Another great Video John. Just wanted to add a suggestion, if I may, to add important documentation/article in the description for reference and deep dive.
A comment seemed to have got deleted. deepakrajput0071 commented: "Excellent Video.Being a novice in Networking,Can you please help me understand what is "meet me" location as discussed while talking about vnet peering using expressroute". "meet me" locations are peering points. There are locations operated by the providers of ExpressRoute services. If you search for expressroute and peering points you will find locations and the providers for those locations.
I have some background in AWS. Even though Azure and AWS have similar concepts, they have lots of subtle differences. For instance, AWS does not allow internet access of VMs by default, while Azure allows them. It's great to have a brief look at these key features in the video before digging into the Azure documentation.
One of the best videos on Azure Networking. Great work, John!! Regarding your point on Azure resources always accessing PaaS services on Azure backbone (internal traffic); wont that require publishing the service endpoints to the VNet?
No. So the traffic will always stay on azure network, I.e. it won’t bounce out and back to internet and will instead keep in azure. Service endpoints help the most direct path and enable firewall config on the PaaS.
Hi John, I have a query, please let me know why do we add additional address spaces for a single VNet. What is the benefit of adding additional address spaces?
It could be initially you set the address space too small and need to increase, it could be you want to change to a new up scheme so add a new address space with new subnets then move resources and delete the old.
Great presentation John. I have a question about the application security group that you demoed. when you have VMs in different region 2 option to allow the resources to talk (firewall, NVA) or Peering and with peering you can only block access as the 2 peered networks are acting as one. So I am a bit confused about the need to allow access using application security Groups in a peered network that is already open east to west and vice versa.
Awesome video, loved it. One question, around 25:00 when you describe "Microsoft Peering", aren't you actually describing "Azure Private Peering". The Microsoft docs describe Microsoft peering as that goes over the internet to PaaS services and not over ER routes to resources such as Storage etc from Customer's OP systems
lol, yes, its often referred to as peering however yes on expressroute there is also a microsoft peering type for paas service bgp advertisement. Can get confusing :-) I should stress the private in the peering ;-)
lol I don't want cash out of this. Why i have no advertising on my videos (no banners, no videos). This is me giving back to a community thats been so good to me!
