Book Image

Azure Architecture Explained

By : David Rendón, Brett Hargreaves
Book Image

Azure Architecture Explained

By: David Rendón, Brett Hargreaves

Overview of this book

Azure is a sophisticated technology that requires a detailed understanding to reap its full potential and employ its advanced features. This book provides you with a clear path to designing optimal cloud-based solutions in Azure, by delving into the platform's intricacies. You’ll begin by understanding the effective and efficient security management and operation techniques in Azure to implement the appropriate configurations in Microsoft Entra ID. Next, you’ll explore how to modernize your applications for the cloud, examining the different computation and storage options, as well as using Azure data solutions to help migrate and monitor workloads. You’ll also find out how to build your solutions, including containers, networking components, security principles, governance, and advanced observability. With practical examples and step-by-step instructions, you’ll be empowered to work on infrastructure-as-code to effectively deploy and manage resources in your environment. By the end of this book, you’ll be well-equipped to navigate the world of cloud computing confidently.
Table of Contents (20 chapters)
1
Part 1 – Effective and Efficient Security Management and Operations in Azure
5
Part 2 – Architecting Compute and Network Solutions
12
Part 3 – Making the Most of Infrastructure-as-Code for Azure

Connectivity in Azure

The fundamental building block of your network in Azure is Azure Virtual Networks or VNets, as we will refer to from now on. VNets allow organizations to build networks as if they were on-premises. Think of VNets as the primary component for availability and isolation purposes.

On top of VNets, you can configure and manage Virtual Private Networks or VPNs and connect with other VNets across the various regions available in Azure and extend your on-premises network. Similar to an on-premises network, each VNet has its own Classless Inter-Domain Routing or CIDR block, and they can be connected with other VNets as long as their CIDR blocks don’t overlap.

Similar to on-premises networks, TCP, UDP, and ICMP TCP/IP protocols are supported within VNets.

Now we will discuss how you can start designing your virtual networks in Azure.

Design considerations for VNets

Before creating a VNet, consider using address ranges enumerated in RFC 1918 to facilitate...