Cilium Network Policy in AKS
If you are following the Azure Kubernetes Service space, I am sure you noticed that Azure CNI powered by Cilium is Generally Available. But is this a big thing? What…
16/06/2023
VNet Flow Logs recipes
You might have heard about the General Availability of Virtual Network Flow Logs in Azure, and even read the announcement blog post. When writing that post with Harsha CS I had the chance to play a bit with VNet Flow Logs and Traffic Analytics, and I would…
08/05/2024 Article Bloggers Jose Moreno
You may be interested in
IPvlan with Docker in Azure
Today I was looking at IPvlan on a docker container in Azure along a colleague, and we found that there are plenty of documentation and blogs out there that might…10/05/2023Taxonomy of Azure PaaS service access
Azure PaaS service networking is quite a complex landscape to navigate. Documentation in Azure about this topic is located in different areas (under Networking and each specific PaaS service), and…12/01/2024TCP Proxy with Istio on AKS
You might have heard of the new AKS Gateway API, which will allow for much more functionality than the good, old ingress API that we all know and love. One…30/10/2023DRY Terraform code for Private Link and DNS
After last week’s almost-philosophical post on network complexity, let’s move on to more mundane tasks. Today I will focus on how to write efficient Terraform code to connect private endpoints…19/08/2023You want to use AS-path as your virtual hub routing preference
Wow, that was a long title. Let me give you another one: if you haven’t tested your High Availability (HA) or Disaster Recovery (DR) plans, you shouldn’t rely on them.…02/05/2023Monitoring Azure Networks with Alerts
Monitoring is one of those underrated disciplines: everybody tells you to do it, but nobody tells you exactly how. As a consequence, there are many different approaches and few concrete…28/06/2023Getting visibility into your Azure Traffic with NSG Flow Logs
In every network you want to know what traffic is using it. Networking devices offer multiple options to report on traffic, such as Netflow, sFlow or IPFIX. However, these options…20/04/2023Calling Logic Apps from Data Factory securely
This one is going to be about a setup I recently tested with a customer: an Azure Data Factory pipeline needs to send email notifications via Azure Logic Apps, and…03/03/2023Get certificates with Azure Key Vault extension to your Linux VMs
Certificate management is one of those IT disciplines that is nobody’s dream, and still it can have quite a dramatic (negative) impact in your web presence if not done properly,…18/09/2023Do not let ExpressRoute, VPN and SDWAN traffic bypass your firewall
I have recently expanded my SDWAN in hub-and-spoke networks design guide to include SDWAN-to-firewall routing. Initially I didn’t have this point, but recent conversations have made me realize that not…25/03/2024Designing your SDWAN and Firewall into Azure Hub and Spoke
Designing network connectivity in public cloud can very quickly become a daunting task. Of course, public cloud providers do offer native networking services, and with those it is fairly easy.…24/11/2023