Private Link reality bites: Azure Firewall app rules
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints…
10/02/2025
ExpressRoute traffic visibility: Flow Logs or Traffic Collector?
You might have heard about VNet Flow Logs, I posted about this new Azure feature here. One of the applications of VNet Flow Logs is to gain visibility into traffic in places that had been blind spots until now, such as in the Gateway Subnets to inspect traffic on…
25/06/2024 Article Bloggers Jose Moreno
You may be interested in
Do not let ExpressRoute, VPN and SDWAN traffic bypass your firewall
I have recently expanded my SDWAN in hub-and-spoke networks design guide to include SDWAN-to-firewall routing. Initially I didn’t have this point, but recent conversations have made me realize that not…25/03/2024NSG: any protocol, specific port?
This one is going to be quick. The question is the following: if you have an Network Security Group rule in Azure that matches any protocol, but a specific TCP…03/12/2024Get certificates with Azure Key Vault extension to your Linux VMs
Certificate management is one of those IT disciplines that is nobody’s dream, and still it can have quite a dramatic (negative) impact in your web presence if not done properly,…18/09/2023Application Gateway for Containers: a not-so-gentle intro (3)
This post will take you one step further from the hello-world configuration that I described in the first post by adding TLS end-to-end, a scenario described in the public docs…14/03/2025You want to use AS-path as your virtual hub routing preference
Wow, that was a long title. Let me give you another one: if you haven’t tested your High Availability (HA) or Disaster Recovery (DR) plans, you shouldn’t rely on them.…02/05/2023Private Link reality bites: NXDomainRedirect
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an…11/02/2025Simulating VPN sites in Azure with Ubuntu 24.04 and StrongSwan
Disclaimer: this post is going to be quite geeky. So this is not the kind of post you want to read if you don’t need this stuff. But hey, I…05/07/2024ExpressRoute multi-region: triangles or squares?
I know, I know, this was the question you had in your head when you woke up this morning. If that wasn’t the case, let me try to explain what…29/11/2024Cilium Network Policy in AKS
If you are following the Azure Kubernetes Service space, I am sure you noticed that Azure CNI powered by Cilium is Generally Available. But is this a big thing? What…16/06/2023Designing your SDWAN and Firewall into Azure Hub and Spoke
Designing network connectivity in public cloud can very quickly become a daunting task. Of course, public cloud providers do offer native networking services, and with those it is fairly easy.…24/11/2023VNet Flow Logs recipes
You might have heard about the General Availability of Virtual Network Flow Logs in Azure, and even read the announcement blog post. When writing that post with Harsha CS I…08/05/2024