Application Gateway for Containers: a not-so-gentle intro (3)

This post will take you one step further from the hello-world configuration that I described in the first post by adding TLS end-to-end, a scenario described in the public docs here. This blog is part of a series: TL;DR If you don’t have much time the diagram below, which is an extended version of the … Continue reading Application Gateway for Containers: a not-so-gentle intro (3)

Application Gateway for Containers: a not-so-gentle intro (2)

Have you ever have the feeling that something that should be easy turns into a mine field when you start working on it? I seem to be a specialist in not reading the required documentation and making rookie mistakes. Fortunately, Application Gateway for Containers (AGC) offers enough troubleshooting tools so that I could identify and … Continue reading Application Gateway for Containers: a not-so-gentle intro (2)

Application Gateway for Containers: a not-so-gentle intro (1)

I haven’t had a look at the Azure Application Gateway for Containers for a while now, and after I was recently asked about it I decided to go for another dive. I believe I found a couple of interesting things that would be worthy to share, so here we go. This blog post is part … Continue reading Application Gateway for Containers: a not-so-gentle intro (1)

Private Link reality bites – service endpoints vs private link

Welcome to the sixth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: This question is as old as Private Link itself. Countless blog posts have already been written about it, not to mention this brief answer in the Private Link FAQ. Still, there are some … Continue reading Private Link reality bites – service endpoints vs private link

Private Link reality bites: NXDomainRedirect

Welcome to the fifth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: In this post with such a cryptic title I am going to cover one of the newest features in Azure DNS, which solves one of the oldest problems with Azure DNS and Private … Continue reading Private Link reality bites: NXDomainRedirect

Private Link reality bites: Azure Firewall app rules

Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: After the last post on Network Address Translation (NAT) for private endpoints, in this one we are going to dive into how to do the same with Azure Firewall proxy technology: … Continue reading Private Link reality bites: Azure Firewall app rules

Private Link reality bites: what’s my source IP?

Welcome to the third post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Big shoutout here to my esteemed colleague and oracle for Azure Networking Daniel Mauser. If you don’t know his GitHub site, make sure you check it out! Thanks as well to … Continue reading Private Link reality bites: what’s my source IP?

Private Link reality bites – Your routes might be lying

Welcome to the second post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: In this post I am going to explore something that silently has started to work in a different way as it used to: routing in the GatewaySubnet, or how to send … Continue reading Private Link reality bites – Your routes might be lying

Private Link reality bites – Private endpoints are an illusion

Welcome to this new series of blog posts in which I will be explaining some not-so-well-known facts about Azure Private Link and some associated technologies! This idea is born from the fact that I have been helping some colleagues and customers lately with some questions around Private Link, and that has made me realize that … Continue reading Private Link reality bites – Private endpoints are an illusion

Interregional traffic in hub-and-spoke

In Azure you have two main ways of managing your virtual network connectivity: self-managed hub-and-spoke and Virtual WAN. Virtual WAN is a solution where Microsoft manages part of your virtual networks for you, and in exchange it gives you some benefits such as any-to-any routing out of the box. However, what if you need that … Continue reading Interregional traffic in hub-and-spoke