Another great Video John. Just wanted to add a suggestion, if I may, to add important documentation/article in the description for reference and deep dive.
I have some background in AWS. Even though Azure and AWS have similar concepts, they have lots of subtle differences. For instance, AWS does not allow internet access of VMs by default, while Azure allows them. It's great to have a brief look at these key features in the video before digging into the Azure documentation.
One of the best videos on Azure Networking. Great work, John!! Regarding your point on Azure resources always accessing PaaS services on Azure backbone (internal traffic); wont that require publishing the service endpoints to the VNet?
No. So the traffic will always stay on azure network, I.e. it won’t bounce out and back to internet and will instead keep in azure. Service endpoints help the most direct path and enable firewall config on the PaaS.
A comment seemed to have got deleted. deepakrajput0071 commented: "Excellent Video.Being a novice in Networking,Can you please help me understand what is "meet me" location as discussed while talking about vnet peering using expressroute". "meet me" locations are peering points. There are locations operated by the providers of ExpressRoute services. If you search for expressroute and peering points you will find locations and the providers for those locations.
Awesome video, loved it. One question, around 25:00 when you describe "Microsoft Peering", aren't you actually describing "Azure Private Peering". The Microsoft docs describe Microsoft peering as that goes over the internet to PaaS services and not over ER routes to resources such as Storage etc from Customer's OP systems
lol, yes, its often referred to as peering however yes on expressroute there is also a microsoft peering type for paas service bgp advertisement. Can get confusing :-) I should stress the private in the peering ;-)
Great presentation John. I have a question about the application security group that you demoed. when you have VMs in different region 2 option to allow the resources to talk (firewall, NVA) or Peering and with peering you can only block access as the 2 peered networks are acting as one. So I am a bit confused about the need to allow access using application security Groups in a peered network that is already open east to west and vice versa.
Hi John, I have a query, please let me know why do we add additional address spaces for a single VNet. What is the benefit of adding additional address spaces?
It could be initially you set the address space too small and need to increase, it could be you want to change to a new up scheme so add a new address space with new subnets then move resources and delete the old.
lol I don't want cash out of this. Why i have no advertising on my videos (no banners, no videos). This is me giving back to a community thats been so good to me!
service n private endpoint explanation - better than the best
Great resources for an Azure learning journey. Videos are very clear and concise explanations. Thanks
Thanks a lot John. Your knowledge and presentation skill are one of the best
Gone through lot of documentation , this is very clear and informative Thanks
Glad you liked it!
Appreciate the overview. GJ!
Great Video!! You are better than most of the MS consultants I have had contact to.
one of the best videos explaining this topic
Thank you
merci John. What a guided tour !
hats off u r giving this useful n rare information with so effort n that too without any commercialisation here.
glad you like it.
Excellent video John...enjoyed watching it till the end...Liked the way u explained Expressroute and Route Filters (Hemanth from Bangalore, India)👍
Really thank you, John. You explain the Azure network very clearly.
Glad to help!
Another great Video John. Just wanted to add a suggestion, if I may, to add important documentation/article in the description for reference and deep dive.
I do that in more recent videos.
Great detailed explanation, thank you for the awesome Azure content!
Thanks. Check out the azure master class playlist which you may like.
@@NTFAQGuy , funny you say that, I saw it and already added it to my list! I’m working on my first production deployment for Azure Files!
I am supplementing my online AZ104 with your free tutorials, (which are better) so Thank you.
Glad you like them!
As always, John, many thanks. Awesome teacher. But like your whiteboards even more
Glad you like them!
John, Thanks for this awesome video. it has helped me clear most of the azure networking doubts specially service endpoints and private links
Thank you. I recently did other videos about those topics as well in more detail.
@@NTFAQGuy could you please share the link
I have some background in AWS. Even though Azure and AWS have similar concepts, they have lots of subtle differences. For instance, AWS does not allow internet access of VMs by default, while Azure allows them. It's great to have a brief look at these key features in the video before digging into the Azure documentation.
Glad it was helpful!
The implementation of stateful NSGs in Azure is far easier than having to use combinations of security groups and NACLs to do the same thing in AWS
Explained perfectly. Kudos
My pleasure
Sir you are SUPERB ! AMAZING ! GENEROUS ! and so on..else it can fill this page. Massive THANK YOU !
Hehe, that’s very kind, thank you!
One of the best videos on Azure Networking. Great work, John!!
Regarding your point on Azure resources always accessing PaaS services on Azure backbone (internal traffic); wont that require publishing the service endpoints to the VNet?
No. So the traffic will always stay on azure network, I.e. it won’t bounce out and back to internet and will instead keep in azure. Service endpoints help the most direct path and enable firewall config on the PaaS.
it's cristal clear thank you John
My pleasure. Glad it was useful.
Thank you , Amazing video !!
A comment seemed to have got deleted.
deepakrajput0071 commented: "Excellent Video.Being a novice in Networking,Can you please help me understand what is "meet me" location as discussed while talking about vnet peering using expressroute".
"meet me" locations are peering points. There are locations operated by the providers of ExpressRoute services. If you search for expressroute and peering points you will find locations and the providers for those locations.
Enjoyed the video. Thank you
Quality Stuff - from a Top Man - Cheers Jon
Thank you!
I wish there was a whiteboard explaining stuff..Visualization plays a key role when talking networking stuff as opposed to other technologies
Thanks John, super job!
Thanks
Amezing John. Thanks a ton.
Requesting you to create video on Azure load balancer.
Noted
You need chapters with videos this long and death by powerpoint
Watch the network master class instead which is whiteboard based
Thank you John, Very helpful Kudos :)
Glad it was helpful!
Thank you! Very helpful
Awesome, that’s great to hear!
Awesome video, loved it. One question, around 25:00 when you describe "Microsoft Peering", aren't you actually describing "Azure Private Peering". The Microsoft docs describe Microsoft peering as that goes over the internet to PaaS services and not over ER routes to resources such as Storage etc from Customer's OP systems
lol, yes, its often referred to as peering however yes on expressroute there is also a microsoft peering type for paas service bgp advertisement. Can get confusing :-) I should stress the private in the peering ;-)
wonderful video, please can you make videos on azure network deep dive, you can even publish it on teachable.
I have a lot of deep dives on this channel for example an 80 minute ExpressRoute deep dive, NAT Gateway etc.
Great presentation John. I have a question about the application security group that you demoed. when you have VMs in different region 2 option to allow the resources to talk (firewall, NVA) or Peering and with peering you can only block access as the 2 peered networks are acting as one. So I am a bit confused about the need to allow access using application security Groups in a peered network that is already open east to west and vice versa.
yes by default they are open but often people will add rules to limit connectivity so then you can add rules to add exceptions to the segmentation.
Nice Video
Thanks. I have a networking module in the Azure masterclass that is newer and more detail which you may like.
I dub you, Azure Jesus.
Lol
Hi John, I have a query, please let me know why do we add additional address spaces for a single VNet.
What is the benefit of adding additional address spaces?
It could be initially you set the address space too small and need to increase, it could be you want to change to a new up scheme so add a new address space with new subnets then move resources and delete the old.
John, you'd make a mountain of cash if you created a course and put it on Udemy. Best I've seen free or paid.
lol I don't want cash out of this. Why i have no advertising on my videos (no banners, no videos). This is me giving back to a community thats been so good to me!
@@NTFAQGuy It's a very generous and rare ethos you have John and is hugely appreciated!
@@niksta007a thank you!