The purpose of this repo is to deliver layered, reusable and github friendly network architecture diagrams for Cloud Solutions Architects to run effective Azure design and skilling sessions. The content is based on real customer and partner design sessions with collaboration from cross-functional architects. The repository will include tips and tools for effective story telling that explain the why behind the design options based on requirements and the art of the possible. The design areas include - Azure Networking, Hybrid connectivity architectures, routing, firewalling, load balancing, multi-region, secure design, cross functional networking areas and AKS networking. The networking complexity is broken down into layers with one diagram per design area using draw.io now diagrams.net. This repo will include configuration snippets to reduce the lab prep time and the need to leave the labs running for demos.

Cloud Solution Architects, Network Architects, Cloud Infrastructure Architects, Solution Engineers

• Build Reusable and github friendly network architecture diagram templates
• Layered diagrams to run effective Azure Design and skilling sessions
• Real world use cases dervied from working with Microsoft customers
• Level 100 to level 400 scenarios in one diagram
• Understand the why behind the design decision
• Minimize lab time
• Growth mindset

1. APIM Networking
2. Azure Network Security (AzFW, DDoS)
3. ExpressRoute Designs
4. AVD (Azure Virtual Desktop)
5. SAP on Azure
6. SQL MI Networking
7. Azure IoT Networking
8. AVNM (Azure Virtual Network Manager)

Download draw.io diagram. More information on how to open .drawio files here.

In this session we walk through the Hub-spoke architecure design. This design includes the following layers.

• Hybrid Connectivity Architecture with hub-spoke design
• Site-to-site, Point-to-Site and ExR connected Branches
• Default traffic Flows
• Variation of the default design based on requirements
• Use case for AzFw
• Use case for ARS (Azure Route server)
• Use case for NVA (Pros and Cons)
• VPN Gateway Active Active design challange
• Multi-region design
• Configuration snippets
• Concepts
• Limitations

Download draw.io diagram. More information on how to open .drawio files here.

In this session we walk through the vWAN architectures. This design includes the following layers:

• Hybrid Connectivity Architecture
• Single region default flows with Azure vWAN
• Multi region default flows with Azure vWAN
• Secured vWAN
• BGP Endpoint feature use case
• Use case for routing intent
• Use case for NVA in indirect spokes
• Use case for Custom Routing
• Multiregion with ExR Boe-tie design

Download draw.io diagram. More information on how to open .drawio files here.

In this session we walk through the load balancing architectures. This design includes the following layers

• Azure load balancer (layer 4)
• Azure application Gateway (layer 7)
• Cross Region Load Balancer
• Azure Traffic Manager (Global)
• Azure Front door (AFD)
• Azure Gateway Load Balancer
• Multi-region design
• Use case for Private endpoint with AFD

Download draw.io diagram. More information on how to open .drawio files here.

In this session we walk through the DNS options in Azure.his design includes the following layers

• DNS Options in Azure
• Default DNS configuration
• Custom DNS
• Hybrid DNS
• Private DNS Zones
• Azure Private DNS Resolver

Download draw.io diagram. More information on how to open .drawio files here.

This design includes the following layers:

• NVA LB Sandwich design
• Challenge: Preserving flow symettry
• North South flows
• East West Flows
• Packet Captures
• Use case Floating IP
• Use case for HA Ports
• Configuration Snippets

Download draw.io diagram. More information on how to open .drawio files here.

This design includes the following layers:

• Service Endpoint
• Private Endpoint
• Private Link Service
• VNET Integration vs Private Endpoint
• Use case with Azure Front Door (AFD) with Private Endpoint
• Use case with AKS

Download draw.io diagram. More information on how to open .drawio files here. This design includes the following layers (Note: AI Studio TAB)

• AI Studio Prompt flow with Managed VNET and Private endpoints
• Short Demo with AI Studio Playground
• Azure AI Studio Architecture Components (PaaS and IaaS)
• Key Concepts (Private Endpoints, Webapp, Embedding and Vector Database, Managed EP, AI Models and Prompt flow)
• Traffic flows with managed VNET with Private Endpoints
• FAQ and Feedback Links

Download draw.io diagram. More information on how to open .drawio files here.

This design includes the following layers (Note: ML Studio TAB)

• Public Networking
• BYO VNET
• Managed VNET (Private with Internet Outbound)
• Managed VNET (Private with Approved Outbound)
• All traffic flows (inbound/outbound)

Upcoming topics in this series:

• Powerapp and power platform integration
• BYO Data

Download draw.io diagram. More information on how to open .drawio files here.

• On-Prem Connectivity Using Global Reach
• VPN ER Transit using ARS
• Network Virtual Appliance (NVA) in Azure VNET (with ARS)
• Transit VNET design with NVA in Azure NVET (with ARS)
• Deploy third party Virtual Apppliance using NSX-T segments within AVS
• Secured vWAN HUB Design with Routing Intent

Download draw.io diagram

• 00:00:00 – Welcome and Introductions
• 00:02:31 – HCX MON Lab – The Vision and Big Picture
• 00:11:54 – Deploy Simulated On-Prem (AVS SDDC) from Scratch

AVS Side:

• 00:17:00 – Deploy AVS Side
• 00:20:41 – Deploy ER Gateway
• 00:23:44 – The Jump Host
• 00:24:28 – Create a Connection
• 00:27:48 – AVS: Inbound/Outbound Flows
• 00:29:15 – NSX Concepts and IP Address Planning
• 00:38:58 – Launch vCenter and NSX Manager
• 00:40:57 – vCenter Overview
• 00:50:28 – NSX Manager Overview
• 01:02:54 – Segments, DHCP, DNS
• 01:15:44 – Deploy VM
• 01:20:00 – Run Validations and Troubleshooting
• 01:30:08 – Enable HCX
• 01:31:15 – Configure Simulated On-Prem Side
• 01:52:15 – AVS Interconnect

HCX MON Demo:

• 01:59:34 – Enable VMware HCX (Simulated On-Prem)
• 02:03:25 – Create HCX Site Pairs and Interconnect
• 02:24:26 – L2 Extension – Architecture and Flows
• 02:31:09 – L2 Extension – Troubleshooting
• 02:52:01 – Enable MON
• 02:58:10 – Asymmetric Routing
• 03:01:25 – HCX Policy Routes
• 03:11:26 – Test VM Migration
• 03:20:10 – Unextend Network
• 03:22:47 – DNS and DHCP Troubleshooting and Orchestration
• 03:30:17 – Closing Thoughts and Thank You!

Download draw.io diagram. More information on how to open .drawio files here.

This design includes the following layers

• Azure CNI

• Azure Kubenet

• Azure CNI Overlay

• Dual Stack (IPv6 and IPv4) in AKS

• Nginx ingress

• App GW Ingress

• AzFW Firewall egress

• NAT Gateway egress

• Furture Topics in this series...

  BYO CNI (Cilium/Isovalent)

  AGC (Application Gateway for Containers)

  AKS Private Cluster

  Multi-region Designs with Azure Front Door

  App-Dev Integration - Azure Data platform integration (Example: SQL MI integration, SQL DB, Cosmos DB, OSS DB (mysql, postgreSQL), blob storage) - Multi-region with Relational DB(SQLMI, SQL DB, OSS DB) (Single Master) (Shopping cart) - Multi-region with Non-relational or NoSQL (Cosmos DB, MongoDB) (Multi Master) (catalog db)

Download draw.io diagram. More information on how to open .drawio files here.

• 00:00:00 – Welcome to the Art of The Possible Series
• 00:01:39 – Hybrid Cloud Architecture and draw.io
• 00:03:39 – External Mode: Architecture and Portal Experience
• 00:15:44 – External Mode: With Private Endpoint (Preview)
• 00:21:08 – External Mode: With Front Door and Private Endpoint (Preview)
• 00:27:41 – External Mode: Azure Front Door Custom Domain
• 00:37:50 – Internal Mode: Architecture
• 00:58:02 – Internal Mode: With Application Gateway
• 01:12:12 – Internal Mode: With Application Gateway and Front Door
• 01:23:45 – Outbound from Container App (NAT GW and AzFW)
• 01:29:03 – Multi-region design
• 01:31:29 – Troubleshooting Tips…
• 01:34:15 – Closing Thoughts and Thank You…

Download draw.io diagram. More information on how to open .drawio files here.

Vendor dedicated videos available:

Full Playlist here: https://www.youtube.com/playlist?list=PLb4hYfatvJJhNyUpS9LX4RtllDYXhtZ75

• Check Point Software CloudGuardwith John Guo
• Palo Alto Networks Cloud NGFW Architecture and demo with Anton Budilovskiy and Salman Syed
• Fortinet NGFW and SDWAN with Martin Twombly
• Cisco SDWAN with Juan Ignacio Sterbenc Simarbir Singh
• Cisco Meraki SDWAN with Juan
• VMware SDWAN by Broadcom with Vivek Achar

Download 📐 draw.io diagram.
More information on how to open .drawio files can be found here.

Watch on YouTube

• 00:00:00 – Welcome and introductions
• 00:01:59 – ADF Concepts - Network Perspective
• 00:07:41 – The Big Picture
• 00:10:11 – Scenario: AutoResolve Integration Runtime (Public Networking)
• 00:31:12 – Private Endpoint and DNS Deep dive
• 01:02:43 – Scenario: Self Hosted IR (On-premises) (Private Networking)
• 01:14:09 – P2S VPN and Private Endpoints
• 01:35:05 – Validations and troubleshooting
• 01:42:28 – Scenario: Self Hosted IR (Azure VM)
• 01:51:35 – Scenario: Manage VNET IR
• 02:12:27 – Fabric Data Factory Networking
• 02:33:22 – Run Pipeline
• 02:43:59 – Closing thoughts and thank you!

• Azure Databricks (Coming up next!)
• Azure Synapse
• Azure Datalake or blob storage
• SQL MI (source and destination)
• Third Party Cloud (GCP)
• Hybrid SQL Server On-premise
• Cosmos DB, SQL DB (source and destination)
• OSS Databases (postgreSQL, mysql, mariadb)

• APIM Big Picture view
• Default mode
• External network mode
• Internal network mode
• Internal network mode with Azure Application Gateway
• Internal network mode with AKS Backend API
• APIM with Azure firewall/NVA
• APIM Identity - AAD and B2C Integration
• APIM Multi-region Architecture
• Self hosted gateway
• LetsEncrypt Certificates and APIM Custom Domain
• Azure Private DNS Zones integration
• Network Troubleshooting

Draw.io is feature rich. I've listed my top 10 favorite features that are useful for drawing network architecture diagrams

1. Add Shapes: View -> Shapes -> Add Shapes -> Azure.
2. Add Layers: View -> Layers. Create layers and show hide layers.
3. Add Scratchpad: View -> Scratchpad
4. View Outline: View -> Outline
5. Flow animation: Select Flow -> Flow animation
6. Sketch Style (hand drawn style)
7. Whiteboard: Extras-> Theme-> Sketch
8. Curved lines for flows
9. vscode integration
10. Group shapes using CTRL-G

There are three options to open the draw.io diagrams.

1. Use the desktop app Download the desktop app from the microsoft store.

   Dowload drawio file from github and open in the desktop app. File -> Raw -> Save link as.

2. Use the web browser to open the file online using the link here

3. Integrate with vscode using the

Special thank you to my colleagues

• David O'Keefe
• Shaun Croucher
• Xavier Elizondo
• Heather Tze
• Mays Algebary
• Daniel Mauser
• Shruthi Nair
• Jose Moreno
• Sowmyan Soman Chullikkattil
• Mike Richter
• Mike Shelton
• Tommy Falgout
• Amanda Wong
• Israel Ekpo
• Jason Medina