SlideShare a Scribd company logo
1 of 23
Download to read offline
Tenminute.tech
AZUREVIRTUAL NETWORKS
Ten MinuteTech Presents:
Lesson 1: What is AzureVirtual Network?
Tenminute.tech
Azure Classic vs Azure Resource Manager
Tenminute.tech
In this lesson we will be using the Azure Resource Manager
What is AzureVirtual Network?
Tenminute.tech
• AzureVirtual Network enables Azure resources to
communicate with each other and the internet
• A virtual network isolates your resources from others'
resources in the Azure cloud
• You can connect virtual networks to other virtual
networks, or to your on-premises network
AzureVirtual Network capabilities
• Isolation
• Internet communication
• Azure resource communication
• Virtual network connectivity
• On-premises connectivity
• Traffic filtering
• Routing
Tenminute.tech
Network isolation and segmentation
• Virtual networks are isolated from one another
•You can create separate virtual networks for development,
testing, and production that use the same CIDR address
blocks
•You can create multiple virtual and connect the networks
together
•You can segment a virtual network into multiple subnets
•Azure provides internal name resolution for resources
deployed in a virtual network
•If necessary, you can configure a virtual network to use your
own DNS servers
Tenminute.tech
Internet communication
• By default Resources, such as virtual machines
deployed in a virtual network, have access to the
Internet
• You can also enable inbound access to specific
resources, as needed
Tenminute.tech
Azure resource communication
•Azure resources deployed in a virtual network can
communicate with each other using private IP addresses
even if the resources are deployed in different subnets
•Azure provides default routing between subnets,
connected virtual networks, and on-premises networks,
so you don't have to configure and manage routes
•If desired, you can customize Azure's routing
Tenminute.tech
Virtual network connectivity
•Virtual networks can be connected to each other,
enabling resources in any virtual network to
communicate with resources in any other virtual
network
Tenminute.tech
On-premises connectivity
•A virtual network can be connected to an on-premises
network, enabling resources to communicate between
each other
• Point-to-site virtual private network (VPN):
• Site-to-siteVPN:
• Azure ExpressRoute:
Tenminute.tech
Traffic filtering
•You can filter network traffic to and from resources in a
virtual network by source IP address and port,
destination IP address and port, and protocol
Tenminute.tech
Routing
• You can optionally override Azure's default routing by
configuring your own routes, or by propagating BGP
routes through a network gateway
Tenminute.tech
IP address types and allocation methods in Azure
• You can assign IP addresses to Azure resources to
communicate with other Azure resources, your on-
premises network, and the Internet
• There are two types of IP addresses you can use in
Azure:
•Public IP addresses
•Private IP addresses
Tenminute.tech
Public IP addresses
• Public IP addresses allow Internet resources to communicate inbound
to Azure resources
• The address is dedicated to the resource, until it is unassigned by you
• In Azure Resource Manager, a public IP address is a resource that has its
own properties
• Some of the resources you can associate a public IP address resource
with are:
• Virtual machine network interfaces
• Internet-facing load balancers
• VPN gateways
• Application gateways
Tenminute.tech
Private IP addresses
• Private IP addresses allowAzure resources to communicate
with other resources in a virtual network or an on-premises
network through aVPN gateway or ExpressRoute circuit,
without using an Internet-reachable IP address
• In the Azure Resource Manager deployment model, a private
IP address is associated to the following types of Azure
resources:
• Virtual machine network interfaces
• Internal load balancers (ILBs)
• Application gateways
Tenminute.tech
IP address allocation
• There are two methods in which a IP address are
allocated:
• Dynamic: Azure assigns the next available unassigned
or unreserved IP address in the subnet's address range
• Static:You select and assign any unassigned or
unreserved IP address in the subnet's address range
Tenminute.tech
DHCP
•DHCP is controlled by Azure
•For those you who want to try to set up DHCP on an
Azure virtual machine, you're going to be very surprised
when you realize that the role isn't even available to you
•And also, keep in mind, the IP address lease, is for the
lifetime of the virtual machine, until you restart, stop or
deallocate theVM
Tenminute.tech
Azure-provided name resolution
•Azure provides internal name resolution forVMs and role
instances that reside within the same virtual network or cloud
service
•VMs/instances in a Cloud Service share the same DNS suffix
• DNS names can be assigned to both NICs andVMs
•You can roll your own DNS if required
Tenminute.tech
AzureVirtual Network
Tenminute.tech
Virtual Network
Internet
Load Balancer
Web Server
VM
Web Server
VM
Load Balancer
Domain Controller
VM
Database Server
VM
Database Server
VM
Azure
Frontend Subnet Backend Subnet
East US Region
AzureVNet toVNet
Tenminute.tech
Virtual Network
Frontend Subnet Backend Subnet
VPN Gateway
East US Region
Azure
Virtual Network
Frontend Subnet Backend Subnet
z
VPN Gateway
West US Region
Azure
Tunnel
Internet
Hybrid Network
Tenminute.tech
Virtual Network
Frontend Subnet Backend Subnet
VPN Gateway
East US Region
Azure
Network
z
VPN Gateway
On Premise Nerwork
Tunnel
Internet
CONCLUSION
Tenminute.tech
Tenminute.tech

More Related Content

What's hot

Openstack presentation
Openstack presentationOpenstack presentation
Openstack presentationSankalp Jain
 
ExpertsLive NL 2018 - A deepdive into Azure Networking
ExpertsLive NL 2018 - A deepdive into Azure NetworkingExpertsLive NL 2018 - A deepdive into Azure Networking
ExpertsLive NL 2018 - A deepdive into Azure NetworkingKarim Vaes
 
Deep Dive: OpenStack Summit (Red Hat Summit 2014)
Deep Dive: OpenStack Summit (Red Hat Summit 2014)Deep Dive: OpenStack Summit (Red Hat Summit 2014)
Deep Dive: OpenStack Summit (Red Hat Summit 2014)Stephen Gordon
 
Birmingham-20060705
Birmingham-20060705Birmingham-20060705
Birmingham-20060705Miguel Vidal
 
Architecture of massively scalable, distributed systems - InfoShare 2015
Architecture of massively scalable, distributed systems - InfoShare 2015Architecture of massively scalable, distributed systems - InfoShare 2015
Architecture of massively scalable, distributed systems - InfoShare 2015Tomasz Zen Napierala
 
AWS Direct Connect & VPN's - Pop-up Loft Tel Aviv
AWS Direct Connect & VPN's - Pop-up Loft Tel AvivAWS Direct Connect & VPN's - Pop-up Loft Tel Aviv
AWS Direct Connect & VPN's - Pop-up Loft Tel AvivAmazon Web Services
 
An Intrudction to OpenStack 2017
An Intrudction to OpenStack 2017An Intrudction to OpenStack 2017
An Intrudction to OpenStack 2017Haim Ateya
 
Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...
Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...
Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...DevClub_lv
 
(NET302) Delivering a DBaaS Using Advanced AWS Networking
(NET302) Delivering a DBaaS Using Advanced AWS Networking(NET302) Delivering a DBaaS Using Advanced AWS Networking
(NET302) Delivering a DBaaS Using Advanced AWS NetworkingAmazon Web Services
 
AWS BaseCamp: AWS Architecture Fundamentals
AWS BaseCamp: AWS  Architecture FundamentalsAWS BaseCamp: AWS  Architecture Fundamentals
AWS BaseCamp: AWS Architecture FundamentalsNicole Maus
 
Vpc (virtual private cloud)
Vpc (virtual private cloud)Vpc (virtual private cloud)
Vpc (virtual private cloud)RashmiDhanve
 
Aws Architecture Fundamentals | Dallas
Aws Architecture Fundamentals | DallasAws Architecture Fundamentals | Dallas
Aws Architecture Fundamentals | DallasNicole Maus
 
Secure Hadoop clusters on Windows platform
Secure Hadoop clusters on Windows platformSecure Hadoop clusters on Windows platform
Secure Hadoop clusters on Windows platformRemus Rusanu
 
AWS Network Topology/Architecture
AWS Network Topology/ArchitectureAWS Network Topology/Architecture
AWS Network Topology/Architecturewlscaudill
 
Build 2017 - P4045 - Azure VNet for Containers
Build 2017 - P4045 - Azure VNet for ContainersBuild 2017 - P4045 - Azure VNet for Containers
Build 2017 - P4045 - Azure VNet for ContainersWindows Developer
 
Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...
Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...
Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...DevClub_lv
 
Secure Hadoop as a Service - Session Sponsored by Intel
Secure Hadoop as a Service - Session Sponsored by IntelSecure Hadoop as a Service - Session Sponsored by Intel
Secure Hadoop as a Service - Session Sponsored by IntelAmazon Web Services
 

What's hot (20)

Openstack presentation
Openstack presentationOpenstack presentation
Openstack presentation
 
ExpertsLive NL 2018 - A deepdive into Azure Networking
ExpertsLive NL 2018 - A deepdive into Azure NetworkingExpertsLive NL 2018 - A deepdive into Azure Networking
ExpertsLive NL 2018 - A deepdive into Azure Networking
 
Deep Dive: OpenStack Summit (Red Hat Summit 2014)
Deep Dive: OpenStack Summit (Red Hat Summit 2014)Deep Dive: OpenStack Summit (Red Hat Summit 2014)
Deep Dive: OpenStack Summit (Red Hat Summit 2014)
 
Birmingham-20060705
Birmingham-20060705Birmingham-20060705
Birmingham-20060705
 
Architecture of massively scalable, distributed systems - InfoShare 2015
Architecture of massively scalable, distributed systems - InfoShare 2015Architecture of massively scalable, distributed systems - InfoShare 2015
Architecture of massively scalable, distributed systems - InfoShare 2015
 
AWS Direct Connect & VPN's - Pop-up Loft Tel Aviv
AWS Direct Connect & VPN's - Pop-up Loft Tel AvivAWS Direct Connect & VPN's - Pop-up Loft Tel Aviv
AWS Direct Connect & VPN's - Pop-up Loft Tel Aviv
 
An Intrudction to OpenStack 2017
An Intrudction to OpenStack 2017An Intrudction to OpenStack 2017
An Intrudction to OpenStack 2017
 
Cloud Foundation
Cloud FoundationCloud Foundation
Cloud Foundation
 
Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...
Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...
Network security with Azure PaaS services by Erwin Staal from 4DotNet at Azur...
 
(NET302) Delivering a DBaaS Using Advanced AWS Networking
(NET302) Delivering a DBaaS Using Advanced AWS Networking(NET302) Delivering a DBaaS Using Advanced AWS Networking
(NET302) Delivering a DBaaS Using Advanced AWS Networking
 
AWS BaseCamp: AWS Architecture Fundamentals
AWS BaseCamp: AWS  Architecture FundamentalsAWS BaseCamp: AWS  Architecture Fundamentals
AWS BaseCamp: AWS Architecture Fundamentals
 
Vpc (virtual private cloud)
Vpc (virtual private cloud)Vpc (virtual private cloud)
Vpc (virtual private cloud)
 
CloudStack Architecture
CloudStack ArchitectureCloudStack Architecture
CloudStack Architecture
 
Aws Architecture Fundamentals | Dallas
Aws Architecture Fundamentals | DallasAws Architecture Fundamentals | Dallas
Aws Architecture Fundamentals | Dallas
 
Secure Hadoop clusters on Windows platform
Secure Hadoop clusters on Windows platformSecure Hadoop clusters on Windows platform
Secure Hadoop clusters on Windows platform
 
AWS Network Topology/Architecture
AWS Network Topology/ArchitectureAWS Network Topology/Architecture
AWS Network Topology/Architecture
 
Build 2017 - P4045 - Azure VNet for Containers
Build 2017 - P4045 - Azure VNet for ContainersBuild 2017 - P4045 - Azure VNet for Containers
Build 2017 - P4045 - Azure VNet for Containers
 
Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...
Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...
Using Azure Managed Identities for your App Services by Jan de Vries from 4Do...
 
Secure Hadoop as a Service - Session Sponsored by Intel
Secure Hadoop as a Service - Session Sponsored by IntelSecure Hadoop as a Service - Session Sponsored by Intel
Secure Hadoop as a Service - Session Sponsored by Intel
 
Apache CloudStack from API to UI
Apache CloudStack from API to UIApache CloudStack from API to UI
Apache CloudStack from API to UI
 

Similar to 10 Minute Tech Azure Networking Lessons 1 and 2

Simplify hybrid data integration at an enterprise scale. Integrate all your d...
Simplify hybrid data integration at an enterprise scale. Integrate all your d...Simplify hybrid data integration at an enterprise scale. Integrate all your d...
Simplify hybrid data integration at an enterprise scale. Integrate all your d...varanasisatyanvesh
 
Deploying SharePoint on Microsoft Azure #spsnairobi2014
Deploying SharePoint on Microsoft Azure #spsnairobi2014Deploying SharePoint on Microsoft Azure #spsnairobi2014
Deploying SharePoint on Microsoft Azure #spsnairobi2014Martin Njalale
 
Networking deep dive
Networking deep diveNetworking deep dive
Networking deep diveJeroen Niesen
 
CCS335 – CLOUD COMPUTING.pptx
CCS335 – CLOUD COMPUTING.pptxCCS335 – CLOUD COMPUTING.pptx
CCS335 – CLOUD COMPUTING.pptxNiviV4
 
A Deepdive into Azure Networking
A Deepdive into Azure NetworkingA Deepdive into Azure Networking
A Deepdive into Azure NetworkingKarim Vaes
 
Building a Bigdata Architecture on AWS
Building a Bigdata Architecture on AWSBuilding a Bigdata Architecture on AWS
Building a Bigdata Architecture on AWSArun Sirimalla
 
Cloud computing & windows azure intro
Cloud computing & windows azure introCloud computing & windows azure intro
Cloud computing & windows azure introHaddy El-Haggan
 
Microsoft Azure Ağ Servisleri
Microsoft Azure Ağ ServisleriMicrosoft Azure Ağ Servisleri
Microsoft Azure Ağ ServisleriÖnder Değer
 
CCS335 - Cloud architecture model and infrastructure
CCS335 - Cloud architecture model and infrastructureCCS335 - Cloud architecture model and infrastructure
CCS335 - Cloud architecture model and infrastructureNiviV4
 
Charla Azure TLF.pptx
Charla Azure TLF.pptxCharla Azure TLF.pptx
Charla Azure TLF.pptxJuan Garcia
 
Amazon Virtual Private Cloud (VPC)
Amazon Virtual Private Cloud (VPC)Amazon Virtual Private Cloud (VPC)
Amazon Virtual Private Cloud (VPC)Tejoy Vachhrajani
 
Azure Networking (1).pptx
Azure Networking (1).pptxAzure Networking (1).pptx
Azure Networking (1).pptxRazith2
 
Scalability in cloud applications
Scalability in cloud applicationsScalability in cloud applications
Scalability in cloud applicationsRadu Vunvulea
 
1. introduction to cloud computing
1. introduction to cloud computing1. introduction to cloud computing
1. introduction to cloud computingLokesh Ramaswamy
 

Similar to 10 Minute Tech Azure Networking Lessons 1 and 2 (20)

Simplify hybrid data integration at an enterprise scale. Integrate all your d...
Simplify hybrid data integration at an enterprise scale. Integrate all your d...Simplify hybrid data integration at an enterprise scale. Integrate all your d...
Simplify hybrid data integration at an enterprise scale. Integrate all your d...
 
CC.pptx
CC.pptxCC.pptx
CC.pptx
 
CC.pptx
CC.pptxCC.pptx
CC.pptx
 
Deploying SharePoint on Microsoft Azure #spsnairobi2014
Deploying SharePoint on Microsoft Azure #spsnairobi2014Deploying SharePoint on Microsoft Azure #spsnairobi2014
Deploying SharePoint on Microsoft Azure #spsnairobi2014
 
10052016115136.pptx
10052016115136.pptx10052016115136.pptx
10052016115136.pptx
 
Networking deep dive
Networking deep diveNetworking deep dive
Networking deep dive
 
Getting Started on AWS
Getting Started on AWS Getting Started on AWS
Getting Started on AWS
 
CCS335 – CLOUD COMPUTING.pptx
CCS335 – CLOUD COMPUTING.pptxCCS335 – CLOUD COMPUTING.pptx
CCS335 – CLOUD COMPUTING.pptx
 
Azure privatelink
Azure privatelinkAzure privatelink
Azure privatelink
 
A Deepdive into Azure Networking
A Deepdive into Azure NetworkingA Deepdive into Azure Networking
A Deepdive into Azure Networking
 
Building a Bigdata Architecture on AWS
Building a Bigdata Architecture on AWSBuilding a Bigdata Architecture on AWS
Building a Bigdata Architecture on AWS
 
Cloud computing & windows azure intro
Cloud computing & windows azure introCloud computing & windows azure intro
Cloud computing & windows azure intro
 
Microsoft Azure Ağ Servisleri
Microsoft Azure Ağ ServisleriMicrosoft Azure Ağ Servisleri
Microsoft Azure Ağ Servisleri
 
CCS335 - Cloud architecture model and infrastructure
CCS335 - Cloud architecture model and infrastructureCCS335 - Cloud architecture model and infrastructure
CCS335 - Cloud architecture model and infrastructure
 
Charla Azure TLF.pptx
Charla Azure TLF.pptxCharla Azure TLF.pptx
Charla Azure TLF.pptx
 
Amazon Virtual Private Cloud (VPC)
Amazon Virtual Private Cloud (VPC)Amazon Virtual Private Cloud (VPC)
Amazon Virtual Private Cloud (VPC)
 
Azure Networking (1).pptx
Azure Networking (1).pptxAzure Networking (1).pptx
Azure Networking (1).pptx
 
Scalability in cloud applications
Scalability in cloud applicationsScalability in cloud applications
Scalability in cloud applications
 
1. introduction to cloud computing
1. introduction to cloud computing1. introduction to cloud computing
1. introduction to cloud computing
 
Cloud computing_Final
Cloud computing_FinalCloud computing_Final
Cloud computing_Final
 

Recently uploaded

ChatGPT and Beyond - Elevating DevOps Productivity
ChatGPT and Beyond - Elevating DevOps ProductivityChatGPT and Beyond - Elevating DevOps Productivity
ChatGPT and Beyond - Elevating DevOps ProductivityVictorSzoltysek
 
Top 10 CodeIgniter Development Companies
Top 10 CodeIgniter Development CompaniesTop 10 CodeIgniter Development Companies
Top 10 CodeIgniter Development CompaniesTopCSSGallery
 
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)Samir Dash
 
Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptx
Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptxHarnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptx
Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptxFIDO Alliance
 
Design and Development of a Provenance Capture Platform for Data Science
Design and Development of a Provenance Capture Platform for Data ScienceDesign and Development of a Provenance Capture Platform for Data Science
Design and Development of a Provenance Capture Platform for Data SciencePaolo Missier
 
Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...
Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...
Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...ScyllaDB
 
Working together SRE & Platform Engineering
Working together SRE & Platform EngineeringWorking together SRE & Platform Engineering
Working together SRE & Platform EngineeringMarcus Vechiato
 
Google I/O Extended 2024 Warsaw
Google I/O Extended 2024 WarsawGoogle I/O Extended 2024 Warsaw
Google I/O Extended 2024 WarsawGDSC PJATK
 
Event-Driven Architecture Masterclass: Challenges in Stream Processing
Event-Driven Architecture Masterclass: Challenges in Stream ProcessingEvent-Driven Architecture Masterclass: Challenges in Stream Processing
Event-Driven Architecture Masterclass: Challenges in Stream ProcessingScyllaDB
 
JohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptxJohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptxJohnPollard37
 
2024 May Patch Tuesday
2024 May Patch Tuesday2024 May Patch Tuesday
2024 May Patch TuesdayIvanti
 
The Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and InsightThe Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and InsightSafe Software
 
الأمن السيبراني - ما لا يسع للمستخدم جهله
الأمن السيبراني - ما لا يسع للمستخدم جهلهالأمن السيبراني - ما لا يسع للمستخدم جهله
الأمن السيبراني - ما لا يسع للمستخدم جهلهMohamed Sweelam
 
WebRTC and SIP not just audio and video @ OpenSIPS 2024
WebRTC and SIP not just audio and video @ OpenSIPS 2024WebRTC and SIP not just audio and video @ OpenSIPS 2024
WebRTC and SIP not just audio and video @ OpenSIPS 2024Lorenzo Miniero
 
Frisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdf
Frisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdfFrisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdf
Frisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdfAnubhavMangla3
 
WebAssembly is Key to Better LLM Performance
WebAssembly is Key to Better LLM PerformanceWebAssembly is Key to Better LLM Performance
WebAssembly is Key to Better LLM PerformanceSamy Fodil
 
Easier, Faster, and More Powerful – Notes Document Properties Reimagined
Easier, Faster, and More Powerful – Notes Document Properties ReimaginedEasier, Faster, and More Powerful – Notes Document Properties Reimagined
Easier, Faster, and More Powerful – Notes Document Properties Reimaginedpanagenda
 
JavaScript Usage Statistics 2024 - The Ultimate Guide
JavaScript Usage Statistics 2024 - The Ultimate GuideJavaScript Usage Statistics 2024 - The Ultimate Guide
JavaScript Usage Statistics 2024 - The Ultimate GuidePixlogix Infotech
 
Cyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptx
Cyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptxCyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptx
Cyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptxMasterG
 

Recently uploaded (20)

ChatGPT and Beyond - Elevating DevOps Productivity
ChatGPT and Beyond - Elevating DevOps ProductivityChatGPT and Beyond - Elevating DevOps Productivity
ChatGPT and Beyond - Elevating DevOps Productivity
 
Top 10 CodeIgniter Development Companies
Top 10 CodeIgniter Development CompaniesTop 10 CodeIgniter Development Companies
Top 10 CodeIgniter Development Companies
 
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
 
Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptx
Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptxHarnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptx
Harnessing Passkeys in the Battle Against AI-Powered Cyber Threats.pptx
 
Design and Development of a Provenance Capture Platform for Data Science
Design and Development of a Provenance Capture Platform for Data ScienceDesign and Development of a Provenance Capture Platform for Data Science
Design and Development of a Provenance Capture Platform for Data Science
 
Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...
Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...
Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...
 
Working together SRE & Platform Engineering
Working together SRE & Platform EngineeringWorking together SRE & Platform Engineering
Working together SRE & Platform Engineering
 
Google I/O Extended 2024 Warsaw
Google I/O Extended 2024 WarsawGoogle I/O Extended 2024 Warsaw
Google I/O Extended 2024 Warsaw
 
Event-Driven Architecture Masterclass: Challenges in Stream Processing
Event-Driven Architecture Masterclass: Challenges in Stream ProcessingEvent-Driven Architecture Masterclass: Challenges in Stream Processing
Event-Driven Architecture Masterclass: Challenges in Stream Processing
 
JohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptxJohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptx
 
2024 May Patch Tuesday
2024 May Patch Tuesday2024 May Patch Tuesday
2024 May Patch Tuesday
 
The Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and InsightThe Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and Insight
 
الأمن السيبراني - ما لا يسع للمستخدم جهله
الأمن السيبراني - ما لا يسع للمستخدم جهلهالأمن السيبراني - ما لا يسع للمستخدم جهله
الأمن السيبراني - ما لا يسع للمستخدم جهله
 
WebRTC and SIP not just audio and video @ OpenSIPS 2024
WebRTC and SIP not just audio and video @ OpenSIPS 2024WebRTC and SIP not just audio and video @ OpenSIPS 2024
WebRTC and SIP not just audio and video @ OpenSIPS 2024
 
Frisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdf
Frisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdfFrisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdf
Frisco Automating Purchase Orders with MuleSoft IDP- May 10th, 2024.pptx.pdf
 
Overview of Hyperledger Foundation
Overview of Hyperledger FoundationOverview of Hyperledger Foundation
Overview of Hyperledger Foundation
 
WebAssembly is Key to Better LLM Performance
WebAssembly is Key to Better LLM PerformanceWebAssembly is Key to Better LLM Performance
WebAssembly is Key to Better LLM Performance
 
Easier, Faster, and More Powerful – Notes Document Properties Reimagined
Easier, Faster, and More Powerful – Notes Document Properties ReimaginedEasier, Faster, and More Powerful – Notes Document Properties Reimagined
Easier, Faster, and More Powerful – Notes Document Properties Reimagined
 
JavaScript Usage Statistics 2024 - The Ultimate Guide
JavaScript Usage Statistics 2024 - The Ultimate GuideJavaScript Usage Statistics 2024 - The Ultimate Guide
JavaScript Usage Statistics 2024 - The Ultimate Guide
 
Cyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptx
Cyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptxCyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptx
Cyber Insurance - RalphGilot - Embry-Riddle Aeronautical University.pptx
 

10 Minute Tech Azure Networking Lessons 1 and 2

  • 2. AZUREVIRTUAL NETWORKS Ten MinuteTech Presents: Lesson 1: What is AzureVirtual Network? Tenminute.tech
  • 3. Azure Classic vs Azure Resource Manager Tenminute.tech In this lesson we will be using the Azure Resource Manager
  • 4. What is AzureVirtual Network? Tenminute.tech • AzureVirtual Network enables Azure resources to communicate with each other and the internet • A virtual network isolates your resources from others' resources in the Azure cloud • You can connect virtual networks to other virtual networks, or to your on-premises network
  • 5. AzureVirtual Network capabilities • Isolation • Internet communication • Azure resource communication • Virtual network connectivity • On-premises connectivity • Traffic filtering • Routing Tenminute.tech
  • 6. Network isolation and segmentation • Virtual networks are isolated from one another •You can create separate virtual networks for development, testing, and production that use the same CIDR address blocks •You can create multiple virtual and connect the networks together •You can segment a virtual network into multiple subnets •Azure provides internal name resolution for resources deployed in a virtual network •If necessary, you can configure a virtual network to use your own DNS servers Tenminute.tech
  • 7. Internet communication • By default Resources, such as virtual machines deployed in a virtual network, have access to the Internet • You can also enable inbound access to specific resources, as needed Tenminute.tech
  • 8. Azure resource communication •Azure resources deployed in a virtual network can communicate with each other using private IP addresses even if the resources are deployed in different subnets •Azure provides default routing between subnets, connected virtual networks, and on-premises networks, so you don't have to configure and manage routes •If desired, you can customize Azure's routing Tenminute.tech
  • 9. Virtual network connectivity •Virtual networks can be connected to each other, enabling resources in any virtual network to communicate with resources in any other virtual network Tenminute.tech
  • 10. On-premises connectivity •A virtual network can be connected to an on-premises network, enabling resources to communicate between each other • Point-to-site virtual private network (VPN): • Site-to-siteVPN: • Azure ExpressRoute: Tenminute.tech
  • 11. Traffic filtering •You can filter network traffic to and from resources in a virtual network by source IP address and port, destination IP address and port, and protocol Tenminute.tech
  • 12. Routing • You can optionally override Azure's default routing by configuring your own routes, or by propagating BGP routes through a network gateway Tenminute.tech
  • 13. IP address types and allocation methods in Azure • You can assign IP addresses to Azure resources to communicate with other Azure resources, your on- premises network, and the Internet • There are two types of IP addresses you can use in Azure: •Public IP addresses •Private IP addresses Tenminute.tech
  • 14. Public IP addresses • Public IP addresses allow Internet resources to communicate inbound to Azure resources • The address is dedicated to the resource, until it is unassigned by you • In Azure Resource Manager, a public IP address is a resource that has its own properties • Some of the resources you can associate a public IP address resource with are: • Virtual machine network interfaces • Internet-facing load balancers • VPN gateways • Application gateways Tenminute.tech
  • 15. Private IP addresses • Private IP addresses allowAzure resources to communicate with other resources in a virtual network or an on-premises network through aVPN gateway or ExpressRoute circuit, without using an Internet-reachable IP address • In the Azure Resource Manager deployment model, a private IP address is associated to the following types of Azure resources: • Virtual machine network interfaces • Internal load balancers (ILBs) • Application gateways Tenminute.tech
  • 16. IP address allocation • There are two methods in which a IP address are allocated: • Dynamic: Azure assigns the next available unassigned or unreserved IP address in the subnet's address range • Static:You select and assign any unassigned or unreserved IP address in the subnet's address range Tenminute.tech
  • 17. DHCP •DHCP is controlled by Azure •For those you who want to try to set up DHCP on an Azure virtual machine, you're going to be very surprised when you realize that the role isn't even available to you •And also, keep in mind, the IP address lease, is for the lifetime of the virtual machine, until you restart, stop or deallocate theVM Tenminute.tech
  • 18. Azure-provided name resolution •Azure provides internal name resolution forVMs and role instances that reside within the same virtual network or cloud service •VMs/instances in a Cloud Service share the same DNS suffix • DNS names can be assigned to both NICs andVMs •You can roll your own DNS if required Tenminute.tech
  • 19. AzureVirtual Network Tenminute.tech Virtual Network Internet Load Balancer Web Server VM Web Server VM Load Balancer Domain Controller VM Database Server VM Database Server VM Azure Frontend Subnet Backend Subnet East US Region
  • 20. AzureVNet toVNet Tenminute.tech Virtual Network Frontend Subnet Backend Subnet VPN Gateway East US Region Azure Virtual Network Frontend Subnet Backend Subnet z VPN Gateway West US Region Azure Tunnel Internet
  • 21. Hybrid Network Tenminute.tech Virtual Network Frontend Subnet Backend Subnet VPN Gateway East US Region Azure Network z VPN Gateway On Premise Nerwork Tunnel Internet