Application Gateway for Containers: Web Application Firewall support (5)

This post will explore the new support in Azure Application Gateway for Containers (AGC) for Web Application Firewall (WAF) as documented in https://aka.ms/agc/waf. This blog is part of a series: 1. Introduction to AGC architecture and components 2. Troubleshooting 3. Resource model expansion: end-to-end TLS 4. Overlay networking and VNet Flow Logs (this post) 5. Web Application Firewall (this post) 6. … Continue reading Application Gateway for Containers: Web Application Firewall support (5)

Azure Fleet load balancing: not what you think

Azure Kubernetes Fleet Manager is a very interesting solution that allows you to deploy code to multiple clusters at the same time. I am not going to stir up the debate here of whether this approach is better or worse than GitOps or CD pipeline parametrization, but instead I am going to look in detail … Continue reading Azure Fleet load balancing: not what you think

Application Gateway for Containers: a not-so-gentle intro (3)

This post will take you one step further from the hello-world configuration that I described in the first post by adding TLS end-to-end, a scenario described in the public docs here. This blog is part of a series: 1. Introduction to AGC architecture and components 2. Troubleshooting 3. Resource model expansion: end-to-end TLS (this post) … Continue reading Application Gateway for Containers: a not-so-gentle intro (3)

Application Gateway for Containers: a not-so-gentle intro (1)

I haven’t had a look at the Azure Application Gateway for Containers for a while now, and after I was recently asked about it I decided to go for another dive. I believe I found a couple of interesting things that would be worthy to share, so here we go. This blog post is part … Continue reading Application Gateway for Containers: a not-so-gentle intro (1)

Azure Machine Learning inferencing on AKS under the covers

You probably know that you can use Azure Machine Learning Services to support you along the complete life cycle of your Machine Learning development, from training to deployment. And you probably know as well that for production-grade deployments one of the best platforms to run your inferencing is Kubernetes. From the Azure Machine Learning portal … Continue reading Azure Machine Learning inferencing on AKS under the covers

A Day in the Life of a Packet in AKS (part 6): Network Policy

This post is a continuation from Part 5: Virtual Node. Other posts in this series: Part 1: deep dive in AKS with Azure CNI in your own vnet Part 2: deep dive in AKS with kubenet in your own vnet, and ingress controllers Part 3: outbound connectivity from AKS pods Part 4: NSGs with Azure … Continue reading A Day in the Life of a Packet in AKS (part 6): Network Policy