From 2c6ef31e1f3e10f688b027276ae4250cebf4c945 Mon Sep 17 00:00:00 2001 From: Matthias Eckert Date: Wed, 13 Aug 2025 14:11:52 +0200 Subject: [PATCH] [logseq-plugin-git:commit] 2025-08-13T12:11:51.822Z --- journals/2025_08_13.md | 4 +++ ...als ___ Azure architecture and services.md | 26 ------------------- 2 files changed, 4 insertions(+), 26 deletions(-) create mode 100644 journals/2025_08_13.md diff --git a/journals/2025_08_13.md b/journals/2025_08_13.md new file mode 100644 index 00000000..65f7cb69 --- /dev/null +++ b/journals/2025_08_13.md @@ -0,0 +1,4 @@ +- Poststraße 87 Timmendorfer Strand +- Boltenhagen + - schöner Strand +- \ No newline at end of file diff --git a/pages/Learning ___ Azure ___ AZ-900%3A Microsoft Azure Fundamentals ___ Azure architecture and services.md b/pages/Learning ___ Azure ___ AZ-900%3A Microsoft Azure Fundamentals ___ Azure architecture and services.md index c5ff85fe..40e41e5f 100644 --- a/pages/Learning ___ Azure ___ AZ-900%3A Microsoft Azure Fundamentals ___ Azure architecture and services.md +++ b/pages/Learning ___ Azure ___ AZ-900%3A Microsoft Azure Fundamentals ___ Azure architecture and services.md @@ -12,12 +12,9 @@ collapsed:: true - grouped in (for resiliency, reliabilty) - **Regions** - collapsed:: true - geographical area - collapsed:: true - multiple datacenters networked together with low-latency network - **Availabilty Zones** (AZ) - collapsed:: true - one or more physically separate datacenters (independent power, cooling, networking) within an Azure region - Connected with high speed, private fiber-optic cable - Minimum of three AZs available in regions with AZ @@ -27,7 +24,6 @@ - Zone-redundant services: replicated (SQL databases) - Non-regional services: Entra-ID, ... - **Region Pair** (i.e. West US paired with East US, South-East Asia paired with East Asia) - collapsed:: true - within the same geography at least 300 miles away - Cope with: natural disasters, civil unrest, power outages, or physical network outages - Updates one region at a time @@ -116,14 +112,12 @@ az vm extension set --resource-group "learn-f942f893-d72a-4614-9bec-d920bd0d3c96" --vm-name my-vm --name customScript --publisher Microsoft.Azure.Extensions --version 2.1 --settings '{"fileUris":["https://raw.githubusercontent.com/MicrosoftDocs/mslearn-welcome-to-azure/master/configure-nginx.sh"]}' --protected-settings '{"commandToExecute": "./configure-nginx.sh"}' ``` - ## Azure virtual desktop - collapsed:: true - cloud-hosted version of Windows - connect with any devices, secure data in the cloud - ![image.png](../assets/image_1752585241837_0.png) - data and apps are separated from the local hardware - user sessions are isolated in both single and multi-session environments. - ## Azure containers - collapsed:: true - you don't manage the operating system for a container - VMs virtualize Hardware <-> Container virtualize OS - #### Azure Container Instances (PaaS) @@ -136,18 +130,15 @@ collapsed:: true - orchestration service manages the lifecycle of containers - ## Azure functions - collapsed:: true - event-driven, serverless compute option - an event wakes the function, alleviating the need to keep resources provisioned when there are no events - work can be completed quickly, within seconds or less. - **stateless**: behave as if they restart every time - **stateful**: Durable Functions - a context is passed through the function to track prior activity - ## Azure App Service - collapsed:: true - HTTP-based service for hosting web applications, REST APIs, and mobile back ends - automatic scaling and high availability - #### Web apps - collapsed:: true - full support for hosting web apps - #### API apps collapsed:: true @@ -165,41 +156,32 @@ - Send push notifications. - ... - ## Azure virtual networking - collapsed:: true - **Public endpoints**: have a public IP address and can be accessed from anywhere in the world. - **Private endpoints**: exist within a virtual network and have a private IP address from within the address space of that virtual network. - #### Isolation and segmentation - collapsed:: true - define a private IP address space by using either public or private IP address ranges - divide that IP address space into subnets and allocate part of the defined address space to each named subnet. - use the name resolution service built into Azure or use either an internal or an external DNS server - #### Internet communications - collapsed:: true - enable incoming connections from the internet by assigning a public IP - putting the resource behind a public load balancer - #### Communicate between Azure resources - collapsed:: true - Virtual Networks connect: App Service Environment for Power Apps, Azure Kubernetes Service, and Azure virtual machine scale sets - Service endpoints can connect to other Azure resource types, such as Azure SQL databases and storage accounts - #### Communicate with on-premises resources - collapsed:: true - link resources together in your on-premises environment and within your Azure subscription - create a network that spans both your local and cloud environments - collapsed:: true - **Point-to-site virtual private network**: connections are from a computer outside your organization back into your corporate network. In this case, the client computer initiates an encrypted VPN connection to connect to the Azure virtual network. - **Site-to-site virtual private networks**: link your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network. In effect, the devices in Azure can appear as being on the local network. The connection is encrypted and works over the internet. - **Azure ExpressRoute**: provides a dedicated private connectivity to Azure that doesn't travel over the internet. ExpressRoute is useful for environments where you need greater bandwidth and even higher levels of security. - #### Route network traffic - collapsed:: true - Azure routes traffic between subnets on any connected virtual networks, on-premises networks, and the internet. - Route tables allow you to define rules about how traffic should be directed - Border Gateway Protocol (BGP) works with Azure VPN gateways, Azure Route Server, or Azure ExpressRoute to propagate on-premises BGP routes to Azure virtual networks. - #### Filter network traffic - collapsed:: true - **Network security groups** are Azure resources that can contain multiple inbound and outbound security rules. You can define these rules to allow or block traffic, based on factors such as source and destination IP address, port, and protocol. - **Network virtual appliances** are specialized VMs that can be compared to a hardened network appliance. A network virtual appliance carries out a particular network function, such as running a firewall or performing wide area network (WAN) optimization. - #### Connect virtual networks - collapsed:: true - link virtual networks together by using virtual network peering - Network traffic between peered networks is private, and travels on the Microsoft backbone network, never entering the public internet. - ## Azure virtual private networks @@ -289,25 +271,17 @@ | Queue Storage | https://.queue.core.windows.net | | Table Storage | https://.table.core.windows.net | - ## Azure storage redundancy - collapsed:: true - #### Redundancy in the primary region - collapsed:: true - **Locally redundant storage** - collapsed:: true - ![Diagram showing the structure used for locally redundant storage.](https://learn.microsoft.com/en-us/training/wwl-azure/describe-azure-storage-services/media/locally-redundant-storage.png) - **Zone-redundant storage** - collapsed:: true - ![Diagram showing ZRS, with a copy of data stored in each of three availability zones.](https://learn.microsoft.com/en-us/training/wwl-azure/describe-azure-storage-services/media/zone-redundant-storage.png) - #### Redundancy in a secondary region - collapsed:: true - **Geo-redundant storage** - collapsed:: true - ![Diagram showing GRS, with primary region LRS replicating data to LRS in a second region.](https://learn.microsoft.com/en-us/training/wwl-azure/describe-azure-storage-services/media/geo-redundant-storage.png) - **Geo-zone-redundant storage** - collapsed:: true - ![Diagram showing GZRS, with primary region ZRS replicating data to LRS in a second region.](https://learn.microsoft.com/en-us/training/wwl-azure/describe-azure-storage-services/media/geo-zone-redundant-storage.png) - **Read access to data in the secondary region** - collapsed:: true - GRS and GZRS with read access (normally not possible) - ## Azure storage services collapsed:: true