SDN, NFV and Container Networking
Disclaimer These series will cover some of the notes I’ve been gathering on networking performance over the last years. Some of those will be specific to Azure, but still useful … Continue reading Cloud Networking Performance (I): Cloud Provider Offloads
Site to site (S2S) VPNs are fairly straightforward to setup and definitely stable if you stick to well known vendor combinations. They offer privacy due to their intrinsic encryption and … Continue reading Cloud connectivity redundancy: Fully redundant VPN tunnels
After having a chat with one of my old pals at Microsoft and discussing the topic internally with my current colleagues at Elastic, we decided too take on the task … Continue reading VyOS is now a validated Azure VPN device
VyOS is an open source network operating system that can be installed on physical hardware or a virtual machine on your own server, or a cloud platform. It is based … Continue reading Active-active route-based Vyos 1.2 to Azure VPN (with BGP!)
Disclosure: The kind folks at Pureport have provided me with free access to their platform for testing purposes. During my career I have seen many companies of all sizes struggling … Continue reading Cloud native WAN
Building distributed and highly available web services is hard. No, scratch that. It is not hard, it is whatever comes after hard. In this article we will showcase the principal … Continue reading On scaling infrastructure
This article will show you how to use the native Azure and AWS VPN solutions create a full VPN mesh between Azure and AWS with dual gateways on both sides … Continue reading AWS to Azure S2S VPN
Load balancing is a critical component of modern network architectures. It adds intelligence to traffic routing and helps on scaling, improving resilience and making a better use of the available … Continue reading Load Balancing in Azure (I)
We can initially divide Azure Networking offerings into two big groups: Resources that can be deployed within Virtual Networks and those can’t be deployed in Virtual Networks. In this article … Continue reading Azure Virtual Networking Basics
On our last post about UDP hole-punching we learned how we could use UDP traffic to exploit the stateful nature of firewalls, thus bypassing blocks for incoming connections. That was … Continue reading Firewall bypass: Encapsulating traffic inside UDP
Intro UDP hole punching is a widely documented firewall bypass technique. It doesn’t exploit any bugs or flaws, it does exploit UDP’s sessionless nature and firewalls’ stateful nature. The technique … Continue reading Firewall bypass: UDP hole punching
One of Clarke’s laws says that any sufficiently advanced technology is indistinguishable from magic; and with container technologies I find that to be true more often than not. Container networking might … Continue reading Container networking basics
