Reader small image

You're reading from  Exam Ref AZ-304 Microsoft Azure Architect Design Certification and Beyond

Product typeBook
Published inJul 2021
PublisherPackt
ISBN-139781800566934
Edition1st Edition
Right arrow
Author (1)
Brett Hargreaves
Brett Hargreaves
author image
Brett Hargreaves

Brett Hargreaves is a principal Azure consultant for Iridium Consulting, who has worked with some of the world's biggest companies, helping them design and build cutting-edge solutions. With a career spanning infrastructure, development, consulting, and architecture, he's been involved in projects covering the entire solution stack using Microsoft technologies. He loves passing on his knowledge to others through books, blogging, and his online training courses.
Read more about Brett Hargreaves

Right arrow

Chapter 8

One potential solution to the MegaCorp Inc. requirements would be to use an ExpressRoute connection into Azure as this helps provide a stable but resilient connection.

To control internet traffic from solutions built in Azure, Azure Firewall could be built on a central VNET that all other VNETs will be peered to. That VNET can also contain the ExpressRoute's gateway VNET. In other words, a hub-spoke model will be used.

Each peered VNET will have two custom routes set up. One route will send traffic for on-premises IP ranges to the ExpressRoute gateway subnet and the other route will send other traffic to the central firewall's IP address.

NSGs will be set to allow outbound HTTPS and HTTP traffic to the firewall VNET and standard ports for DNS resolution to on-premises DNS servers. VNETs will be set up to use on-premises DNS servers as the primary servers with the Azure DNS (168.63.129.16) as the secondary.

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
Exam Ref AZ-304 Microsoft Azure Architect Design Certification and Beyond
Published in: Jul 2021Publisher: PacktISBN-13: 9781800566934

Author (1)

author image
Brett Hargreaves

Brett Hargreaves is a principal Azure consultant for Iridium Consulting, who has worked with some of the world's biggest companies, helping them design and build cutting-edge solutions. With a career spanning infrastructure, development, consulting, and architecture, he's been involved in projects covering the entire solution stack using Microsoft technologies. He loves passing on his knowledge to others through books, blogging, and his online training courses.
Read more about Brett Hargreaves