this new series of blog posts in which I will be explaining some not-so-well-known facts about Azure Private Link and some associated technologies! This idea is born from…20/01/2025ExpressRoute multi-region: triangles or squares?
I know, I know, this was the question you had in your head when you woke up this morning. If that wasn’t the case, let me try to explain what…29/11/2024TCP Proxy with Istio on AKS
You might have heard of the new AKS Gateway API, which will allow for much more functionality than the good, old ingress API that we all know and love. One…30/10/2023Application Gateway for Containers: a not-so-gentle intro (2)
Have you ever have the feeling that something that should be easy turns into a mine field when you start working on it? I seem to be a specialist in…10/03/2025You want to use AS-path as your virtual hub routing preference
Wow, that was a long title. Let me give you another one: if you haven’t tested your High Availability (HA) or Disaster Recovery (DR) plans, you shouldn’t rely on them.…02/05/2023Deploy (Azure) Network-as-Code as a champ
Virtually every expert out there recommends following an Infrastructure-as-Code approach to manage Azure Networks, and even more so when dealing with traffic segmentation features such as firewall rulesets and network…08/06/2023Interregional traffic in hub-and-spoke
In Azure you have two main ways of managing your virtual network connectivity: self-managed hub-and-spoke and Virtual WAN. Virtual WAN is a solution where Microsoft manages part of your virtual…09/12/2024NSG: any protocol, specific port?
This one is going to be quick. The question is the following: if you have an Network Security Group rule in Azure that matches any protocol, but a specific TCP…03/12/2024Private Link reality bites – service endpoints vs private link
Welcome to the sixth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an…17/02/2025Grafana and VNet Flow Logs
I would like to credit for this blog post to Abhishek Sharma, talking to him gave me the main inspiration for some of the concepts you are going to see…20/03/2025DRY Terraform code for Private Link and DNS
After last week’s almost-philosophical post on network complexity, let’s move on to more mundane tasks. Today I will focus on how to write efficient Terraform code to connect private endpoints…19/08/2023