How much of an Azure landing zone network do you manage with Terraform?
I’m building a hub-and-spoke Azure landing zone and want to manage as much of the network as practical with Terraform. Our current baseline is mostly scripts run by…
VNet peering
Troubleshooting Azure Application Gateway v2 502s to a Private Storage Endpoint
I have an Azure hub-and-spoke deployment with two Application Gateway v2 instances in the hub: one for public traffic and one for internal traffic. Both have private and…
Azure Application Gateway Returns 502 When Accessing a Storage Private Endpoint
I deployed Azure Application Gateway v2 in a hub-and-spoke network. There are two gateways in the hub: one for public traffic and another for internal traffic. Their backend…
Should Azure API Management and WAF live in the hub or a dedicated spoke?
We're deploying several applications that need an API gateway. One option is to place Azure API Management and the WAF in the shared hub, then expose or reach…
How can I limit Azure VNet peering to only selected IP ranges?
I'm designing an Azure hub-and-spoke network with several spoke VNets connected through a hub VNet. The hub contains VMs that act as network virtual appliances (NVAs), and user-defined…
How can I limit Azure VNet peering to only selected IP ranges?
I'm designing an Azure hub-and-spoke network with several spoke VNets connected to a hub VNet. The hub contains network virtual appliances (NVAs), and user-defined routes send spoke traffic…
When does an Azure hub-and-spoke network make sense?
I'm building a small Azure environment from scratch with two domain controllers and a few application servers. I initially considered putting the domain controllers in a hub VNet…
What’s the best way to route traffic between peered hub VNets through NVAs?
We have multiple Azure hub VNets deployed in different regions. The hubs are peered, and traffic between them needs to pass through network virtual appliances (NVAs). What routing…
How to Connect Azure App Service to Application Gateway Across Tenants?
I'm trying to connect an Azure App Service hosted in a different tenant (let's call it tenant A) to an Application Gateway in another tenant (tenant B). I've…