Azure Machine Learning inferencing on AKS under the covers

You probably know that you can use Azure Machine Learning Services to support you along the complete life cycle of your Machine Learning development, from training to deployment. And you probably know as well that for production-grade deployments one of the best platforms to run your inferencing is Kubernetes. From the Azure Machine Learning portal … Continue reading Azure Machine Learning inferencing on AKS under the covers

Azure RedHat Openshift and Hybrid Networking

Hey there! As you might have read, some time ago I wrote a pretty detailed “A day in the life of a packet” post series on how networking works in detail in Azure RedHat Openshift (ARO). Some of the feedback around those blog posts was that they are far too technical, and hard to read … Continue reading Azure RedHat Openshift and Hybrid Networking

BGP Azure Lab Maker

NOTE: the good old Cisco Cloud Services Router (CSR) has been deprecated, and its replacement is the Catalyst 8000v. However, I have not been able to make the Cat8Kv work in Azure: the reload command (required to activate its license) apparently always takes a manual confirmation, and some of the IPsec policies I used to … Continue reading BGP Azure Lab Maker

Connect two Virtual WANs to each other over VPN

You might know what Azure Virtual WAN is: in essence it is a network connectivity model in Azure where you can attach your Virtual Networks, your VPN branches, your ExpressRoute sites and your remote users connecting over VPN to it, and everybody can talk to each other. The main component of Azure Virtual WAN is … Continue reading Connect two Virtual WANs to each other over VPN

A day in the life of a Packet in Azure Redhat Openshift (part 5)

In this part 5 of the series of posts on ARO networking we are going to create a second pair of routers in order to expose applications both internally and externally. Other parts of this blog series include: Part 1: Intro and SDN Plugin Part 2: Internet and Intra-cluster Communication Part 3: Inter-Project and Vnet … Continue reading A day in the life of a Packet in Azure Redhat Openshift (part 5)

A day in the life of a Packet in Azure Redhat Openshift (part 4)

In this part of this blog series we will have a look at how Azure Redhat Openshift works with Azure Private Link, as well as how DNS resolutions works including DNS forwarding to resolve on-premises private zones. You can find the other parts of the blog series here: Part 1: Intro and SDN Plugin Part … Continue reading A day in the life of a Packet in Azure Redhat Openshift (part 4)

A day in the life of a packet in Azure Redhat Openshift (part 3)

This is part 3 of a blog series around networking in Azure Redhat Openshift, and we will see how pods talk to each other inside of the cluster and to other systems in the virtual Network or on-premises. Other posts in the series: Part 1: Intro and SDN Plugin Part 2: Internet and Intra-cluster Communication … Continue reading A day in the life of a packet in Azure Redhat Openshift (part 3)

A day in the life of a packet in Azure Redhat Openshift (part 2)

In this part 2 of my blog series around ARO networking we will have a look and how inbound and outbound Internet connectivity works, as well as connectivity between different pods in the cluster. Other posts in the series: Part 1: Intro and SDN Plugin Part 2: Internet and Intra-cluster Communication Part 3: Inter-Project and … Continue reading A day in the life of a packet in Azure Redhat Openshift (part 2)

A day in the life of a packet in Azure Redhat Openshift (part 1)

I have been wanting to look into this for a while now, and I finally found a good excuse to do it. You might have read my series of posts on AKS networking, the goal of this is doing something similar with Azure Redhat Openshift (ARO). This is part 1 of a blog series around … Continue reading A day in the life of a packet in Azure Redhat Openshift (part 1)

Filtering traffic to Private Endpoints with Azure Firewall

If you are reading this, you probably already know what Azure Private Link is: a representation of a service such as Azure Storage, Azure SQL Database, Azure Application Service, or even some application running in a different Virtual Network, in your own Virtual Network with a private IP address of your own. This is a … Continue reading Filtering traffic to Private Endpoints with Azure Firewall