Introduction

I work for Microsoft and spend 90% of my time on Cloud Networking. You won't find much code here, rather articles relating to the design and configuration of Azure Networking solutions and products. Checkout who I follow on GitHub for colleagues at Microsoft who publish similar content.

Connect with me:

Repo structure

• Azure P2S VPN

  • Migrate from DirectAccess to Always On VPN with Azure Virtual WAN
  • Migrate from DirectAccess to Always On VPN with Azure VPN Gateway
  • Azure VPN Client deployment via Intune
  • Optimising Azure VPN P2S costs using Intune and Windows 10 VPN autotrigger
  • Windows 10 IKEv2 traffic selectors
  • P2S command cheatsheet
  • P2S custom routes

• Azure S2S VPN

  • High-security S2S VPN connectivity, Azure to 3rd parties
  • Expected downtime when resizing VPN Gateway SKU
  • AS-path manipulation A/A VPN-GW
  • Floating IP failover behaviour on VPN GW and VWAN

• Azure Private Link

  • Azure Private Link Governance using RBAC and Azure Policy
  • Using Azure Firewall as DNS Forwarder with Private Link
  • Azure Private Link DNS MicroHack
  • DNS considerations for Multi-region use of Azure Private Link
  • Multi-region Private Link Service categories
  • Azure Site Recovery and Private Link DNS
  • Using Azure Private Link with PartitionedDns enabled Azure Storage accounts

• Azure Virtual WAN

  • Azure Virtual WAN BGP Peering - Anycast multi-region load balancing
  • Connect Cisco ASA to VWAN via IPsec VPN
  • Azure Virtual WAN Route-Maps ASN guidance
  • VWAN default route scenarios
  • VWAN Forced tunnel over s2s VPN

• Azure ExpressRoute

  • ExpressRoute Migration Guide
  • Combining ExpressRoute Direct with ExpressRoute Local
  • ExpressRoute GlobalReach and AVS considerations
  • ExpressRoute ECMP behaviour

• Azure Route Server

  • ARS summarisation
  • Azure Route Server and Anycast
  • Azure Route Server + Infoblox
  • Azure Route Server MSEE transit gotchas

• Azure Load Balancing

  • Azure Load Balancer hairpin
  • Cross-region private network load balancing in Azure
  • Azure Load Balancer Floating IP to On-Premises (or AVS) backend
  • Azure Gateway Load Balancer Service Chaining with HAPRoxy and Palo Alto

• Azure Firewall

  • Stop/Start AZFW dataplane

• Azure DNS

  • Azure DNS Private Resolver topology options

• Other

  • Azure Networking Mindmap
  • SD-WAN and Azure
  • Beyond 500 Spoke VNets
  • ARS ESU Neworking guidance