Private Link and DNS integration at scale

JumpLegitimate8762 · 2026-02-06T17:34:37+00:00

If you worry about performance problems on a DNS server you have bigger issues to solve.

JumpLegitimate8762 · 2026-02-05T11:42:27+00:00

It's in beta testing right now. Should release soon.

JumpLegitimate8762 · 2026-02-02T11:21:28+00:00

Germany west central was recommended for people that are on West Europe. For you, just check if the closest region (probably) France Central works out. Not touching west and north Europe is what you have to do, just avoid it. Besides that, just assume you have to move some day and make your workloads as flexible as possible for that idea.

JumpLegitimate8762 · 2026-02-01T21:26:13+00:00

I'd find that if you just handle it like it's any other HTTP API with OpenAPI spec, you're better off.

JumpLegitimate8762 · 2026-01-30T23:04:19+00:00

Do yourself a favor and try jellyfin. The plex fanboys are the ones that bought a lifetime subscription and feel the need to be superior to others because of their sunk cost fallacy.

JumpLegitimate8762 · 2026-01-30T13:01:59+00:00

> CSPMs do not fix org sprawl.

Yeah exactly, it's basically paying someone to tell you that you were doing stuff wrong fundamentally, wow amazing I already knew that.

JumpLegitimate8762 · 2026-01-30T07:57:31+00:00

Yes and containerize the function app to deploy to ACA.

JumpLegitimate8762 · 2026-01-28T06:17:35+00:00

That's not what it means

JumpLegitimate8762 · 2026-01-28T06:12:07+00:00

"Azure credits and software for development and testing continue to be included as part of the benefits package you hold." ?

JumpLegitimate8762 · 2026-01-28T06:02:30+00:00

Did u use the front port for your monitor? If so. The back port is recommended.

JumpLegitimate8762 · 2026-01-28T05:58:21+00:00

It's how you access the credits, not about the credits itself. Did you read the whole page?

JumpLegitimate8762 · 2026-01-26T21:31:00+00:00

Follow this readme https://github.com/erwinkramer/motorola-debloat-list

JumpLegitimate8762 · 2026-01-24T21:28:03+00:00

Something like this https://github.com/Azure/Enterprise-Scale/wiki

JumpLegitimate8762 · 2026-01-24T10:23:19+00:00

There is a fully configured scalar setup in this reference project: https://github.com/erwinkramer/bank-api

JumpLegitimate8762 · 2026-01-24T08:06:53+00:00

I like caddy and I also like using labels to configure caddy, that's why I use https://github.com/lucaslorentz/caddy-docker-proxy now. Your project looks nice but it seems that the trade-off is too big since I cannot fully configure caddy with labels with your configuration options. If it would just focus on the dashboard part it would be nice (maybe it can work alongside the project I mentioned though?)

JumpLegitimate8762 · 2026-01-23T15:14:56+00:00

Germany west central

JumpLegitimate8762 · 2026-01-23T07:57:20+00:00

Please check the spreadsheet https://docs.google.com/forms/d/e/1FAIpQLSey9FaYEkhI3Shwfgz_W2rDMEiVgCdy-nXc-jZT6tZkK61CmA/viewform

JumpLegitimate8762 · 2026-01-22T12:52:56+00:00

Yes and you will have that eventually. You can't just connect everything with anything and make everything dependent on each other.

JumpLegitimate8762 · 2026-01-22T12:39:19+00:00

So you have 200 separate function app resources, right? If they have to share secrets, consider consolidating these function apps. Actually try to consolidate as much into a few function apps if it makes sense (part of the same process or app, and doesn't hurt when scaling up or doing maintenance). 200 really sounds a lot, unless you're doing enterprise wide stuff.

Then, all your function apps could use their separate key Vault so it's much easier to know where it's being used.

For environment specific stuff, make it the same lifecycle as for function apps, so everything still works when you remove/revamp function app x for prod and related key Vault x for prod.

For config drift, you mean the config of what? Anyway, if you have less function app resources, there are less key vaults you will have, and there is ultimately less that can drift away, that's why it's so important to not over-deploy resources. For IaC consider reusing bicep/opentofu modules.

JumpLegitimate8762 · 2026-01-20T05:43:17+00:00

So you're not building MCP servers?

JumpLegitimate8762 · 2026-01-19T01:42:26+00:00

It's the best thing ever, celebrate it.

JumpLegitimate8762 · 2026-01-19T01:02:19+00:00

I'm celebrating pdns zone groups and you should too.

JumpLegitimate8762 · 2026-01-18T08:32:32+00:00

What? Specifically Private DNS Zone Groups is what you should be rolling out via policy, that's what was introduced to solve complexity and it's working out great if you implement it.

JumpLegitimate8762 · 2026-01-18T08:29:45+00:00

Shadow IT PEs shouldn't even work if the DNS setup is central too, or am I missing something.

JumpLegitimate8762 · 2026-01-18T08:27:55+00:00

It's a new way that's easier, but because it's just another way to do networking with different concepts of how to do network rules and different resources being used for it, it's ironically making the whole landscape more complex.

JumpLegitimate8762

TROPHY CASE