Azure - Unofficial Azure Club

Azure

A collection of 14 posts

How to Setup an OpenVPN Server on Azure (Updated)

How to Setup an OpenVPN Server on Azure (Updated)

This is an updated version for my previous article How to Setup an OpenVPN Server on Azure to support configure OpenVPN on Ubuntu 22.04 since a lot of changes happened on Easy-RSA. Prerequisites * Ubuntu 22.04 VM deployed in Azure at least with one NIC which has public IP

Azure Active-Active High-Availability Solutions

Azure Active-Active High-Availability Solutions

To show various options to deploy an application in active-active high availability mode, including - Azure Traffic Manager - Azure Front Door - Azure Cross Region Load Balancer

Azure Custom Roles - Cook Guide

Azure Custom Roles - Cook Guide

This article tries to provide a workflow so you can easily customize roles to suit your needs Azure role-based access control (Azure RBAC) [https://docs.microsoft.com/en-us/azure/role-based-access-control/overview] has several Azure built-in roles that you can assign to users, groups, service principals, and managed identities. RBAC ensures

Azure load balancer SNAT behavior explained - Annotations to tcp port numbers reused, ACK with wrong sequence number plus RST from 3-way handshake and SNAT port exhaustion

Load Balancer Featured

Azure load balancer SNAT behavior explained - Annotations to tcp port numbers reused, ACK with wrong sequence number plus RST from 3-way handshake and SNAT port exhaustion

This article will address azure external load balancer and focus on SNAT, explains a few of behaviors seen from network trace, provides a few of suggestions for application when it is behind of load balancer and requires SNAT.

Protect Kubernetes Webapps with Azure Active Directory(AAD) Authentication by Using oauth2_proxy

Protect Kubernetes Webapps with Azure Active Directory(AAD) Authentication by Using oauth2_proxy

Adding authentication to webapps sometimes is a challenging task, requires knowledge and coding for user registration, login and authentication. Specially if you are a kubernetes cluster admin, you need to take extremely care of publishing your website/web service to internet since any malicious users can access the frontend and

Running a K8S Cluster in Multiple Zones on Azure with Calico and IPVS

Kubernetes Featured

Running a K8S Cluster in Multiple Zones on Azure with Calico and IPVS

This post will explain how to deploy a kubernetes cluster in multiple zones on Azure with detailed steps, together with enabling IPVS for high performance and Calico network policy for secure network connectivity. We will explore some concepts in multiple zones cluter and show how they work as well.

Connect to Azure AD from Azure Functions with Powershell Script

Connect to Azure AD from Azure Functions with Powershell Script

There are certain things to overcome to use Connect-AzureAD from powershell script under azure functions by authenticating with certificate. This article explains how to do it. 0 Prerequisites Azure functions has been deployed already. 1 Generate Certificate and Service Principal To run Azure AD powershell commands, we need to connect

Addendum of Azure Load Balancer and NSG Rules

Addendum of Azure Load Balancer and NSG Rules

1 AllowAzureLoadBalancerInBound NSG Rule When an IaaS VM get deployed in Azure, there will be a default NSG rule AllowAzureLoadBalancerInBound created You might wonder what's the meaning of this NSG rule? Well, basically this rule means allow "Azure Load Balancer Health Probe". When an Azure Load Balancer get created, it

Using Lets Encrypt to Sign a Certificate

Using Lets Encrypt to Sign a Certificate

First of all, a private key is needed before genreate a signing request. Either use openssl openssl genrsa -out ~/domain.com.ssl/domain.com.key 2048 openssl req -new -sha256 -key ~/domain.com.ssl/domain.com.key -out ~/domain.com.ssl/domain.com.csr or use Azure key vault specially

Deploy a Ubuntu Based Flannel K8S Cluster in Azure with ARM Template and Kubeadm

Deploy a Ubuntu Based Flannel K8S Cluster in Azure with ARM Template and Kubeadm

The infomation migth be outdated here as acs-engine adds support for Flannel recently with PR 2967 [https://github.com/Azure/acs-engine/pull/2967] However, if you want to gain more control on your kubernetes cluster in Azure, in our case, by using kubeadm, this article still applies. 0. Prerequisites * Azure

Configure Ubuntu to Support Multiple NICs in Azure

Configure Ubuntu to Support Multiple NICs in Azure

By default, in Linux, if multiple NICs are in same subnet, all traffics will route through the default NIC that usually will be eth0, if multiple NICs are added, to route traffics back to the NIC that receives it, we need to create route table for that NIC, refer to

Azure - Unable to Resize VM(s) to B-Series VM(s)

Azure - Unable to Resize VM(s) to B-Series VM(s)

If the VM(s) are deployed using the Resource Manager (ARM) deployment model and we need to change to a size which requires different hardware then we can resize VMs by first stopping the VM. In our case, we are not able to resize a live VM to B-series VM,

How to Enable Accelerated Networking for Existing Linux VM

How to Enable Accelerated Networking for Existing Linux VM

How to enable accelerated networking for existing Linux VM

How to Setup an OpenVPN Server on Azure

How to Setup an OpenVPN Server on Azure

In this article, I will provide detailed steps to setup an OpenVPN server in Azure. Prerequisites * Ubuntu 16.04 VM deployed in Azure at least with one NIC which has public IP address enabled. * User with sudo privilege on Ubuntu 16.04 VM. * VM private IP address doesn't overlap with