TCP Proxy with Istio on AKS
You might have heard of the new AKS Gateway API, which will allow for much more functionality than the good, old ingress API that we all know and love. One…
30/10/2023
Is Computer Networking too complex?
This question has been bothering me for quite some time now. Other technology areas constantly look to reduce complexity: take for example one of the most difficult fields out there, data science. Some years ago you needed a degree to even start with it, and now you can build and…
11/08/2023 Article Bloggers Jose Moreno
You may be interested in
Interregional traffic in hub-and-spoke
In Azure you have two main ways of managing your virtual network connectivity: self-managed hub-and-spoke and Virtual WAN. Virtual WAN is a solution where Microsoft manages part of your virtual…09/12/2024Deploy (Azure) Network-as-Code as a champ
Virtually every expert out there recommends following an Infrastructure-as-Code approach to manage Azure Networks, and even more so when dealing with traffic segmentation features such as firewall rulesets and network…08/06/2023Private Link reality bites – Your routes could be lying
Welcome to the second post in the Private Link Reality Bites series! After the first post where we went over the concept of private endpoints as control plane elements, in…22/01/2025ExpressRoute multi-region: triangles or squares?
I know, I know, this was the question you had in your head when you woke up this morning. If that wasn’t the case, let me try to explain what…29/11/2024Getting visibility into your Azure Traffic with NSG Flow Logs
In every network you want to know what traffic is using it. Networking devices offer multiple options to report on traffic, such as Netflow, sFlow or IPFIX. However, these options…20/04/2023Private Link reality bites: Azure Firewall app rules
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints…10/02/2025VNet Flow Logs Recipes (part 2): fine-tune your security rules
Right when VNet Flow Logs were launched I blogged about some recipes that help to extract insights out of the different information fields contained in the Flow Logs. After working…08/04/2025Application Gateway for Containers: a not-so-gentle intro (3)
This post will take you one step further from the hello-world configuration that I described in the first post by adding TLS end-to-end, a scenario described in the public docs…14/03/2025DRY Terraform code for Private Link and DNS
After last week’s almost-philosophical post on network complexity, let’s move on to more mundane tasks. Today I will focus on how to write efficient Terraform code to connect private endpoints…19/08/2023Power Automate and KQL integration
If you are working with Azure, you will probably have some logs or data stored in a repository such as Azure Data Explorer or Log Analytics. Kusto Query Language (KQL)…06/12/2024Private Link reality bites: NXDomainRedirect
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an…11/02/2025