Azure Networking

Hub-spoke Azure network topology centralizes security and routing by connecting spoke VNets to a central hub, enabling shared gateway services and traffic isolation. This Skill provides deployment instructions for VNet peering, routing configuration, and NSG policies to secure the architecture.

Planning VNet subnets and NSG policies requires segmenting IP address spaces and applying Application Security Group rules to control traffic flow. This Skill guides you through subnet design, NSG implementation, and DNS integration to ensure scalable and secure workload connectivity.

ExpressRoute provides private, high-speed connectivity for hybrid scenarios, while VPN offers encrypted public internet tunnels for smaller scale connections. This Skill documents gateway configuration and hybrid connectivity best practices to help you choose and deploy the appropriate edge service.

Application Gateway and Front Door can be combined to manage global and private traffic, with Front Door handling global routing and Application Gateway providing regional load balancing. This Skill details load balancer and edge service configurations for resilient, production-ready deployment.

This Azure networking guidance includes operational playbooks covering resilience, monitoring, and cost optimization to maintain production environments. It provides best practices for ongoing management of VNets, gateways, and security groups after initial deployment.