Application Gateway for Containers: a not-so-gentle intro (1)

I haven’t had a look at the Azure Application Gateway for Containers for a while now, and after I was recently asked about it I decided to go for another dive. I believe I found a couple of interesting things that would be worthy to share, so here we go. This blog post is part … Continue reading Application Gateway for Containers: a not-so-gentle intro (1)

Private Link reality bites – service endpoints vs private link

Welcome to the sixth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: This question is as old as Private Link itself. Countless blog posts have already been written about it, not to mention this brief answer in the Private Link FAQ. Still, there are some … Continue reading Private Link reality bites – service endpoints vs private link

Private Link reality bites: NXDomainRedirect

Welcome to the fifth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: In this post with such a cryptic title I am going to cover one of the newest features in Azure DNS, which solves one of the oldest problems with Azure DNS and Private … Continue reading Private Link reality bites: NXDomainRedirect

Private Link reality bites: Azure Firewall app rules

Welcome to the fourth post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: After the last post on Network Address Translation (NAT) for private endpoints, in this one we are going to dive into how to do the same with Azure Firewall proxy technology: … Continue reading Private Link reality bites: Azure Firewall app rules

Private Link reality bites: what’s my source IP?

Welcome to the third post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: Big shoutout here to my esteemed colleague and oracle for Azure Networking Daniel Mauser. If you don’t know his GitHub site, make sure you check it out! Thanks as well to … Continue reading Private Link reality bites: what’s my source IP?

Private Link reality bites – Your routes might be lying

Welcome to the second post in the Private Link Reality Bites series! Before we begin, let me recap the existing episodes of the series: In this post I am going to explore something that silently has started to work in a different way as it used to: routing in the GatewaySubnet, or how to send … Continue reading Private Link reality bites – Your routes might be lying

Private Link reality bites – Private endpoints are an illusion

Welcome to this new series of blog posts in which I will be explaining some not-so-well-known facts about Azure Private Link and some associated technologies! This idea is born from the fact that I have been helping some colleagues and customers lately with some questions around Private Link, and that has made me realize that … Continue reading Private Link reality bites – Private endpoints are an illusion

Power Automate and KQL integration

If you are working with Azure, you will probably have some logs or data stored in a repository such as Azure Data Explorer or Log Analytics. Kusto Query Language (KQL) is what you use to extract information from these repositories. KQL is similar to SQL in that it allows you a rich set of operations … Continue reading Power Automate and KQL integration

NSG: any protocol, specific port?

This one is going to be quick. The question is the following: if you have an Network Security Group rule in Azure that matches any protocol, but a specific TCP or UDP port number, what is the effect? Would protocols such as ICMP be matched as well? To verify this I have this NSG: If … Continue reading NSG: any protocol, specific port?

ExpressRoute multi-region: triangles or squares?

The square design in ExpressRoute is not a recommended practice, but it can mean savings in ExpressRoute costs of up to 90%.