Service Fabric Backups and CN certs – bug discovery

I encountered a strange behavior while working with Backup and Restore service running on a Service Fabric 8.0.514.9590 cluster. I assume the behavior exists on prior releases as well. The Scenario This cluster had been deployed initially referencing the certificate Thumbprint rather than the Common Name attribute, following the MSFT documentation for doing so. Switching …

Securing an Azure ISE

On my latest project, the client has deployed several ISEs and was unable to successfully implement NSGs or the Azure firewall to secure traffic. As a result, these ISEs aren’t currently using either. We’ll be reviewing an internal ISE. Here, the primary concern is in regards to outbound traffic, but the inbound traffic is of …

Terraform – Concat + formatlist multiple lists

An issue I ran in to recently was that I needed to assign multiple lists to the ip_rules block of an Azure Key Vault in Terraform. Doing so was easy enough using Terraform’s concat function. Initially, the use case was simple… combine three lists that were stored as variables. ip_rules = “${concat(var.list1, var.list2, var.list3)}” I …

Azure Linux VM “Update agent readiness” suddenly Not Ready.

A little Linux VM I had deployed several months back suddenly quit taking automatic updates. The VM was connected to the proper workspace and was showing as “connected” to that workspace; however, Update management was showing no information in regards to the status of missing updates and the agent readiness was showing as “Not ready”. …

Attaching volumes greater than 2TB to an Azure Linux VM

These days it is fairly common that I need to store and process large volumes of data. This isn’t possible with fdisk; you’ll need to turn to something like parted if you want to create a volume larger than 2 terabytes. Here’s how… This does not have to be an Azure Linux VM of course… …

An example of Azure <-> Azure PaaS resource network routing “never leaving the backbone” and how it impacts Security.

There are a few relatively decent sources of documentation for Azure Networking available, but generally they center around VNET-based scenarios. If you’re trying to stay strictly on PaaS offerings, things tend to not be quite as clear. The lack of information makes sense in a way… why do you need to know anything about Azure-to-Azure …

MSFT has published Windows Virtual Desktop IP Address ranges

Alright! Over the last couple of months I have been using the Windows Virtual Desktop platform heavily. Unfortunately, determining the IP address ranges of the platform has involved a fair amount of traffic log review, something that isn’t overly exciting. What is exciting is that MSFT is now including the ranges in the Azure IP …

Using Azure Key Vault in ASP.NET Core

In a previous post I described what Azure Key Vault is and provided some instruction in regards to setting it up and using it. Now we’re going to run through some code examples to see how an application can use a vault. There is no reason to re-create Microsoft’s excellent documentation that demonstrates an ASP.NET …

Azure Key Vault

The need to store sensitive information securely in Cloud environments is both hugely important and challenging. Azure Key Vault can help. Imagine a simple scenario where you are part of a team developing a Cloud-native application. The application needs to access an Azure SQL Database and an Azure Storage account. You should avoid hard-coding your …

Close Bitnami banner
Bitnami