In this video, we look at how to use NGINX Plus to get the TCP Proxy Protocol v2 TLV from the Azure Private Link Service and extract and decode the numeric linkIdentifier (aka LINKID) of the private endpoint connection. We use NGINX Plus features such as $proxy_protocol_tlv_0x__ and the NGINX…

In this article, I try to create a short mapping of key AWS IAM (Identity and Access Management) concepts to similar ones in Microsoft Azure. If you see things that are wrong or incomplete, please leave a comment with what I should fix. For a more general AWS and Azure…

In this article, I try to create a short mapping of key Google Cloud IAM (Identity and Access Management) concepts to similar ones in Microsoft Azure. If you see things that are wrong or incomplete, please leave a comment with what I should fix. For a more general Google Cloud…

In this video, we deep dive into TCP Proxy Protocol v2 — an advanced feature of the Azure Private Link Service. We experiment with enabling Proxy Protocol v2 in Azure Private Link Service and configuring NGINX service to read the source private IP address of the original client (vs the…

In this video, we look at the Azure Private Link Service feature that enables providers (such as Independent Software Vendors building SaaS products) to let consumers access the provider’s service using private IPs from consumer’s own Azure Virtual Networks. As an end-to-end demo, we use a few simple Azure Resource…

In this video, we experiment with the Azure Active Directory Workload Identity Federation using external OpenID Connect identity providers (OIDC IdP) including our own fake JWT token, another AAD tenant, Auth0, and GCP. As of February 2022, AAD Workload Identity Federation is in “preview” and not all external IdP and…

In this article, we look at how a publisher of Azure Managed Application can get the list of Azure subscriptions of the customers who deployed the publisher’s offer. “Managed application center” in Azure Portal In Azure Portal, the publisher can use the Managed application center to see all deployed applications. Search for “Managed applications center” in…

In this article, we discuss why one shouldn’t use VMBUS ID to identify specific network devices on an Azure VM. A more reliable way to identity NICs consistently are the MAC addresses in combination with the Ethernet interface names. As an example, we look at an Azure Ubuntu 18.04-LTS VM…

In this article, more specifically the GitHub repo, I describe how to deploy various Azure Marketplace offer types programmatically using Azure CLI, ARM, and Terraform. The ability to deploy Azure Marketplace offers in a programmatic way depends on the specific offer type: special types of 3rd party SaaS like Elasticsearch…