Application Security Groups
ASG Use Case
- Web-01 and Web-02 should be accepted incoming connections for business-01
- business-01 should be accepted incoming connection for db-01
- Web-01 and Web-02 should not be accepted to communicate to db-01
Solution
-
We create Application Security Groups.
-
For all the machines which have web application running we create a common Application Security Group called as web
-
For all the machines which have business application running we create a common Application Security Group called as business
-
For all the machines which have db application running we create a common Application Security Group called as db
-
Now we create a rule in NSG to allow communications with source and destinations as Application Security Groups
Service Endpoints
- Purpose of endpoint is to give the private access of Azure Services to Azure VNET.
- Refer for more info
Express Route
- Dedicated connectivity from On premises to Azure can be achieved using Express Routes.
Use Case with ExpressRoute and Service Endpoint
