Private Link reality bites – Your routes could be lying
Welcome to the second post in the Private Link Reality Bites series! After the first post where we went over the concept of private endpoints as control plane elements, in…
22/01/2025
Azure Firewall and Service Endpoints
In my recent blog series Private Link reality bites I briefly mentioned the possibility of inspecting Service Endpoints with Azure Firewall, and many have asked for more details on that configuration. Here we go!
First things first: what the heck am I talking about? Most Azure services such as…
14/04/2025 Article Bloggers Jose Moreno
You may be interested in
ExpressRoute traffic visibility: Flow Logs or Traffic Collector?
You might have heard about VNet Flow Logs, I posted about this new Azure feature here. One of the applications of VNet Flow Logs is to gain visibility into traffic…25/06/2024Interregional traffic in hub-and-spoke
In Azure you have two main ways of managing your virtual network connectivity: self-managed hub-and-spoke and Virtual WAN. Virtual WAN is a solution where Microsoft manages part of your virtual…09/12/2024ExpressRoute multi-region: triangles or squares?
I know, I know, this was the question you had in your head when you woke up this morning. If that wasn’t the case, let me try to explain what…29/11/2024VNet Flow Logs Recipes (part 2): fine-tune your security rules
Right when VNet Flow Logs were launched I blogged about some recipes that help to extract insights out of the different information fields contained in the Flow Logs. After working…08/04/2025Private Link reality bites – Private endpoints are an illusion
Welcome to this new series of blog posts in which I will be explaining some not-so-well-known facts about Azure Private Link and some associated technologies! This idea is born from…20/01/2025VNet Flow Logs recipes
You might have heard about the General Availability of Virtual Network Flow Logs in Azure, and even read the announcement blog post. When writing that post with Harsha CS I…08/05/2024Application Gateway for Containers: a not-so-gentle intro (4)
This post will explore the new support in Azure Application Gateway for Containers (AGC) for the overlay network option in Azure Kubernetes Service (AKS) as documented in https://aka.ms/agc/overlay, as well…02/04/2025Going beyond 8 peers in Azure Route Server
After a good while without posting anything, I finally decided to slowly recommence again. This first post is about a little BGP trick that may help you increase the scale…22/09/2025Monitoring Azure Networks with Alerts
Monitoring is one of those underrated disciplines: everybody tells you to do it, but nobody tells you exactly how. As a consequence, there are many different approaches and few concrete…28/06/2023Designing your SDWAN and Firewall into Azure Hub and Spoke
Designing network connectivity in public cloud can very quickly become a daunting task. Of course, public cloud providers do offer native networking services, and with those it is fairly easy.…24/11/2023Private Link reality bites: NXDomainRedirect
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an…11/02/2025