đŸ•šī¸
Ghoulsec Vault
Website Toolbase
  • Welcome !
  • đŸ—ƒī¸Exam Prep Notes
    • 📔CEH V13 (Master Edition)
      • Module 02: Footprinting and Reconnaissance
      • Module 03: Scanning Networks
      • Module 04: Enumeration
      • Module 05: Vulnerability Analysis
      • Module 06: System Hacking
      • Module 07: Malware Threats
      • Module 08: Sniffing
      • Module 09 : Social Engineering
      • Module 10: Denial of Service
      • Module 11: Session Hijacking
      • Module 12: Evading IDS, Firewalls , Honeypots
      • Module 13: Hacking web servers
      • Module 14: Hacking Web Applications
      • Module 15:SQL Injection
      • Module 16: Wireless Attacks
      • Module 17: Hacking Mobile Platforms
      • Module 18: IoT & OT Hacking
      • Module 19 : Cloud Computing
      • Module 20 : Cryptography
    • 📘ISC2 -Certified in Cyber Security
      • Chapter -1 Security Principals
      • Chapter -2 Disaster Recovery,Business Continuity & Incident Response
      • Chapter -3 Access Control Concepts
      • Chapter -4 Network Security
      • Chapter -5 Security Operations
    • 📗AZ - 900
      • Basics of Cloud Computing
        • Economic of Scale
        • CapEx & OpEx
        • Consumption based model
        • Cloud Deployment Models
        • Shared Responsibility Model
        • Data centers, Regions & Availability Zones & Geographyies in Azure
        • Resources & Resource Group
        • Azure Access Tools
        • Azure Service Lifecycle
        • Azure SLAs
        • Azure Cloud Adoption Framework
      • Azure Services
        • Azure Computing Services
        • Azure Networking Services
        • Azure Storage Services
        • Azure Database Service
        • Azure Marketplace
        • Big Data & Azure
        • Azure Serverless Computing
        • IoT & Azure
        • Other Azure Services
        • Azure Resource Locks & Resource Tags
        • Azure Security Services
          • Security Groups
          • Routing Tables
          • Azure Firewall
          • Azure DDOS Protection
          • Azure Identity & Access Management (Azure AD)
          • Azure RBAC
          • Azure Security Center
          • Azure Key Vault
      • Azure policies & Blueprints
      • Azure Cost Management
      • Azure Core Tenents
    • 📗SC - 900
      • Zero Trust Model
      • Shared Responsibility Model
      • Defense in Depth
      • Security Controls
      • CIA Triad
      • Encryption / Hashing / Signing
      • Microsoft Security & Compliance Principals
      • Common Identity Attacks
      • Microsoft Identity as Primary Security Perimeter
      • Modern Authentication with Azure AD
      • Azure AD Identity Types
      • Azure External Identities
      • Hybrid Identities
      • Authentication Methods & Password Protection
      • Conditional Access
      • Azure AD Roles & RBAC
      • Governance in Azure AD
      • Azure Identity Protection
      • Azure NSG, DDOS, Firewall
      • Azure Bastion & Keyvault
      • Azure Encryption
      • Azure CSPM
      • Azure Security Center
      • Azure Defender
        • Microsoft O365 Defender
        • Azure Sentinel
      • Microsoft Cloud App Security
      • Microsoft Intune
      • Microsoft Complaince Manager
      • Information Protection
      • Microsoft insider risk capabilities
    • 📔AWS Cloud Practitioner
      • Cloud Deployment
        • AWS Global Infrastructure
      • AWS Cloud Essentials
        • AWS SNS
          • AWS SQS
      • AWS Compute & Container Services
        • AWS EC2
          • Elasticity & Agility
        • AWS Serverless Computing
        • AWS Container Services
        • AWS Beanstalk
        • AWS Load Balancing
      • AWS Storage & Databases
      • AWS Networking
      • AWS Security
        • AWS Organisation
        • AWS Compliance
        • AWS DDOS
        • Additional Security Services
      • AWS Monitoring & Analytics
        • Other Analytics Services
      • AWS Pricing & Support
      • AWS Migration & Innovation
        • Migration Statergies
        • AWS Snow Family
        • AWS Transfer Family
        • Innovation on AWS
      • AWS Well Architecture Framework
      • Other AWS Services
  • 🧑‍đŸ’ģCyber Security Base
    • Ghoul's Den
    • Cheatsheets
    • SSL Handbook
      • Installing OpenSSL
      • Encrypting Web Servers using SSL
      • Compiling .pfx file using openssl
      • De-compiling .pfx file
      • Zimbra Mail Server SSL renew
      • SSL Certificates
    • â˜ī¸Cloud Security
      • Amazon Web Services (AWS)
        • AWS - IAM & Policy Management
        • AWS Organization
        • AWS - Roles (Assume Role)
        • AWS - EC2 (Elastic Computing)
        • AWS - VPC
        • AWS - Bastion Host
        • AWS Application Load Balancer
        • AWS Auto Scaling Group
        • AWS WAF
        • AWS - VPC Peering
        • AWS Transit Gateway
        • AWS NAT Gateway
        • AWS - Route 53
        • AWS Certificates Manager
        • AWS Network Load Balancer (NLB)
    • đŸ•¸ī¸Network Security
      • Firewalls
        • Sophos - Security Suite
          • Sophos Firewalls
      • VPN
        • VPNs
          • Wireguard Tunneling
          • StrongSwan Gateway VPN Server on Ubuntu
      • IP Address and IP Subnetting
      • Basic to Advance Networking Materials
    • 🧑‍đŸ’ģVAPT
      • Sample Report Templete
      • OWASP
        • OWASP Web Application Security & WebGoat
      • Web Application testing checklist
        • Client Side Penetration Testing
          • Clickjacking
          • Websockets
          • CSRF
          • XSS Filters
        • Server Side Penetration Testing
        • Advanced Web Application Pentesting
          • OAuth
          • JWT Injection
          • Server Side Templete Injection
    • â˜„ī¸GRC
      • ISMS AUDIT PLAN
      • CIS Compliance Windows
    • 🔍Forensic
      • Forensic Tools
      • EMAIL Forensics
      • File header forensics
    • Trend Micro
      • Deep Security
        • Installation & Prerequisite
          • Microsoft SQL server 2022
          • Postgres 16 Core
          • Installation
    • Practical Malware Analysis & API Threats
  • đŸ•šī¸Server are fun !
    • Securing Linux
      • Securing SSH
      • Sudoers
      • UFW (Uncomplicated FW)
      • Unattended Upgrades
      • Password Complexiety
      • Auditing Linux
      • Samba - SMB
      • NFS - Network File System
      • FTP
      • AIDE
    • Servers
      • Linux Sever
        • OpenLDAP Server Setup
          • ldap-account-manager
          • Securing OpenLDAP
          • OpenLDAP client setup
          • Checking LDAP setup
        • Users & Groups
        • Password Policy
        • File & File Permissions
        • Automatic Updates
        • Adding GUI to Ubuntu Server
        • DNS Server
        • NTP Server
      • Windows Sever
        • Deep dive into Windows Server
        • Windows server Installation
        • Disable IPv6
        • Disable Server Manager on startup
        • Promoting OS to AD server
        • AD DNS
        • AD DHCP
        • AD Activation
        • AD Users & Groups
        • AD FileServer
        • Adding Users into AD
        • Bulk Importing users into Domain
        • Windows AD Resources
        • Group Policy Editor
          • Creating First Policy
          • Restricting CMD & Powershell
          • Password Policies
          • Audit Policies
          • Log Retention Policy
          • Windows Defender Firewall
          • Patch Management & Window Updates
        • Setting Up local accounts for windows hosts
    • Hacking Systems
      • Linux Systems
        • Battery Charge Threshold (Linux)
        • Metasploitable OS Complete Solved
      • Tricking Windows
        • Bitlocker & Time based policy bypass
    • Monitoring HeartBeats
    • RAID Technology
    • Managing Partitions
      • Parted
      • Fdisk
      • LVM
        • Re-claiming unused disk space
        • Adding physical volume into VG
        • Removing physical volume from VG
      • SWAP Memory
    • Virtualization
      • Proxmox
        • Proxmox VE Installation
        • Default Storage Expansion
        • Proxmox Network Link Aggegration
        • NAT Interface Configuration
        • Importing disk into proxmox
        • Creating an LVM Thin Pool
        • Proxmox IAM
  • đŸ™â€â™‚ī¸Dan the AI Expert
    • Ollama Ollama ...
      • Ollama
        • Ollama models
        • Open Web UI & Ollama Integration
    • Microsoft Presentation using AI
  • đŸ›Ąī¸Security Operations
    • Wazuh - Open Source XDR. Open Source SIEM.
      • Components
      • Deployment Methods
      • Installation
        • Single Node Installation
          • Wazuh Indexer Installation
          • Wazuh Server Installation
          • Wazuh Dashboard Installation
          • Single node deployment with Script
        • Managing multiple Wazuh clusters with Cross-Cluster Search
          • Cluster Configuration
          • Set up Cross-Cluster Search
        • Upgrading Wazuh Central Components
        • Uninstalling Wazuh
      • Custom Decoder & Rules
        • Pfsense Decoders
        • Pfsense Rules
      • Security Operations Center Tools (Wazuh)
    • IRIS-DFIR / Case Management
    • Graylog & ElasticSearch
    • Zabbix NMS
      • Zabbix Installation
      • Zabbix Database Management
        • Zabbix Database backup
        • Zabbix Database restore
        • MySQL Replication (M-M)
        • MySQL Replication (M-W)
      • Zabbix Geomap Setup
      • Adding Hosts into Zabbix
      • Zabbix Hostgroups
      • Auto Registration Hosts Zabbix
      • Zabbix Globalscrips
      • Zabbix HA Cluster
      • Zabbix Proxy
      • Zabbix Notifications
      • Zabbix Maintainance
      • Zabbix User Management & Authentication
      • Zabbix Housekeeping
      • Scheduled Reporting
      • Service Monitoring using Zabbix
  • Git the master!!
    • Configuring git
    • Git Branches
    • Undoing changes
    • Git - Cheat sheet
    • My first git...
Powered by GitBook
On this page
  • Azure Virtual Network (VNet) :
  • Content Delivery Networks (CDNs) :
  • Azure Load Balancer:
  • Azure Application Gateway :
  • Azure VPN gateway :
  1. Exam Prep Notes
  2. AZ - 900
  3. Azure Services

Azure Networking Services

PreviousAzure Computing ServicesNextAzure Storage Services

Last updated 2 months ago

Azure Networking Services provide secure, scalable, and high-performance networking solutions to connect, protect, and optimize applications and resources across cloud and hybrid environments.

Azure Networking Services

1ī¸âƒŖ Connectivity Services

These services enable secure communication between Azure resources, on-premises networks, and the internet.

  • Azure Virtual Network (VNet) – A private network in Azure for secure communication between resources.

  • Azure ExpressRoute – A dedicated, private connection between on-premises networks and Azure.

  • Azure VPN Gateway – Secure site-to-site or point-to-site VPN connections.

  • Azure Virtual WAN – Simplifies large-scale branch-to-branch and branch-to-Azure connectivity.


2ī¸âƒŖ Load Balancing & Traffic Management

These services distribute traffic for high availability and scalability.

  • Azure Load Balancer – Distributes incoming traffic across multiple VMs for high availability.

  • Azure Application Gateway – A Layer 7 load balancer with built-in Web Application Firewall (WAF).

  • Azure Traffic Manager – DNS-based global traffic distribution for multi-region deployments.

  • Azure Front Door – Global, secure traffic routing with DDoS protection and acceleration.


3ī¸âƒŖ Security & Protection

Azure provides built-in security services to protect networks from cyber threats.

  • Azure Firewall – Managed stateful firewall for filtering traffic across VNets.

  • Azure DDoS Protection – Protects against Distributed Denial-of-Service (DDoS) attacks.

  • Azure Private Link – Secure access to Azure services without exposing them to the internet.

  • Network Security Groups (NSGs) – Control inbound/outbound traffic to VMs and subnets.


4ī¸âƒŖ Content Delivery & Optimization

These services improve network performance, reliability, and acceleration.

  • Azure Content Delivery Network (CDN) – Caches content globally for faster access.

  • Azure Route Server – Simplifies BGP routing between network appliances and Azure VNets.

  • Azure Peering Service – Optimized internet connectivity between enterprises and Microsoft

Azure Virtual Network (VNet) :

Azure Virtual Network (VNet) is a logically isolated network in Azure that enables secure communication between Azure resources, on-premises networks, and the internet. It allows subnetting, custom routing, private IP allocation, and security control using NSGs. VNet Peering connects two VNets within the same or different regions, enabling low-latency, high-speed, private communication over Azure’s backbone without requiring public IPs or VPNs. Peered VNets can share resources, support multi-tier applications, and facilitate hybrid cloud architectures while maintaining security and performance.

Content Delivery Networks (CDNs) :

Azure Content Delivery Network (CDN) is a globally distributed network of servers that caches and delivers web content, such as images, videos, and scripts, to users based on their geographic location for reduced latency and improved performance. It accelerates websites, optimizes bandwidth usage, and enhances security by protecting against DDoS attacks and caching static assets closer to users. Azure offers three CDN options—Azure CDN from Microsoft, Azure CDN from Akamai, and Azure CDN from Verizon—allowing businesses to choose based on their performance, caching, and security needs.

Azure Load Balancer:

Azure Load Balancer is a highly available and scalable Layer 4 (TCP/UDP) load balancing service that distributes incoming traffic across multiple virtual machines (VMs) or resources to ensure high availability and reliability. It supports inbound and outbound traffic balancing, automatic failover, and health probes to monitor resource status. It comes in two types: Public Load Balancer for distributing internet traffic and Internal Load Balancer for private network traffic within Azure. It also supports NAT rules, high availability ports, and zone redundancy for resilient application deployments.

Azure Application Gateway :

Azure Application Gateway is a Layer 7 (HTTP/HTTPS) load balancer that enables intelligent traffic management for web applications. It supports URL-based routing, SSL termination, session affinity, and Web Application Firewall (WAF) for security. Unlike Azure Load Balancer, which operates at Layer 4, Application Gateway routes requests based on HTTP headers, hostnames, and URLs, making it ideal for hosting multiple websites on the same gateway. It also integrates with Autoscaling, zone redundancy, and end-to-end SSL encryption, ensuring high availability, performance, and protection against web attacks.

Azure VPN gateway :

Azure VPN Gateway is a cloud-based network gateway that enables secure site-to-site, point-to-site, and VNet-to-VNet connections between Azure Virtual Networks and on-premises networks over an IPsec/IKE VPN tunnel. It supports both policy-based and route-based VPNs, integrates with Azure ExpressRoute for hybrid networking, and provides Active-Active mode for high availability. VPN Gateway also supports BGP (Border Gateway Protocol) for dynamic routing and can be used for secure remote access by individual users connecting to Azure resources.

đŸ—ƒī¸
📗