Microsoft Azure Cloud Networking & Automation Adavance

Explore Azure virtual networks (VNet), subnets, and IP addressing with private and public ranges, and learn isolation and region-driven deployment. Compare VNets to VLANs and review limits and cross-VNet connectivity.

Create an Azure VNet with address space 1.1.0.0 16, add private 1.1.1.0 24 and public 1.1.2.0 24 subnets, and deploy into the Central India region within the lab resource group.

Explore azure virtual network peering to enable private, high-bandwidth communication between virtual networks across regions or within the same region, using regional and global peering in a hub-and-spoke model.

Configure Azure virtual network peering between VNets in the same region and verify connectivity, then establish regional peering and global peering across regions, confirming the connected status.

Verify connectivity between Azure virtual networks via non-transitive peering by ICMP ping tests; VNet1 to VNet2 and VNet1 to VNet3 work, but VNet3 cannot reach VNet2.

Test bandwidth between Azure virtual networks using iperf3 across VNet peering, with a Linux server on VNet1 and clients on VNet2 and VNet3; compare regional versus global peering performance.

Learn how a hub VNet connects spoke VNets using a VPN gateway and gateway subnet, enabling site-to-site, point-to-site, and VNet-to-VNet VPN connections.

Build a hub-and-spoke lab with three vnets, deploy a vpn gateway in vnet1, enable gateway transit for spoke-to-spoke connectivity, and configure udrs to route via the gateway, then verify.

Explore Azure virtual network IPv6 adoption, dual stack design, and subnetting with /48 and /64 blocks, plus pricing, regulatory considerations, and service support for IPv6 across Azure resources.

Learn how to enable IPv6 in an Azure VNet, add IPv6 space, create dual-stack subnets, assign IPv6 to a NIC with an instance-level public IP, and verify connectivity.

Move the IPv6 public IP from the VM NIC to a standard public load balancer and configure a frontend IP, backend pool, and outbound rule for outbound IPv6 internet access.

Discover how the Azure load balancer evenly distributes traffic across a pool of backend servers, enabling session affinity, inbound and outbound traffic handling, and zone-redundant high availability.

Gain hands-on experience configuring an Azure load balancer, creating a public front end, building a backend pool with two Ubuntu VMs, enabling health probes, and testing session affinity.

Learn how inbound NAT rules map a public IP and front-end ports to VMs or backend pools in an Azure load balancer, coexisting with load balancing rules.

Learn how Azure load balancer performs zone one deployment with pass-through traffic, client IP hash algorithm, and TCP/HTTP health probes, including floating IP considerations and direct server return.

Learn how Azure internal load balancer distributes traffic inside a virtual network, keeping it private with a single VNet IP, and explore ExpressRoute, NVAs, and hub-and-spoke use cases.

Learn how Azure load balancer distributes traffic across multiple servers with zone redundant configuration across availability zones to improve application availability, using public and internal options.

Learn how cross region load balancer routes multi-region traffic with static anycast global IPs, supports regional deployments and global failover, and compares with GTM-based traffic management.

Perform a hands-on lab to configure a cross-region Azure load balancer with two public front-end IPs across east and west regions and port 80, enabling low latency and fast failover.

Discover Azure Virtual WAN, a cloud-native, centralized networking service that unifies site-to-site, hub-and-spoke connectivity, and SD-WAN integrations to securely connect on-premises, data centers, and Azure resources.

Learn to design and deploy an Azure virtual WAN hub topology, create virtual network connections, manage routing tables, and implement ExpressRoute, VPN, and BGP based routing.

Discover azure firewall, a cloud-native virtual firewall with threat intelligence and built-in high availability. Explore hub-and-spoke deployment, nat rules, fqdn filtering, and tls inspection in premium via firewall manager.

Perform a hands-on lab to deploy an Azure firewall in a hub-and-spoke VNet, select the SKU and zone options, configure a 24 subnet, and test connectivity and policies.

In this lab, build a firewall-enabled subnet, deploy a Windows VM, and configure a DNAT NAT rule to expose RDP from a public IP to the VM's private IP.

Configure internet outbound on an Azure firewall using source NAT and application rules for FQDNs like google.com, then tune DNS settings and consider a NAT gateway for large-scale scaling.

Leverage Azure firewall manager to centralize and govern traffic across multiple Azure firewall instances, achieving scalable, consistent, cross-region and cross-subscription perimeter protection with hub virtual networks or secured virtual hubs.

Learn Azure DDoS protection across network and IP tiers, mitigate volumetric, protocol, and application layer attacks, use scrubbing centers and web application firewall with application gateway for secure traffic.

Explore creating and applying an Azure DDoS protection plan to virtual networks and resources, simulate attacks, monitor metrics, and manage protections at the IP or VNet level.

Learn how Azure private endpoints enable private IP communication to storage and other PaaS services within a VNet, with private DNS integration and private link across ExpressRoute or VPN.

Explore Terraform’s cloud and enterprise editions, Windows installation, and how to connect the local CLI to Terraform Cloud; manage workspaces and authenticate to Azure with a service principal.

Learn how to implement a version-control driven ci/cd workflow with Terraform Cloud and GitHub to automatically provision Azure virtual networks and resource groups from code.

Explore how to provision Azure resources with Terraform command line interface, creating a resource group and a virtual network with subnets, using plan and apply workflows and tagging.

Learn to manage resources with Terraform by creating VNet, configuring subnets, establishing VNet peering, and provisioning a Windows Server virtual machine in Azure.

Provision an Azure virtual network using Terraform Cloud in a CLI-driven workflow, initializing, planning, and applying a VNet and resource group in East US with address space 30.0.0.0/16.

Explore how Azure peering service maps optimize routing with BGP exchanges across internet exchange points, enabling reliable access to Microsoft cloud services and Microsoft 365, Dynamics 365, and other SaaS.

Learn to use Azure Network Watcher to visualize topology, monitor connectivity, and diagnose NSG rules, VPNs, and traffic issues, enabling admins, architects, security teams, and DevOps to secure IaaS networks.