Colophon: how this site is built
What klatech runs on: Astro 7, Zod-validated content collections, and a team of AI agents kept apart by a frozen contract and a path ownership map.
Blog
Personal posts — engineering notes, opinions, and writing carried over from an older blog.
Default outbound access will not be default anymore
Microsoft is disabling default outbound internet access for new virtual networks - what changes and how to opt in to explicit egress.
Azure Virtual Network Routing Appliance Performance
Latency and throughput tests comparing direct peering against one and two Azure Virtual Network Routing Appliance hops.
Scaling with Azure Virtual Network Routing Appliance
Rethinking the hub-and-spoke design with Azure Virtual Network Routing Appliance to avoid regional hub scaling limits.
Bicep or Terraform for Azure network management
Testing whether Bicep or Terraform is better for deploying and managing Azure Virtual Network Manager configurations.
Concept: Shared platform services for Online archetype applications
Two concepts for giving Online archetype applications shared WAF services without breaking their network isolation.
Structure your Azure Firewall Policy rules
A practical structure for rule collection groups and rule collections in an Azure Firewall Policy.
Add certificates to Application Gateway with PowerShell
Uploading TLS certificates from an RBAC-secured Key Vault to an Application Gateway listener with PowerShell.
Feed your Data Lake with Data Factory
Using Azure Data Factory to pull Microsoft Graph data into a Data Lake, with Key Vault holding the App registration secrets.
Windows Server 2012 End of Support: get Extended Security Updates
Windows Server 2012 and 2012 R2 reached end of support - how to get three more years of updates via Extended Security Updates.
Azure Update Manager goes GA, Dynamic Scopes in preview
Azure Update Manager reaches general availability, its new pricing, and the preview of Dynamic Scopes for Maintenance Configurations.
Don't cheap out on Subscriptions
Why splitting workloads across more Azure subscriptions, governed by management groups, beats cramming everything into two.
Configuring Update Management Center (Preview) with policies
A look at Azure's Update Management Center (Preview) and how to manage VM patching for it using Azure Policies.