Tag Archives: Networking

Using custom DNS server for domain specific name resolution with Azure Kubernetes Service

Just a short blog post about a small challenge I had these days. If you want to specify a custom DNS server for domain specific name resolution with AKS, you can do so. The necessary steps are already described in the Kubernetes documentation. -> https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/ Define a config map and apply it to your AKS cluster in Azure. The Read more [...]

Using ACS Engine to build private Kubernetes clusters with bring your own Virtual Network on Azure

Looking at Azure Container Service (AKS) – Managed Kubernetes you may have recognized that AKS currently does not support bring your own VNET and private Kubernetes masters. If you need both capabilities and one of them today, you must use ACS Engine to create the necessary Azure Resource Manager templates for the Kubernetes cluster deployment. -> https://github.com/Azure/acs-engine Beside Read more [...]

Deploying Application Security Groups with an Azure Resource Manager template

This month Microsoft launched the public preview of the Application Security Groups, short ASG, in all Azure regions. -> https://azure.microsoft.com/en-us/updates/public-preview-for-asg/ ASGs are like a security group and makes it easier to define an Azure Network Security Group rule set. You can join Azure VMs or to be more specific the Azure VM’s NIC to an ASG. In the next step you would Read more [...]

Deploy NSG augmented security rules with Azure Resource Manager templates

In my previous blog post “Working with NSG augmented security rules in Azure” I described what the NSG augmented security rules are and how you can leverage them with PowerShell. -> https://www.danielstechblog.io/working-nsg-augmented-security-rules-azure/ In this blog post I will briefly describe how to implement the augmented security rules in your Azure Resource Manager template. First, Read more [...]

Working with NSG augmented security rules in Azure

At Microsoft Ignite this year Microsoft has announced several networking improvements and features in Azure. Most of them are currently in public preview and can be tested like the augmented security rules for NSGs in Azure. -> https://azure.microsoft.com/en-us/updates/public-preview-features-for-nsgs/ What are augmented security rules? In short, they extend the rule set, so you can specify Read more [...]

Troubleshoot Azure VPN gateways with the Azure Network Watcher

Earlier this year Microsoft has launched a new Azure service for network diagnostics and troubleshooting called Network Watcher. -> https://azure.microsoft.com/en-us/services/network-watcher/ The Network Watcher offers a range of tools like VPN diagnostics and packet capturing to mention two of them. But I would like to talk about the VPN diagnostics capability in this blog post. Before Read more [...]

Demystifying Azure VMs bandwidth specification – F-series

As you may know Microsoft specifies the bandwidth of Azure VMs with low, moderate, high, very high and extremely high. As Yousef Khalidi, CVP Azure Networking, has written in his blog post in March, Microsoft will provide specific numbers to each Azure VM size in April. When our world-wide deployment completes in April, we’ll update our VM Sizes table so you can see the expected networking throughput Read more [...]

Azure Germany services URLs and IP addresses for firewall or proxy whitelisting

When you are working with Azure Germany sometimes you have to whitelist specific IP address ranges or URLs in your corporate firewall or proxy to access all Azure services you are using or trying to use. Some information like the datacenter IP ranges and some of the URLs are easy to find. Other things are more complicated to find like calling IP addresses of specific Azure services or specific URLs. The Read more [...]

Azure services URLs and IP addresses for firewall or proxy whitelisting

When you are working with Azure sometimes you have to whitelist specific IP address ranges or URLs in your corporate firewall or proxy to access all Azure services you are using or trying to use. Some information like the datacenter IP ranges and some of the URLs are easy to find. Other things are more complicated to find like calling IP addresses of specific Azure services or specific URLs. The Read more [...]

Microsoft Azure Route Table effective routes evaluation

Another hidden gem in Azure is the effective routes evaluation. The effective routes evaluation can be found under the category SUPPORT + TROUBLESHOOTING in each Route Table or NIC. You only have to select the subnet and the VM’s NIC. Now you get an overview which routes are applied to the VM’s NIC. For an offline analysis there is a download option, that generates a CSV file of Read more [...]