fabferri / az-pattern

Azure ARM templates and scripts

Fab's Azure repository

• Azure KeyVault

  • Azure ARM template to create a Key Vault with list of secrets [date: 28-08-23]
  • Azure ARM template to create multiple Key Vaults in different resouce groups

• Azure Load balancer

  • Load Balancer in HA ports - basic config
  • Load Balancer in HA ports with VNet peering
  • load Balancer in HA ports with transit through VNet peering
  • Load Balancer in HA ports with two backend pools
  • Load Balancer in HA ports with two frontend IPs and two backend pools
  • Load Balancer with multiple frontend IPs and multiple backend address pools
  • External Load Balancer

• Azure S2S VPN

  • Single ARM template to create Site-to-Site VPN between two VPN Gateways [date: 11-02-2024]
  • Connection between two VNets through site-to-site VPN with NAT
  • Azure ARM templates to create site-to-site VPN by FQDN

• Azure P2S VPN

  • P2S VPN - authetication with digital certificates [date: 15-04-2024]

• ExpressRoute

  • ExpressRoute configurations

• Azure DNS

  • Configuration with Azure DNS private resolver

• Ubuntu VM with UX

  • Ubuntu VM with GNOME desktop, Visual Studio Code and dotnet SDK [date: 21-11-2023]
  • Ubuntu VM with GNOME desktop, Python and Visual Studio Code [date: 20-11-2023]

• Private endpoint and private link service

  • Private endpoints with Azure SQL and Azure storage account
  • configuration with private service link and ExpressRoute
  • Private Link service in HA configuration through Azure Application Gateway [date: 05-04-23]
  • Azure Private Link service in HA configuration through Azure functions [date: 31-03-23]

• hub-spoke vnet configurations

  • How to create two hub-spoke VNets interconnected by VNet peering (basic config)
  • Simple hub-spoke vnet with Route Server and ExpressRoute Gateway [date: 25-08-23]
  • Hub-spoke vnets with Azure firewalls and Route Servers - config1 [date: 27-06-23]
  • Hub-spoke vnets with Azure firewalls and Route Servers - config2 [date: 02-07-23]
  • Network policies for Private Endpoints with UDR and NSG [date: 28-08-23]
  • Hub-spoke vnets with site-to-site VPN tunnels between the hubs [date: 03-07-23]

• NAT

  • Traffic between two subnets through Linux nva controlled by iptables
  • iptables to control traffic inbound and outbound Azure VMs [date: 30-10-22]

• Azure Virtual Network Manager

  • AVNM with hub-spoke-static membership [date: 05-05-2024]
  • AVNM with hub-spoke-dynamic membership [date: 06-05-2024]

• Managed Service Identity

  • System-assigned managed identity to access to Azure Storage [date: 29-05-2022]
  • User-assigned managed identity to access to Azure Storage [date: 28-05-2024]

• Azure Virtual Datacenter deployment through ARM templates [date: 24-05-23]

• System-assigned managed identity to access to Azure Storage [date: 29-05-2022]

• Azure NetApp Files service [date: 22-09-2022]

• MongoDB in Azure VM [date: 28-12-22]