Monday, 23 December 2024

Cloud Technology for Government Officers

I delivered a special session for Batticaloa District Secretariat Staff to do their workload easily; in this session, we covered Microsoft 365 usage for Government staff, how they can use Microsoft 365, especially Office 365, and how to collaborate their work with other members. The Batticaloa District Secretariat ICT unit organized this event.







Thursday, 14 November 2024

BGP Capabilities and Limitations in Azure.



Border Gateway Protocol (BGP) is a widely used routing protocol on the Internet, designed for exchanging routing and reachability information between multiple networks. In the context of Azure Virtual Networks, BGP facilitates communication between Azure VPN gateways and your on-premises VPN devices, known as BGP peers or neighbours. It allows them to share "routes," enabling both gateways to understand the availability and accessibility of network prefixes through the respective gateways or routers. Additionally, BGP supports transit routing by sharing learned routes from one BGP peer with all other connected BGP peers, enabling efficient multi-network communication.

 

The BGP supports Automatic Failover VPN in Azure.

If the VPN tunnel needs an Automatic Failover VPN Connection, for example, if a customer has two internet connections over two separate links, we can create an additional connection on the Azure side using the existing virtual network gateway to have a redundant connection to customers on-premise. We can configure the BGP, which supports the Azure virtual network gateway and will route traffic through the available tunnel if one connection goes down.

 

VPN connection redundancy.

  • Using AS path prepending, you can influence routing decisions between multiple connections to your on-premises sites.
  • Azure VPN gateway will honour AS Path prepending to help make routing decisions when BGP is enabled.
  • A shorter AS Path will be preferred in BGP path selection.

For example, if there are two separate VPN connections to your on-premises router, we can enable BGP on our VPN gateway and then advertise the primary connection address prefix with a short AS path and the secondary connection address prefix with a longer AS path.

 

BGP Limitations in Azure

The Azure VPN gateway using BGP automatically advertises the following routes to your on-premises devices, and these cannot be excluded:

  • The Virtual network address prefixes.
  • Address prefixes for each Local Network Gateway connected to the Azure VPN gateway.
  • Routes learned from other BGP peering sessions connected to the Azure VPN gateway, excluding the default route and any routes that overlap with a virtual network prefix.

There is no way to restrict advertising to only one Address prefix from Azure to on-premises. Currently, there is no option to use Route filters to receive/advertise IP ranges for specific IP ranges on the Azure VPN Gateway.

 

The solution for restricting the BGP unwanted traffic.

  • The easiest way to achieve this is via on-prem routers. You will have to apply a BGP route filter to the on-prem routers.
  • Deploy the VPN directly to the spoke VNet and not choose the option to route via the remote gateway. This will only advertise the specific VNet range to the on-premises.
  • Deploy the 3rd party VPN on Azure (NetworkAppliances) that can do route filtering.

Saturday, 2 November 2024

Boost your IT Career

I had a webinar session about Clod Technology how students can earn Microsoft Certifications, and how to use Microsoft Learn; in the session, I discussed Azure Technology, Cloud Comparision and Certifications.








Sunday, 20 October 2024

Cloud Engineering Career

I had the amazing opportunity to deliver a session about Azure Technology at Stanford College, Nintavur, on October 20, 2024. 

We discussed Azure Infrastructure Technology, Platform Technology, and Azure Security Data technology during the session.


Thank you to Stanford College, Nintavur, for organizing the event.








Thursday, 17 October 2024

The Basic SKU Public IPs will be Retired in Azure


Microsoft has announced that the Basic SKU public IPs will be retired On September 30, 2025; if you are currently using the Basic SKU IPs in your environment, it is better to upgrade them as soon as possible. When you upgrade the VMs Public IP, the IP address will never change, so the upgrading won't affect your working environment.

This process requires a maximum of 3-5 minutes of downtime, but based on your environment, the downtime will change.

If your Basic SKU Public IP is attached to the VPN / ExpressRoute Gateway, you must recreate the Gateway at that time. The IP will change, so the remote device should change the new IP.

Saturday, 20 July 2024

Modern IT Technologies

I had the amazing opportunity to deliver a session about Microsoft technologies at the Vipulananda Tamil National School, Monaragala District, UVA Province, on July 20, 2024. 

During the session, we discussed AI ​​Technology, Cloud Technology, and Data Processing Technology.

Thank you to the Vipulananda Tamil National School, Monaragala, for organizing the event.







Friday, 3 May 2024

Empowering Tomorrow’s Technicians

I have successfully delivered a session at the Vivekananda College of Technology - Batticaloa on May 3, 2024! 

I shared Azure and Microsoft 365 technology awareness with the students. Thank you for arranging the session at Vivekananda College of Technology.









Saturday, 20 April 2024

Global Azure 2024 - Sri Lanka

I have successfully delivered a session at the Global Azure 2024 event in Sri Lanka! 
I shared Infrastructure Management and Deployment expertise using Azure DevOps with Biceep.
Thank you to all who attended and participated in the Global Azure 2024 event. 
















Tuesday, 9 April 2024

Deploying Palo Alto Firewall on Azure

The VM-Series Next-Generation Firewall is available on the Azure marketplace to allow cloud security architects to deploy the firewall and threat prevention along with their application deployment.

We can protect our applications and data with whitelisting and segmentation policies. Policies update dynamically based on Azure tags assigned to application VMs, allowing you to reduce the attack surface area and achieve compliance.




Saturday, 6 April 2024

𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗔𝗜 𝗖𝗹𝗼𝘂𝗱 𝗦𝗸𝗶𝗹𝗹𝘀 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝟮𝟬𝟮𝟰 - Webinar

I have successfully delivered a Webinar about 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗔𝗜 𝗖𝗹𝗼𝘂𝗱 𝗦𝗸𝗶𝗹𝗹𝘀 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝟮𝟬𝟮𝟰 on 6 April 2024

During the session, we discussed the AI Cloud Skills Challenge, how to utilize Azure AI and Azure AI Studio, and how to earn the Microsoft certification. 


Thursday, 4 April 2024

𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗔𝗜 𝗖𝗹𝗼𝘂𝗱 𝗦𝗸𝗶𝗹𝗹𝘀 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝟮𝟬𝟮𝟰 - Podcast

I had the amazing opportunity to deliver an interview about the Microsoft AI Cloud Skills Challenge 2024 at the Minnal 24 YouTube News Channel on 4 April 2024. 

During the session, we discussed the AI Cloud Skills Challenge, how to utilize Azure AI and Azure AI Studio, and how to earn the Microsoft certification. 




𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗔𝗜 𝗖𝗹𝗼𝘂𝗱 𝗦𝗸𝗶𝗹𝗹𝘀 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝟮𝟬𝟮𝟰 - NVTI

I had the amazing opportunity to deliver a session about the Microsoft AI Cloud Skills Challenge 2024 at the National Vocational Training Institute—Batticaloa on 4 April 2024. 

During the session, we discussed the AI Cloud Skills Challenge, how to utilize Azure AI and Azure AI Studio, and how to earn the Microsoft certification. 

A big thank you to the National Vocational Training Institute - Batticaloa for organizing the event.









Sunday, 17 March 2024

Global AI Bootcamp

I had the opportunity to participate as a guest technical speaker at the Global AI Bootcamp, which was organized by the Sri Lankan Tech community.

The event, sponsored by Stanford College of Higher Education, was a great success, and I was thrilled to be a part of it.

During my presentation, I discussed some exciting topics, including Microsoft AI Technology, GitHub Copilot, and the Microsoft AI Cloud Skills Challenge.

It was an honor to share my knowledge with such an engaged audience.












Thursday, 14 March 2024

Integrating the GitHub on the Azure DevOps

Integrating GitHub with Azure DevOps, we can continue to use GitHub as our source code repository while taking advantage of Azure Pipelines' robust CI/CD features.

Our development workflow is streamlined by this integration, which also makes it possible for teams working on different platforms to collaborate more effectively.

 


Wednesday, 13 March 2024

Integrating the Azure Subscription on the Azure DevOps

In our previous article, we learned how to create the Azure DevOps account, create the Organization, and get approval from the Azure DevOps using Azure DevOps Parallelism Request. In this article, we will learn how to Integrate the Azure Subscription using the Service Connections.


 


Friday, 1 March 2024

Microsoft Azure Fundamental Challenge

 



Step 1: Click the Cloud Skills Challenge URL and click the Join the Challenge!


Step 2: Sign in with your Microsoft Learn Credentials (User Name and Password), and Start the challenge.


Step 3: Complete all the modules and the knowledge checks.



Step 4: You will get the Voucher once the challenge has ended.



Sunday, 25 February 2024

Journey to the Latest IT Technologies

I joined as a resource person for the Journey to the Latest IT Technologies on the 25th of February, 2024, at the Science College, Akkaraipattu.


The Sri Lankan Tech Community and Science College organized the event.


Discussed Microsoft Cloud Technology, Microsoft and GitHub Copilot, and Microsoft Certifications.