Azure Firewall Deep Dive Training
I’ll tell you about my new virtual training course on Azure Firewall and share some schedule information in this post. Background I’ve been talking about Azure Firewall for years. I’ve…
23/11/2024
Your Hub VNet Should Have No Compute
This post is going to explain why you should not be putting any compute into your hub VNet.
Background
I was looking at some Azure Landing Zones (reference architectures) from Microsoft before the end of 2023. I was shocked to see compute (VMs) being placed in the hub. Years…
09/01/2024 Article Bloggers Aidan Finn
You may be interested in
How Do Network Security Groups Work?
Yesterday, I explained how packets travel in Azure networking while telling you Azure virtual networks do not exist. The purpose was to get readers closer to figuring out how to…18/02/2025Azure Infrastructure Announcements – October 2023
October is the month of ghosts and monsters – Halloween (Samhain as we Celts originally called it). Read on to find out what ghouls and creatures crawled from under the…01/11/2023How Many Subnets Do I Need In An Azure Virtual Network?
You’re designing a new virtual network in Azure. You’re going to have three different security zones in your application. How many subnets do you need? I will help you understand…21/02/2025Referencing Private Endpoint IP Addresses In Terraform
It is possible to dynamically retrieve the resulting IP address of an Azure Private Endpoint and use it in other resources in Terraform. This post will show you how. Scenario…16/03/2023Why The Classic DMZ/Secure Zone Design Is Worthless in Azure
I see many people implementing classic network security designs in Azure. Maybe there’s DMZ and an internal virtual network. Maybe they split Production, Test, and Dev into three virtual networks.…05/03/2025Manage Existing Azure Firewall With Firewall Policy Using Bicep
In this post, I want to discuss how I recently took over the management of an existing Azure Firewall using Firewall Policy/Azure Firewall Manager and Bicep. Background We had a…10/12/2024Cannot Remove Subnet Because of App Service VNet Integration
Here I will describe how you can deal with an issue where you cannot delete a subnet from a VNet after deleting an Azure App Service or Function App with…13/02/2023Default Outbound Access For VMs In Azure Will Be Retired
Microsoft has announced that the default route, an implicit public IP address, is being deprecated 30 September 2025. Background Let’s define “Internet” for the purposes of this post. The Internet…12/10/2023Designing Network Security To Combat Modern Threats
In this post, I want to discuss how one should design network security in Microsoft Azure, dispensing with past patterns and combatting threats that are crippling businesses today. The Past…07/03/2024Azure Infrastructure Announcements – July 2023
Many people in Europe take the month of July off for vacation so they would have missed out on an unusually busy few weeks of announcements for Microsoft. This post…30/08/2023The Digital Intern – Early Experience with Microsoft Copilot
I will share my early experiences with Microsoft Copilot, the positives and negatives, clear up some false expectations, and explain why I think of Generative AI as a digital intern.…03/11/2023