Private Link reality bites: what’s my source IP?
Welcome to the third post in the Private Link Reality Bites series! Big shoutout here to my esteemed colleague and oracle for Azure Networking Daniel Mauser. If you don’t know…
27/01/2025
Do not let ExpressRoute, VPN and SDWAN traffic bypass your firewall
I have recently expanded my SDWAN in hub-and-spoke networks design guide to include SDWAN-to-firewall routing. Initially I didn’t have this point, but recent conversations have made me realize that not everybody understand this.
The main difficulty in this topic is related to the fact that you cannot inspect the…
25/03/2024 Article Bloggers Jose Moreno
You may be interested in
Azure Subnet Peering
First of all, my apologies for the radio silence, there have been some private projects going on during the Summer months that have kept me away from blogging. With that…01/10/2024Private Link reality bites – Private endpoints are an illusion
Welcome to this new series of blog posts in which I will be explaining some not-so-well-known facts about Azure Private Link and some associated technologies! This idea is born from…20/01/2025NSG: any protocol, specific port?
This one is going to be quick. The question is the following: if you have an Network Security Group rule in Azure that matches any protocol, but a specific TCP…03/12/2024Azure Firewall and Service Endpoints
In my recent blog series Private Link reality bites I briefly mentioned the possibility of inspecting Service Endpoints with Azure Firewall, and many have asked for more details on that…14/04/2025Private Link reality bites – Your routes could be lying
Welcome to the second post in the Private Link Reality Bites series! After the first post where we went over the concept of private endpoints as control plane elements, in…22/01/2025Simulating VPN sites in Azure with Ubuntu 24.04 and StrongSwan
Disclaimer: this post is going to be quite geeky. So this is not the kind of post you want to read if you don’t need this stuff. But hey, I…05/07/2024VNet Flow Logs Recipes (part 2): fine-tune your security rules
Right when VNet Flow Logs were launched I blogged about some recipes that help to extract insights out of the different information fields contained in the Flow Logs. After working…08/04/2025Going beyond 8 peers in Azure Route Server
After a good while without posting anything, I finally decided to slowly recommence again. This first post is about a little BGP trick that may help you increase the scale…22/09/2025Monitoring Azure Networks with Alerts
Monitoring is one of those underrated disciplines: everybody tells you to do it, but nobody tells you exactly how. As a consequence, there are many different approaches and few concrete…28/06/2023Designing your SDWAN and Firewall into Azure Hub and Spoke
Designing network connectivity in public cloud can very quickly become a daunting task. Of course, public cloud providers do offer native networking services, and with those it is fairly easy.…24/11/2023Private Link reality bites – service endpoints vs private link
Welcome to the sixth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an…17/02/2025