Cilium Network Policy in AKS
If you are following the Azure Kubernetes Service space, I am sure you noticed that Azure CNI powered by Cilium is Generally Available. But is this a big thing? What…
16/06/2023
Do not let ExpressRoute, VPN and SDWAN traffic bypass your firewall
I have recently expanded my SDWAN in hub-and-spoke networks design guide to include SDWAN-to-firewall routing. Initially I didn’t have this point, but recent conversations have made me realize that not everybody understand this.
The main difficulty in this topic is related to the fact that you cannot inspect the…
25/03/2024 Article Bloggers Jose Moreno
You may be interested in
You want to use AS-path as your virtual hub routing preference
Wow, that was a long title. Let me give you another one: if you haven’t tested your High Availability (HA) or Disaster Recovery (DR) plans, you shouldn’t rely on them.…02/05/2023TCP Proxy with Istio on AKS
You might have heard of the new AKS Gateway API, which will allow for much more functionality than the good, old ingress API that we all know and love. One…30/10/2023IPvlan with Docker in Azure
Today I was looking at IPvlan on a docker container in Azure along a colleague, and we found that there are plenty of documentation and blogs out there that might…10/05/2023Is Computer Networking too complex?
This question has been bothering me for quite some time now. Other technology areas constantly look to reduce complexity: take for example one of the most difficult fields out there,…11/08/2023DRY Terraform code for Private Link and DNS
After last week’s almost-philosophical post on network complexity, let’s move on to more mundane tasks. Today I will focus on how to write efficient Terraform code to connect private endpoints…19/08/2023Deploy (Azure) Network-as-Code as a champ
Virtually every expert out there recommends following an Infrastructure-as-Code approach to manage Azure Networks, and even more so when dealing with traffic segmentation features such as firewall rulesets and network…08/06/2023Get certificates with Azure Key Vault extension to your Linux VMs
Certificate management is one of those IT disciplines that is nobody’s dream, and still it can have quite a dramatic (negative) impact in your web presence if not done properly,…18/09/2023Getting visibility into your Azure Traffic with NSG Flow Logs
In every network you want to know what traffic is using it. Networking devices offer multiple options to report on traffic, such as Netflow, sFlow or IPFIX. However, these options…20/04/2023Monitoring Azure Networks with Alerts
Monitoring is one of those underrated disciplines: everybody tells you to do it, but nobody tells you exactly how. As a consequence, there are many different approaches and few concrete…28/06/2023Azure network monitoring with synthetic traffic
Wow, that was a mouthful. But it describes what I would like to discuss in this post. Networks are at the basis of every IT infrastructure, so when they don’t…23/01/2024Calling Logic Apps from Data Factory securely
This one is going to be about a setup I recently tested with a customer: an Azure Data Factory pipeline needs to send email notifications via Azure Logic Apps, and…03/03/2023