Azure Networking Cookbook, Second Edition - Second Edition

By : Mustafa Toroman

Azure Networking Cookbook, Second Edition - Second Edition

By: Mustafa Toroman

Overview of this book

Azure's networking services enable organizations to manage their networks effectively. With the Azure Networking Cookbook, you’ll see how Azure paves the way for an enterprise to achieve reliable performance and secure connectivity. This updated second edition will take you through the latest networking features in Azure. The book starts with an introduction to Azure networking, covering basics such as creating Azure virtual networks, designing address spaces, and creating subnets. You’ll create and manage network security groups, application security groups, and IP addresses in Azure using easy-to-follow recipes. As you progress through the book, you’ll explore various aspects such as DNS and routing, load balancers, Traffic Manager, and site-to-site, point-to-site, and VNet-to-VNet connections. This cookbook covers all the functions crucial to understanding cloud networking practices and being able to plan, implement, and secure your network infrastructure with Azure. You’ll not only upscale your current environment but also get well-versed with monitoring, diagnosing, and ensuring secure connectivity. The book will help you grasp best practices as you learn how to create a robust environment. By the end of this Azure cookbook, you’ll have gained hands-on experience developing cost-effective solutions that can facilitate efficient connectivity in your organization.

Preface

About Azure Networking Cookbook, Second Edition

To get the most out of this book

Hardware requirements

Software requirements

Conventions

Download Resources

1. Azure Virtual Network

Technical requirements

Creating a virtual network in the Azure portal

Creating a virtual network with PowerShell

Adding a subnet in the Azure portal

Adding a subnet with PowerShell

Changing the address space size

Changing the subnet size

Free Chapter

2. Virtual machine networking

Technical requirements

Creating Azure VMs

Viewing VM network settings

Creating a new NIC

Attaching an NIC to a VM

Detaching an NIC from a VM

3. Network Security Groups

Technical requirements

Creating a new NSG in the Azure portal

Creating a new NSG with PowerShell

Creating a new allow rule in an NSG

Creating a new deny rule in an NSG

Creating a new NSG rule with PowerShell

Assigning an NSG to a subnet

Assigning an NSG to a network interface

Assigning an NSG to a subnet with PowerShell

Creating an Application Security Group (ASG)

Associating an ASG with a VM

Creating rules with an NSG and an ASG

4. Managing IP addresses

Technical requirements

Creating a new public IP address in the Azure portal

Creating a new public IP address with PowerShell

Assigning a public IP address

Unassigning a public IP address

Creating a reservation for a public IP address

Removing a reservation for a public IP address

Creating a reservation for a private IP address

Changing a reservation for a private IP address

Removing a reservation for a private IP address

Adding multiple IP addresses to an NIC

Creating a public IP prefix

5. Local and virtual network gateways

Technical requirements

Creating a local network gateway in the Azure portal

Creating a local network gateway with PowerShell

Creating a virtual network gateway in the Azure portal

Creating a virtual network gateway with PowerShell

Modifying the local network gateway settings

6. DNS and routing

Technical requirements

Creating an Azure DNS zone

Creating an Azure Private DNS zone

Integrating a virtual network with a private DNS zone

Creating a new record set in Azure DNS

Creating a route table

Changing a route table

Associating a route table with a subnet

Dissociating a route table from a subnet

Creating a new route

Changing a route

Deleting a route

7. Azure Firewall

Technical requirements

Creating a new firewall

Creating a new firewall with PowerShell

Configuring a new allow rule

Configuring a new deny rule

Configuring a route table

Enabling diagnostic logs for Azure Firewall

Configuring Azure Firewall in forced tunneling mode

Creating an IP group

Configuring Azure Firewall DNS settings

8. Creating hybrid connections

Technical requirements

Creating a Site-to-Site connection

Downloading the VPN device configuration from Azure

Creating a Point-to-Site connection

Creating a VNet-to-VNet connection

Connecting VNets using network peering

9. Connecting to resources securely

Technical requirements

Creating an Azure Bastion instance

Connecting to a virtual machine with Azure Bastion

Creating a virtual WAN

Creating a hub (in Virtual WAN)

Adding a Site-to-Site connection (in a virtual hub)

Adding a virtual network connection (in a virtual hub)

Creating a Private Link endpoint

Creating a Private Link service

10. Load balancers

Technical requirements

Creating an internal load balancer

Creating a public load balancer

Creating a backend pool

Creating health probes

Creating load balancer rules

Creating inbound NAT rules

Creating explicit outbound rules

11. Traffic Manager

Technical requirements

Creating a new Traffic Manager profile

Adding an endpoint

Configuring distributed traffic

Configuring traffic based on priority

Configuring traffic based on geographical location

Managing endpoints

Managing profiles

Configuring Traffic Manager with load balancers

12. Azure Application Gateway and Azure WAF

Technical requirements

Creating a new application gateway

Configuring the backend pools

Configuring HTTP settings

Configuring listeners

Configuring rules

Configuring probes

Configuring a Web Application Firewall (WAF)

Customizing WAF rules

Creating a WAF policy

13. Azure Front Door and Azure CDN

Technical requirements

Creating an Azure Front Door instance

Creating an Azure CDN profile

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Creating a new NIC

An NIC is usually created during the VM creation process, but each VM can have multiple NICs. Based on this, we can create an NIC as an individual resource and attach it or detach it as needed.

Getting ready

Before you start, open a web browser and go to the Azure portal at https://portal.azure.com.

How to do it...

In order to create a new NIC using the Azure portal, we must take the following steps:

In the Azure portal, select Create a resource and choose Network interface under Networking services (or search for network interface in the search bar).
In the creation pane, we need to provide information for the Name and Virtual network fields, as well as giving the subnet that the NIC will be associated with. Other information to be provided includes the IP address assignment type (Dynamic or Static), whether we want the NIC to be associated with a Network security group type, and whether we want to use IPv6. All Azure resources require information on the Subscription, Resource group, and Region, and NICs are no exception. The information needed to create a new NIC is shown in Figure 2.13:

Figure 2.13: Creating an NIC using the Azure portal

How it works...

An NIC can't exist without a network association, and this association must be assigned to a virtual network and subnet. This is defined during the creation process and cannot be changed later. On the other hand, association with a VM can be changed and the NIC can be attached or detached from a VM at any time.

Azure Networking Cookbook, Second Edition - Second Edition

By : Mustafa Toroman

Azure Networking Cookbook, Second Edition - Second Edition

By: Mustafa Toroman

Overview of this book

Related Content you might be interested in

Current Title:

Azure Networking Cookbook, Second Edition - Second Edition

Hands-On Networking with Azure

Designing and Implementing Microsoft Azure Networking Solutions

Hands-On Cloud Administration in Azure

Creating a new NIC

Getting ready

How to do it...

How it works...