|
Azure Direct Connect for Private Link Service it removes the mandatory Standard Load Balancer from the Private Link path entirely. Services can now be exposed directly from a backend Network Interface (NIC). That's a bigger deal than the feature announcement makes it sound.
0 Comments
Azure DNS Security Policies hit general availability, bringing native DNS query logging to the platform. And while logging alone would have been enough to get my attention, they also shipped DNS query filtering (block, allow, alert) in the same package. Let me walk through how it all works
A few months back, a customer called me with a familiar frustration. They had a solid hub-and-spoke topology in Azure — around 100 spoke VNets, one per application team, clean isolation, good governance. Textbook setup. The problem? Traffic between their spokes had to pass through an Azure Firewall Premium they'd deployed in the hub, and they were starting to hit the 100 Gbps ceiling. On top of that, their monthly Azure Firewall bill had grown to a point where the finance team was asking questions — and the honest answer was: *"We're mostly using it as a router, not a firewall.
Failure Mode Analysis (FMA) is one of the most underused reliability practices in Azure architecture work. It is not about predicting every possible failure. It is about working through "what happens when this breaks?" before it breaks, so the answers are already designed into the architecture rather than improvised during an incident.
A customer asked me recently whether they needed to worry about the US CLOUD Act if their Azure tenant was based in the Netherlands. They had read that their data stays in Europe, saw the "EU Data Boundary" label in the admin portal, and assumed that settled it.
It doesn't. Not completely. And the gap between what they assumed and what the law actually says is exactly where digital sovereignty conversations go wrong. 
I've had some version of the same conversation across multiple Azure engagements. A team is mid-deployment, things are getting messy, and someone mentions the Well-Architected Framework. Then someone else says "yeah, we did that in the CAF phase." And the room just moves on, carrying a misunderstanding that will surface again later as delivery friction, control gaps, and rework nobody budgeted for.
|
Author
Mohammad Al Rousan is a Microsoft Most Valuable Professional (MVP) in Azure, a cloud architect, and a recognized leader in enterprise AI and data platforms. With over a decade of hands-on experience, he specializes in designing and scaling secure, production-grade solutions across Azure AI, Databricks, and modern cloud-native architectures. 
Top 10 Microsoft Azure Blogs
Archives
April 2026
Categories
All
|
RSS Feed
