Azure Firewall – Hub/Spoke Hybrid Network with Forced Tunnelling

The Azure Firewall is a great option if you want to have a centralised firewall device within your Azure network architecture. I followed the Microsoft documentation to integrate the Azure Firewall into a Hybrid Network consisting of an on-premises network, a centralised Azure Hub Network and an Azure Spoke VNet. However, I was getting connectivity […]

Read More »

Azure Firewall – Hub and Spoke UDR configuration

I was recently working with a Hub and Spoke VNet design that was connected to on-premises through ExpressRoute. The goal is to use the Azure FW within the Hub VNet to provide centralised firewall control between the on-premises network, hub and spoke VNets. To set up this scenario you have to create UDRs on the […]

Read More »

Azure Network Service Endpoints

Service Endpoints are a new feature that allows for restricting access to Azure Services to Virtual Networks. By doing this you can remove public internet access to resources. Another benefit of Service Endpoints, is that traffic is automatically routed to the service when it is enabled. This greatly simplifies the design and implementation by removing […]

Read More »

Azure VNet Peering Gateway Transit Hub and Spoke

If you read the documentation on the Azure docs page it is not clear that if you have VNets configured in a Hub and Spoke design, it is possible for each spoke to be able to communicate with each other without requiring Network Virtual Appliance (NVA). This is possible using Gateway Transit and User Defined […]

Read More »