Networking: free Azure study notes

Free study notes

Sections from the books on networking, free to read:

Azure subnet sizing: the five reserved addresses and the smallest subnet
How many usable addresses each prefix gives in Azure, why five are always reserved, and how to size subnets for gateways, Bastion and VMs. AZ-700
How Azure NSG rules are evaluated (subnet vs NIC, priority, default rules)
The order Azure applies subnet and NIC network security groups for inbound and outbound traffic, how priority works, and a worked example. AZ-104
How NSG rules are evaluated: priorities, default rules and stateful flows
Rule order, the default rules, and what happens to a flow between subnets and to return traffic. AZ-700
How Azure selects routes: longest prefix match, UDRs and forced tunnelling
Longest prefix match, system routes versus user-defined routes, and how a 0.0.0.0/0 route forces internet traffic on-premises. AZ-700
Gateway transit in hub-and-spoke networks: Allow gateway transit and Use remote gateways
Where each peering setting goes, what spokes can reach, and why peering isn't transitive. AZ-700
ExpressRoute Global Reach, FastPath and ExpressRoute Direct compared
What each ExpressRoute feature does, which SKUs and gateways it needs, and where it fits on a circuit. AZ-700
Azure private endpoints and Private Link: how they work
What a private endpoint puts in your subnet, how private DNS zones make names resolve to it, and when to choose it over a service endpoint. AZ-104
Private endpoints vs service endpoints, and the DNS that makes them work
How private endpoints and service endpoints differ, and how to design private DNS for hybrid networks. AZ-305
Private endpoint DNS: how privatelink zones resolve a service to its private IP
The CNAME chain from a public service name to a private endpoint, zone groups and zone links. AZ-700
Hybrid DNS with Azure DNS Private Resolver: inbound endpoints, outbound endpoints and rulesets
Resolving Azure private zones from on-premises and on-premises names from Azure, with subnet sizing and ruleset rules. AZ-700
Choosing an Azure load-balancing service: Load Balancer, Application Gateway, Front Door or Traffic Manager
A decision guide by traffic type (HTTP or not) and scope (regional or global). AZ-700
Azure load balancing: Front Door vs Application Gateway vs Load Balancer vs Traffic Manager
Choosing between Azure's global and regional, layer 4 and layer 7 load-balancing services. AZ-305
Azure Virtual Network Manager security admin rules and NSGs
How security admin rules are evaluated before NSGs, and when to use Allow, Deny or Always allow. SC-500