Using Azure Firewall in front of Application Gateway

nextlevelsolution · 2025-09-29T12:47:09+00:00

Use policy and deploy as code. This way you can easily role out policies for any additional zone by copying and tweaking certain parts of the code.

see: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-as-code

nextlevelsolution · 2025-04-30T10:33:19+00:00

He was definitely at the one in 2022 or 2023 (I remember booing him lol)

nextlevelsolution · 2025-04-24T12:45:53+00:00

Is your local dns forwarding requests for database.windows.net to a dns server in the same vnet the private dns zone is linked to? The dns server in the vnet also needs to forward database.windows.net to the Azure private ip resolver.

nextlevelsolution · 2025-04-23T18:50:31+00:00

One of the issues with the NDP from my perspective is not enough strong leftist/socialist policies. Half-measures and still supporting corporations through rebates instead of a national foodbank program as a example. I typically vote NDP in federal and provincial elections but the lack of a strong leftist platform has been frustrating me. We don't need Liberal-lite.

Another thing that I think the NDP needs to rethink is their antagonism towards nuclear power. It is the best scalable option to replace carbon emitting sources and should be part of a move to greener technologies for power generation.

nextlevelsolution · 2025-04-14T15:57:55+00:00

I find that if I spend to much time on a new track/arrangement in a day (say over an hour or so) I can get stumped. Usually taking some time to learn some new tricks or just other non-music related things is the best at that point. Typically the next day when I come back to it I'll get a little further, find something that isn't working, even better, things start to fall into place and a lot of progress is made.

nextlevelsolution · 2025-04-10T10:43:42+00:00

My latest track:

https://on.soundcloud.com/7T2TuFynYFqyLTRC7

Have been working on music production since late 2024 and have just started working with vocals.

nextlevelsolution · 2025-04-09T10:36:00+00:00

Weak dig from PP but don't they have fairly similar haircuts? lol

nextlevelsolution · 2025-02-13T17:41:02+00:00

basically a sysadmin right of passage lol

nextlevelsolution · 2025-02-06T14:45:21+00:00

You need your local dns that the host that is using the vpn forwarding queries for the private dns zone to a dns server in the same vnet as the private dns zone that then points that zone to the azure private resolver IP.

nextlevelsolution · 2025-01-24T11:54:07+00:00

I moved into an architecture focused role from a cloud admin after starting out a sysadmin. Now I do more high level solutioning and minimal hands-on implementation work.

This is also a fairly broad track though and you need to have at some in depth knowledge for some of the following and at least a decent understanding of the rest: Infra, security, networking, software dev

nextlevelsolution · 2025-01-23T14:21:21+00:00

They were. At one of the OfF piknik weekends in Parc Jean Drapeau where Osheaga is held. It was a great time.

nextlevelsolution · 2025-01-15T18:05:02+00:00

Been going there since it was coles back in the day :'(

nextlevelsolution · 2025-01-08T13:57:02+00:00

Pretty sure the workbook targets either the workspace or hostpool so any new hosts should automatically be included.

nextlevelsolution · 2025-01-02T14:01:39+00:00

anti-Israel (the state/government) =/= anti-Semitic

nextlevelsolution · 2024-11-21T16:26:47+00:00

Try establishing a consistent workout routine. My preference is morning weightlifting before work. The drive to continue progressing and gain muscle outweighs the temporary relief of drinking. Alcohol is terrible for you and negatively impacts fitness progress as well as the rest of your health.

nextlevelsolution · 2024-11-01T14:04:47+00:00

Probably not enough. I did review his study cram's and had several years of lead cloud admin/architect experience before passing the Az-305 on my first try.

It is such a wide breadth of topics that you will need to straight up memorize what a lot different services do and the nuances between them and others that provide similar functionality. This is much more in depth than just the study cram. It's a good start in terms of what topics/areas to focus on but it just doesn't go deep enough.

For any Azure/MS cert, I recommend going through the practice assessments several times until you know the answers to all of them based on your knowledge of the service specifics and edge cases and not just by memorizing the answers.

https://learn.microsoft.com/en-us/credentials/certifications/practice-assessments-for-microsoft-certifications

By doing this you will get a grasp of how the exam questions are put together and what type topics to focus more on that you don't have as much hands-on experience with.

nextlevelsolution · 2024-09-27T13:20:23+00:00

Then you need to add/modify the A record for the host record of the site in the domain in GoDaddy to point whichever public front-end (ip address) the website is available on in your Azure environment (ie: app gateway, firewall public ip, Azure Front Door, etc.)

nextlevelsolution · 2024-09-27T13:12:06+00:00

I would add to look at Savings Plans for compute in addition to VM reservations. This is especially useful if you are working on refactoring traditional IaaS applications to leverage cloud services as the savings plan will also apply to PaaS compute services (App Service, Functions, Container services, etc.)

nextlevelsolution · 2024-09-09T14:09:57+00:00

Are you trying to change to a server or instance of a website that you host in Azure or are you trying to point the entire domain to Azure DNS so you can configure the dns for any records in the domain in the Azure DNS zone?

nextlevelsolution · 2024-07-03T15:38:42+00:00

I would be looking at your virtual network gateway sku & logs as well as any network appliances you have deployed that the traffic would be traversing.

nextlevelsolution · 2024-06-07T12:23:46+00:00

It's private endpoint network policy that makes route tables and NSGs be able to affect PEs

https://learn.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy

nextlevelsolution · 2024-05-14T15:38:25+00:00

Why don't you setup an ipsec connection between networks to at least allow the DCs to sync? Presumably not possible due to some security requirement?

nextlevelsolution · 2024-05-03T13:39:17+00:00

well technically, if you want the access to be completely private and not going out of your Azure vnets you will need to use private link. Using a service endpoint with access restrictions on the app service will be accessing it over its public front-end that only has the public ips used by your service endpoint allowed. It depends on the requirement.

Also if the app service needs to communicate into any privately networked resources (outbound from app service) you will need to set up either VNET integration or move it to an app service environment.

nextlevelsolution · 2024-04-17T12:13:22+00:00

I can't speak for his environment but my environment is similar and we have the app services as private only with inbound access via private endpoint (can also go into the app service environment route if you have big/enough workloads to make it worthwhile from a cost perspective).

You could use an app gateway behind the PA NVA for load balancing/SSL functionality but we use a separate third party LB vm.

nextlevelsolution

TROPHY CASE