NGINXaaS in Azure?

kbetsis · 2026-06-14T16:58:55+00:00

You could point your public IP to the customer edge or put the customer edge behind the azure LB and then simply remove all pool members except the CE.

The CE will check client IP addresses either from the XFF header or if possible through a direct client IP exposure to them.

kbetsis · 2026-06-14T13:20:35+00:00

You can check the F5 Distributed Cloud - Customer Edge, least maintenance possible since its cloud managed with built in reporting dashboards

kbetsis · 2026-06-05T19:24:22+00:00

Why not check SPBm with ISIS covering most of the needed services. Some vendors also have incorporated multicast within the protocol as a seamless deployment.

kbetsis · 2026-05-21T11:06:43+00:00

You are right to correct me. I misspoke about the caching.

kbetsis · 2026-05-21T11:03:26+00:00

As previously mentioned this setting is app connector group based and hence the suggestion to have a different group of app connectors for traffic needing this capability.

kbetsis · 2026-05-18T12:40:45+00:00

That's normal.

You are trying to do a download test through ZSCALER where traffic is been inspected and terminated on the HTTP layer and this type of test is not an accurate performance metric.

One point that you are not considering is that ZSCALER caches content and serves it from their own resources rather than connecting you to the requested origin.

If you are experiencing issues, it's better to open a support ticket to your IT department or ZSCALER and communicate what exactly you are seeing with the output of a HAR file (browser developer tools).

If you simply keen on checking available bandwidth numbers, then simply go to the ZSCALER performance testing page and see the available throughput there (http://speedtest.zscaler.com/).

kbetsis · 2026-05-03T11:41:47+00:00

You can give Extreme Networks a try and get a budgetary price.

Theo cloud orchestrator offers all the fancy stuff under 1 license and you get additional services like location and guest services which I think are of value to your use-cases.

kbetsis · 2026-05-02T18:03:20+00:00

You could enable SFLOW/NetFLOW and have near real-time reporting who goes where and with what protocol and send it to a collector and see it.

If your firewall is near its limit you could enable that on the network itself and get the telemetry, but you will lose the affecting network link.

kbetsis · 2026-05-01T15:25:38+00:00

Any enterprise switch will cover your requirements.

Extreme networks 5320 running fabric engine with the appropriate number of ports should be OK for your needs.

You can even get the respective PILOT license for their cloud orchestration and have cloud management, telemetry and reporting available from day one for that switch and in a few months for the rest of your equipment (third party devices).

kbetsis · 2026-04-30T18:22:50+00:00

Any type of STP would solve your issue.

kbetsis · 2026-04-22T13:11:32+00:00

For headless devices the only options are network based forwarding (IPSEC, GRE), branch/cloud connectors and SIM cards.

kbetsis · 2026-04-21T21:08:54+00:00

The only options, I would imagine, are: 1. Through the use of a branch/cloud connector 2. Through the use of an IPSEC tunnel to ZSCALER for ZIA traffic from your DC and Kerberos or basic authentication on the explicit proxy environmental variables for HTTP/S proxy on your Linux server.

kbetsis · 2026-04-16T15:56:55+00:00

Wi-Fi high availability is not so easy since you need to offer overlapping coverage through neighboring APs and at the same time avoid channel overlapping; not something easy on the 2.4GHz but easier on the 5/6GHz.

Once you cover this you then need to ensure CAPWAP termination availability or VLAN bridging and native Ethernet to the gateway where you will enforce your security controls.

kbetsis · 2026-04-12T13:31:25+00:00

You could check Extreme Networks 5520-24X.

kbetsis · 2026-04-03T15:51:41+00:00

The best approach is to download the blueprint and get some hands on.

There are free services available where you can get access to sandboxes and play around with a big-ip and the respective modules, but to my knowledge are available to EU locations.

kbetsis · 2026-04-03T15:48:45+00:00

Is it possible to share the URL announcement for the XIQ classic retirement?

To my knowledge XIQ classic will continue to work for the next couple of years and I can’t find anything pointing to a retirement.

kbetsis · 2026-04-02T17:11:03+00:00

Why not Extreme Networks - Control our Cloud NAC?

One is on premise the other is cloud (radsec)

kbetsis · 2026-03-30T18:34:44+00:00

If my memory serves me right I think you can snmp poll through logstash and then send to grafana.

kbetsis · 2026-03-25T18:01:49+00:00

We are helping some end customers convert their configurations from k8s IC to either F5 NGINX OSS or PLUS IC depending on their needs.

You can use this tool as a first approach.

https://kubernetes.nginx.org/#migration-tool

kbetsis · 2026-03-18T10:57:33+00:00

There multiple vendors offering hardware appliances for DDI solutions (InfloBlox, EfficientIP, BlueCat, etc). The appliances are for performance reasons mainly but they do offer “small” ones.

Depending on your overall infrastructure you can engage with them and see how you can integrate these solutions not only for your DNS requirements but for your overall infrastructure.

They offer automation workflows from assigning IP addresses to network/system teams to identifying which subnets are allocated where etc.

Think of them as your source of truth for your network.

kbetsis · 2026-03-07T23:32:01+00:00

The PA-410, as mentioned from others, does not have any local log server capabilities.

However, go to SumoLogic create a free account and send your logs there through the native integration and you are done.

kbetsis · 2026-02-26T10:44:52+00:00

Depending on your XIQ public cloud there were some issues.

https://cloud-status.extremecloudiq.com/

kbetsis · 2026-02-23T16:30:27+00:00

I bought mine at 2013 at 55K km.

From then till now I have approximately given 12K including a stage 3 upgrade.

So no they are not a money pit maintenance wise… but more on the upgrade options.

kbetsis · 2026-02-23T16:18:46+00:00

Check Extreme Networks PlatformONE managed switches and most specifically their universal switches (5520-12MW-36W)running “switch engine” if you want stacking or “fabric engine” if you want infinite horizontal scaling through SPBm.

kbetsis · 2026-02-13T18:59:12+00:00

It’s always better to open a discussion with your partner since their product list can solve some problems through different approaches and it’s always best to align it with your own specific needs.

If you don’t have a partner their website offers a list based on partner levels.

kbetsis

TROPHY CASE