I am writing this to provide Azure services architecture as the start of Azure Architecture series. The intention is purely educational, please ensure to engage Microsoft or professional consulting services for your environment and use cases. On top of that, Microsoft has provided various reference architecture from the official site. This model provides a model … Continue reading Azure Architecture Series: Services Architecture Reference Model
Tag: cloud
Industry 4.0 – Building Digital Ecosystem
Why am I writing this (reading this) ? I was involved in the most ambitious if not the biggest Industry 4.0 (Internet of Things) research during my time at PwC. This global report conducted by PwC’s surveyed of over 2,000 global companies across nine industry sectors. The highlight of the report for Australia and Singapore region: Six … Continue reading Industry 4.0 – Building Digital Ecosystem
Skyhigh Cloud Security Part2: Let There be Light
Previously, we discussed in very high level about different threat vectors which enterprises need to be able to address cloud services problems and using Skyhigh to address those problems. The role of IT is changing from provider to enabler and service broker. We want to remove the stigma of Shadow IT which implies people are doing something … Continue reading Skyhigh Cloud Security Part2: Let There be Light
Skyhigh Cloud Security Part 1: Let there be light
I believe we all agree cloud adoption grows exponentially at 2015. We can agree almost every businesses using cloud services - as a service in any form. Yet still the number one CIO's concern for cloud adoption is security according to various researchers and surveys. If the security is the number one concern of cloud … Continue reading Skyhigh Cloud Security Part 1: Let there be light
Secure Azure Virtual Network – Defense In Depth using Network Security Groups, User Defined Routes and Barracuda NG Firewall
Security Challenge on Azure
There are few common security related questions when we start planning migration to Azure:
- How can we restrict the ingress and egress traffic on Azure ?
- How can we route the traffic on Azure ?
- Can we have Firewall kit, Intrusion Prevention System (IPS), Network Access Control, Application Control and Anti – Malware on Azure DMZ ?
This blog post intention is to answer above questions using following Azure features combined with Security Virtual Appliance available on Azure Marketplace:
- Azure Virtual Network (VNET)
- Azure Network Security Groups (NSGs)
- Azure Network Security Rule
- Azure Forced Tunelling
- Azure Route Table
- Azure IP Forwarding
- Barracuda NG Firewall available on Azure Marketplace
One of the most common methods of attack is The Script Kiddie / Skiddie / Script Bunny / Script Kitty. Script Kiddies attacks frequency is one of the highest frequency and still is. However the attacks have been evolved into something more…
View original post 1,509 more words
AWS Direct Connect in Australia via Equinix Cloud Exchange
We have discussed Azure ExpressRoute via Equinix Cloud Exchange on my previous blog. Equinix Cloud Exchange (ECX) also provides AWS Direct Connect connectivity which means you can share the same physical link (1GBps or 10GBps) between Azure and AWS! ECX also provides connectivity service to AWS for connection speed less than 1GBps. AWS Direct Connect provides dedicated, private connectivity between your WAN or datacenter and AWS services such as AWS Virtual Private Cloud (VPC) and AWS Elastic Compute Cloud (EC2).
AWS Direct Connect via Equinix Cloud Exchange is Exchange (IXP) provider based allowing us to extend our infrastructure that is:
- Private: The connection is dedicated bypassing the public Internet which means better performance, increases security, consistent throughput and enables hybrid cloud use cases (Even hybrid with Azure when both connectivity using Equinix Cloud Exchange)
- Redundancy: If we configured second AWS Direct Connect connection, traffic will failover to the second link…
View original post 351 more words
Automate your Cloud Operations Part 2: AWS CloudFormation
Stacking the AWS CloudFormation Automate your Cloud Operations blog post Part 1 have given us the basic understanding on how to automate the AWS stack using CloudFormation. This post will help the reader on how to layer the stack on top of the existing AWS CloudFormation stack using AWS CloudFormation instead of modifying the base template. AWS resources … Continue reading Automate your Cloud Operations Part 2: AWS CloudFormation
Automate your Cloud Operations Part 1: AWS CloudFormation
Operations What is Operations? In the IT world, Operations refers to a team or department within IT which is responsible for the running of a business' IT systems and infrastructure. So what kind of activities this team perform on day to day basis? Building, modifying, provisioning, updating systems, software and infrastructure to keep them available, … Continue reading Automate your Cloud Operations Part 1: AWS CloudFormation
Azure Sydney User Group February 2015: Azure Eye for the AWS Guy
Azure Sydney User Group for First 2015 Edition kicked-off with great start. Simon Waight, Andreas Wasita (me) and Scott Scovell was presenting at 11th Feb 2015. Simon and me had extensive experience with AWS especially on Enterprise space, Scott Scovell is master of integration with more than 5 years experience in Azure with AWS skills … Continue reading Azure Sydney User Group February 2015: Azure Eye for the AWS Guy
Secure Azure Virtual Network and create DMZ on Azure VNET using Network Security Groups (NSG)
At TechEd Europe 2014, Microsoft announced the General Availability of Network Security Groups (NSGs) which add security feature to Azure’s Virtual Networking capability. Network Security Groups provides Access Control on Azure Virtual Network and the feature that is very compelling from security point of view. NSG is one of the feature Enterprise customers have been waiting for. What … Continue reading Secure Azure Virtual Network and create DMZ on Azure VNET using Network Security Groups (NSG)
Andreas Wasita 