Thoughts from the clouds
This post will explore the new support in Azure Application Gateway for Containers (AGC) for the overlay network option in Azure Kubernetes Service (AKS) as documented in https://aka.ms/agc/overlay, as well as whether you can see traffic between AGC and AKS with VNet Flow Logs. This blog is part of a series: 1. Introduction to AGC architecture … Continue reading Application Gateway for Containers: a not-so-gentle intro (4)
I would like to credit for this blog post to Abhishek Sharma, talking to him gave me the main inspiration for some of the concepts you are going to see below. Heartfelt thanks go as well to Niti Gupta, a kickass Microsoft engineer who can make Azure Monitor Workbooks really dance and who gave me … Continue reading Grafana and VNet Flow Logs
Azure Kubernetes Fleet Manager is a very interesting solution that allows you to deploy code to multiple clusters at the same time. I am not going to stir up the debate here of whether this approach is better or worse than GitOps or CD pipeline parametrization, but instead I am going to look in detail … Continue reading Azure Fleet load balancing: not what you think
This post will take you one step further from the hello-world configuration that I described in the first post by adding TLS end-to-end, a scenario described in the public docs here. This blog is part of a series: 1. Introduction to AGC architecture and components 2. Troubleshooting 3. Resource model expansion: end-to-end TLS (this post) … Continue reading Application Gateway for Containers: a not-so-gentle intro (3)
Have you ever have the feeling that something that should be easy turns into a mine field when you start working on it? I seem to be a specialist in not reading the required documentation and making rookie mistakes. Fortunately, Application Gateway for Containers (AGC) offers enough troubleshooting tools so that I could identify and … Continue reading Application Gateway for Containers: a not-so-gentle intro (2)
I haven’t had a look at the Azure Application Gateway for Containers for a while now, and after I was recently asked about it I decided to go for another dive. I believe I found a couple of interesting things that would be worthy to share, so here we go. This blog post is part … Continue reading Application Gateway for Containers: a not-so-gentle intro (1)
Welcome to the sixth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an illusion (control plane vs data plane) Private Link reality bite #2: your routes might be lying (routing in virtual network gateways) Private Link reality bite #3: what’s … Continue reading Private Link reality bites – service endpoints vs private link
Welcome to the fifth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an illusion (control plane vs data plane) Private Link reality bite #2: your routes might be lying (routing in virtual network gateways) Private Link reality bite #3: what’s … Continue reading Private Link reality bites: NXDomainRedirect
Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an illusion (control plane vs data plane) Private Link reality bite #2: your routes might be lying (routing in virtual network gateways) Private Link reality bite … Continue reading Private Link reality bites: Azure Firewall app rules
Welcome to the third post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Private Link reality bite #1: endpoints are an illusion (control plane vs data plane) Private Link reality bite #2: your routes might be lying (routing in virtual network gateways) Private Link … Continue reading Private Link reality bites: what’s my source IP?
