Posts

Lec - 04 - Azure Route

Implement virtual network traffic routing   Azure automatically creates a route table for each subnet within an Azure virtual network and adds system default routes to the table. We can override some of Azure's system routes with  custom routes , and add additional custom routes to route tables.  Azure routes outbound traffic from a subnet based on the routes in a subnet's route table.   System routes or Default routes A default route is a pre-configured route that determines how traffic is directed when no other specific route matches the destination address. Key characteristics of default routes in Azure: Automatically created: Azure creates default routes for every subnet within a virtual network. System-defined: You cannot directly modify or delete them. Address prefix 0.0.0.0/0: This means they apply to any destination address that doesn't fall within a more specific route. Next hop type: Inter...

Lec-03-Vnet-Peering

Image
  What is Vnet Peering in azure?   ·        Virtual Network (VNet) peering in Azure is a mechanism that allows connecting two Azure virtual networks.   ·        When we peer two VNets, they appear as one network to the resources connecting to them.   ·        VNet peering enables resources in one VNet to communicate with resources in another VNet securely, without the need for a gateway or additional configuration.   Regional VNet peering :- connects Azure virtual networks in the same region. Global VNet peering :-  connects Azure virtual networks in different regions.   Key points about VNet peering in Azure:   Global Reach : VNet peering can be set up across different Azure regions, making it a global solution.   Transitive Routing: If VNet A is peered with VNet B, and VNet B is peered with VNet C, then traffic can flow b...

Lec02-Publicip vs private ip

Image
  What is public Ip address vs Private Ip address ?   Both public and private IP addresses play important roles in Azure resources, but they serve different purposes:   Public IP addresses:   Accessibility: Accessible from the internet, allowing resources like web servers to be directly accessed. Use cases: Hosting websites, remote desktop access, public-facing applications, accessing external services. Cost: Charges apply for using a public IP address. Management: Can be assigned statically (dedicated) or dynamically (temporary), and can be associated with multiple resources.   Private IP addresses:   Accessibility: Only accessible within the virtual network where the resource is located. Use cases: Internal communication between resources, secure hosting behind a load balancer or firewall. Cost: No additional charges for using a private IP address. Management: Automatically assigned by Azure wi...

Training

 Az 700 What is Virtual Network  Azure Virtual Networks (VNets) are the fundamental building block of your private network in Azure. VNets enable you to build complex virtual networks that are similar to an on-premises network, with additional benefits of Azure infrastructure such as scale, availability, and isolation. Each VNet you create has its own CIDR block and can be linked to other VNets and on-premises networks as long as the CIDR blocks don't overlap. You also have control of DNS server settings for VNets, and segmentation of the VNet into subnets. Capabilities of Azure Virtual Networks Azure VNets enable resources in Azure to securely communicate with each other, the internet, and on-premises networks. Communication with the internet.  All resources in a VNet can communicate outbound to the internet, by default. You can communicate inbound to a resource by assigning a public IP address or a public Load Balancer. You can also use public IP or public Load Balancer...

Migration

  Prepare a machine for the replication appliance The Migration and modernization tool uses a replication appliance to replicate machines to Azure. The replication appliance runs the following components. Configuration server : The configuration server coordinates communications between on-premises and Azure, and manages data replication. Process server : The process server acts as a replication gateway. It receives replication data; optimizes it with caching, compression, and encryption, and sends it to a cache storage account in Azure. Run a test migration When delta replication begins, you can run a test migration for the VMs, before running a full migration to Azure. We highly recommend that you do this at least once for each machine, before you migrate it. Running a test migration checks that migration will work as expected, without impacting the on-premises machines, which remain operational, and continue replicating. Test migration simulates the migration by creating an Azur...

Application-gateway

What Is SSL Termination? SSL termination is a process by which SSL-encrypted data traffic is decrypted (or offloaded). Servers with a secure socket layer (SSL) connection can simultaneously handle many connections or sessions. An SSL connection sends encrypted data between an end-user’s computer and web server by using a certificate for authentication. SSL termination helps speed the decryption process and reduces the processing burden on backend servers. How Does SSL Termination Work? SSL termination intercepts encrypted https traffic when a server receives data from a secure socket layer (SSL) connection in an SSL session. SSL termination or  SSL offloading  decrypts and verifies data on the  load balancer  instead of the application server. Spared of having to organize incoming connections, the server can prioritize on other tasks like loading web pages. This helps increase server speed. SSL termination represents the end — or termination point — of an SSL connect...

VPN

  certificate differnce connections method active active bgp  tunnel type OPENVPN(SSL) SSTP IKEV2 OPEN VPN is protcol foropen source , its require thried party software to configure it.  Its open source does not have any standard  IKEV2 is more advanced version protocol it has a function of reconnection , Its does not require any software  IKv2 is a standard described rfc-7296  Its work with mobile client as weell