Default routes in Azure can be anything like forced tunneling and advertising 0.0.0.0/0 from on-prem, BGP based NVAs inside of Azure vWAN hubs, or a FW in the vWAN hub. Here’s how it compares across both Azure vWAN and the traditional Azure vNets. Azure vWAN uses the concept of connections, which connects vNets to vWAN hubs and is where you configure the routes. Whereas traditional vNets make use of Route Tables where you configure the routes. While these settings are more of less the same, the slight difference is that with with vWAN Propagate Default Route, this allows the default…
Azure Cost Optimization
Ways that you can save money on Azure. Reservations You can scope a reservation to a subscription or resource groups. Setting the scope for a reservation selects where the reservation savings apply. When you scope the reservation to a resource group, reservation discounts apply only to the resource group—not the entire subscription. Single resource group scope — Applies the reservation discount to the matching resources in the selected resource group only. Single subscription scope — Applies the reservation discount to the matching resources in the selected subscription. Shared scope — Applies the reservation discount to matching resources in eligible subscriptions that are in…
Terraform-Azure-Virtual-WAN-no-Azure-Firewall
The Repo This blog focuses on this repo: https://github.com/marckean/Terraform-Azure-Virtual-WAN-no-Azure-Firewall Overview Multi-environment (Prod / Non-Prod / Shared Services) using Azure Virtual WAN, with 3 vWAN hubs in the same region to provide total isolation of the network. This focuses on the Azure side of things, as a second step to this, you would connect to this from on-prem using either ExpressRoute or VPN. Pretty much the requirement here is that Prod can talk to Shared Services, Non-Prod can talk to Shared Services, but Prod & Non-Prod can’t talk to each other. There is total isolation between Prod & Non-Prod. Deployment Instructions [!NOTE] In the real world for large enterprise companies, you would most likely…
Azure Shared Services | Multi environments
I had an enterprise customer that needed to setup a multi-environment (prod/non-prod) Azure network that also comprised of a separate Shared Services. The customer needed complete isolation between the Azure prod/non-prod vNets. The Azure Shared Services vNet had to be accessed as a direct connection from the Azure prod/non-prod vNets, but also could be accessed from on-prem directly if needed. Their requirements: Single region end-to-end redundancy This example uses Australia East (Sydney) On-prem datacenter redundancy, multiple ExpressRoute circuits terminating in different ExpressRoute peering locations. Azure vNets to be consolidated within each environment (Prod/Non-prod) using appropriate option (Hub vNet / Azure…
A-Z of Australian Rock & Roll
My video for Australia Day, took me 3 days to make with Adobe Premiere hence the change of clothes throughout the video, but in brief, it’s the A-Z of Australian Rock from the 80’s in time for Australia 🇦🇺 Day, four and half hours of commercial-free VIDEOS. You can stream it on your TV using the Vimeo app on your phone, then have it playing in the background. What’s more, any of the videos that had bad quality audio, I swapped out the bad audio with much better quality audio and took the time to lip sync it (about half…
Nova 969 Sydney 2020 NYE (6pm-6am)
Nova 969 Sydney 2020 NYE (New Years Eve) mix (6pm-6am) – 12 hours commercial free. This playlist on SoundCloud has 12 tracks, one track for each hour from 6pm – 6am.
Azure Networking Sessions | Ignite 2020
Sessions below, all Azure Networking based – knock yourself out! Inside Azure Datacenter Architecture with Mark Russinovich Mark Russinovich Tech Community https://medius.studios.ms/video/asset/HIGHMP4/IG20-OD221 What’s new in Azure Networking Narayan Annamalai OD226 Tech Community https://medius.studios.ms/video/asset/HIGHMP4/IG20-OD226 Advanced E2E architectures and new capabilities for Azure Virtual Network (VNet) Narayan Annamalai YouTube https://youtu.be/F44W3_kGX0U Build and monitor highly available applications with Azure’s Network Load Balancer Anavi Nahar YouTube https://youtu.be/w-VntkWCzJc Design high performance networks for your hybrid workloads Jared Ross YouTube https://youtu.be/Da7yH53vq0A Architect and simplify hybrid networking with Azure Virtual WAN and SD-WAN Reshmi Yandapalli YouTube https://youtu.be/nOmlUg9Li1s Create distributed and low-latency network architectures…
Resize Azure Virtual Machines in Parallel
Imagine you had to resize a whole bunch of VMs in Azure, rather than doing a resize one after the other in serial, you can do this in parallel with the new ForEach-Object Parallel feature in PowerShell v7. More details on this feature here – https://devblogs.microsoft.com/powershell/powershell-foreach-object-parallel-feature/ Doing this in parallel will greatly speed up the process by resizing any number of VMs all at once. To start with, you will need a CSV file with two columns, vmname,targetsize. Enter all the VM names of the VMs that you want to resize, also the correct VM size. Sample CSV file: To get a list of Azure VM…
Azure Private Link DNS
Azure Private Link is a private connection to Azure PaaS services. However to really understand private link, you need to understand what is happening under the covers – with DNS. Before you enable Private Link for a PaaS service e.g. Azure SQL, if you had an Azure PaaS service URL e.g. Sql321.database.windows.net (a global zone), the following would be the DNS resolution that would occur: You had a virtual machine that made a request to Sql321.database.windows.net This DNS request resolved to a DNS CNAME record and was forwarded by using a redirect (CNAME) to another regional DNS zone of westeurope1-a.control.database.windows.net…
Azure Networking Sessions | Ignite 2019
Microsoft Ignite just completed in the US beginning of November 2019. As a result, it’s left us with a whole bunch of free and awesome content to keep us busy. Put Netflix aside for the next month or so and watch all the Ignite videos instead. To help, I managed to collate the Azure Networking topics all into the one single YouTube playlist. Also too if you want to find the rest of the Ignite videos, here’s the raw JSON payload with all the sessions: This file has been truncated, but you can view the full file. This file contains…
You must be logged in to post a comment.