Monday, 23 December 2024
Thursday, 14 November 2024
Border Gateway Protocol (BGP) is
a widely used routing protocol on the Internet, designed for exchanging routing
and reachability information between multiple networks. In the context of Azure
Virtual Networks, BGP facilitates communication between Azure VPN gateways and
your on-premises VPN devices, known as BGP peers or neighbours. It allows them
to share "routes," enabling both gateways to understand the
availability and accessibility of network prefixes through the respective
gateways or routers. Additionally, BGP supports transit routing by sharing
learned routes from one BGP peer with all other connected BGP peers, enabling
efficient multi-network communication.
The BGP supports Automatic
Failover VPN in Azure.
If the VPN tunnel needs an
Automatic Failover VPN Connection, for example, if a customer has two internet
connections over two separate links, we can create an additional connection on
the Azure side using the existing virtual network gateway to have a redundant
connection to customers on-premise. We can configure the BGP, which supports
the Azure virtual network gateway and will route traffic through the available
tunnel if one connection goes down.
VPN connection redundancy.
- Using AS path prepending, you can influence routing decisions between multiple connections to your on-premises sites.
- Azure VPN gateway will honour AS Path prepending to help make routing decisions when BGP is enabled.
- A shorter AS Path will be preferred in BGP path selection.
For example, if there are two
separate VPN connections to your on-premises router, we can enable BGP on our
VPN gateway and then advertise the primary connection address prefix with a
short AS path and the secondary connection address prefix with a longer AS
path.
BGP Limitations in Azure
The Azure VPN gateway using BGP automatically advertises the following routes to your on-premises devices, and these cannot be excluded:
- The Virtual network address prefixes.
- Address prefixes for each Local Network Gateway connected to the Azure VPN gateway.
- Routes learned from other BGP peering sessions connected to the Azure VPN gateway, excluding the default route and any routes that overlap with a virtual network prefix.
There is no way to restrict
advertising to only one Address prefix from Azure to on-premises. Currently,
there is no option to use Route filters to receive/advertise IP ranges for
specific IP ranges on the Azure VPN Gateway.
The solution for restricting the BGP unwanted traffic.
- The easiest way to achieve this is via on-prem routers. You will have to apply a BGP route filter to the on-prem routers.
- Deploy the VPN directly to the spoke VNet and not choose the option to route via the remote gateway. This will only advertise the specific VNet range to the on-premises.
- Deploy the 3rd party VPN on Azure (NetworkAppliances) that can do route filtering.
Saturday, 2 November 2024
Sunday, 20 October 2024
I had the amazing opportunity to deliver a session about Azure Technology at Stanford College, Nintavur, on October 20, 2024.
We discussed Azure Infrastructure Technology, Platform Technology, and Azure Security Data technology during the session.
Thank you to Stanford College, Nintavur, for organizing the event.
Thursday, 17 October 2024
Microsoft has announced that the Basic SKU public IPs will be retired On September 30, 2025; if you are currently using the Basic SKU IPs in your environment, it is better to upgrade them as soon as possible. When you upgrade the VMs Public IP, the IP address will never change, so the upgrading won't affect your working environment.
This process requires a maximum of 3-5 minutes of downtime, but based on your environment, the downtime will change.
If your Basic SKU Public IP is attached to the VPN / ExpressRoute Gateway, you must recreate the Gateway at that time. The IP will change, so the remote device should change the new IP.
Saturday, 20 July 2024
I had the amazing opportunity to deliver a session about Microsoft technologies at the Vipulananda Tamil National School, Monaragala District, UVA Province, on July 20, 2024.
During the session, we discussed AI Technology, Cloud Technology, and Data Processing Technology.
Thank you to the Vipulananda Tamil National School, Monaragala, for organizing the event.
Friday, 3 May 2024
Saturday, 20 April 2024
Tuesday, 9 April 2024
The VM-Series Next-Generation Firewall is available on the Azure marketplace to allow cloud security architects to deploy the firewall and threat prevention along with their application deployment.
We can protect our applications and data with whitelisting and segmentation policies. Policies update dynamically based on Azure tags assigned to application VMs, allowing you to reduce the attack surface area and achieve compliance.
Saturday, 6 April 2024
I have successfully delivered a Webinar about 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗔𝗜 𝗖𝗹𝗼𝘂𝗱 𝗦𝗸𝗶𝗹𝗹𝘀 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝟮𝟬𝟮𝟰 on 6 April 2024.
During the session, we discussed the AI Cloud Skills Challenge, how to utilize Azure AI and Azure AI Studio, and how to earn the Microsoft certification.
Thursday, 4 April 2024
I had the amazing opportunity to deliver an interview about the Microsoft AI Cloud Skills Challenge 2024 at the Minnal 24 YouTube News Channel on 4 April 2024.
During the session, we discussed the AI Cloud Skills Challenge, how to utilize Azure AI and Azure AI Studio, and how to earn the Microsoft certification.
I had the amazing opportunity to deliver a session about the Microsoft AI Cloud Skills Challenge 2024 at the National Vocational Training Institute—Batticaloa on 4 April 2024.
During the session, we discussed the AI Cloud Skills Challenge, how to utilize Azure AI and Azure AI Studio, and how to earn the Microsoft certification.
A big thank you to the National Vocational Training Institute - Batticaloa for organizing the event.
Sunday, 17 March 2024
I had the opportunity to participate as a guest technical speaker at the Global AI Bootcamp, which was organized by the Sri Lankan Tech community.
The event, sponsored by Stanford College of Higher Education, was a great success, and I was thrilled to be a part of it.
During my presentation, I discussed some exciting topics, including Microsoft AI Technology, GitHub Copilot, and the Microsoft AI Cloud Skills Challenge.
It was an honor to share my knowledge with such an engaged audience.
Thursday, 14 March 2024
Integrating GitHub with Azure DevOps, we can continue to use GitHub as our source code repository while taking advantage of Azure Pipelines' robust CI/CD features.
Our development workflow is streamlined by this integration, which also makes it possible for teams working on different platforms to collaborate more effectively.
Wednesday, 13 March 2024
Friday, 1 March 2024
Sunday, 25 February 2024
I joined as a resource person for the Journey to the Latest IT Technologies on the 25th of February, 2024, at the Science College, Akkaraipattu.
The Sri Lankan Tech Community and Science College organized the event.
Discussed Microsoft Cloud Technology, Microsoft and GitHub Copilot, and Microsoft Certifications.