Personal posts — engineering notes, opinions, and writing carried over from an older blog.http://localhost:4321/http://localhost:4321/blog/colophon/http://localhost:4321/blog/colophon/What klatech runs on: Astro 7, Zod-validated content collections, and a team of AI agents kept apart by a frozen contract and a path ownership map.Wed, 09 Sep 2026 00:00:00 GMTmetaastroai-agentsstatic-sitehttp://localhost:4321/blog/default-outbound-access-not-default/http://localhost:4321/blog/default-outbound-access-not-default/Microsoft is disabling default outbound internet access for new virtual networks - what changes and how to opt in to explicit egress.Sun, 01 Mar 2026 00:00:00 GMTazurehttp://localhost:4321/blog/azure-virtual-network-routing-appliance-performance/http://localhost:4321/blog/azure-virtual-network-routing-appliance-performance/Latency and throughput tests comparing direct peering against one and two Azure Virtual Network Routing Appliance hops.Sun, 22 Feb 2026 00:00:00 GMTazurehttp://localhost:4321/blog/scaling-with-azure-virtual-network-routing-appliance/http://localhost:4321/blog/scaling-with-azure-virtual-network-routing-appliance/Rethinking the hub-and-spoke design with Azure Virtual Network Routing Appliance to avoid regional hub scaling limits.Thu, 19 Feb 2026 00:00:00 GMTazurehttp://localhost:4321/blog/bicep-or-terraform-for-azure-network-management/http://localhost:4321/blog/bicep-or-terraform-for-azure-network-management/Testing whether Bicep or Terraform is better for deploying and managing Azure Virtual Network Manager configurations.Sat, 07 Feb 2026 00:00:00 GMTazurenetworkterraformbicephttp://localhost:4321/blog/online-shared-platform/http://localhost:4321/blog/online-shared-platform/Two concepts for giving Online archetype applications shared WAF services without breaking their network isolation.Fri, 02 May 2025 00:00:00 GMTazurehttp://localhost:4321/blog/firewall-policy-structure/http://localhost:4321/blog/firewall-policy-structure/A practical structure for rule collection groups and rule collections in an Azure Firewall Policy.Fri, 11 Apr 2025 00:00:00 GMTazureazure-firewallhttp://localhost:4321/blog/application-gateway-ssl-cert-upload/http://localhost:4321/blog/application-gateway-ssl-cert-upload/Uploading TLS certificates from an RBAC-secured Key Vault to an Application Gateway listener with PowerShell.Fri, 17 Jan 2025 00:00:00 GMTazurehttp://localhost:4321/blog/feed-your-data-lake-with-data-factory/http://localhost:4321/blog/feed-your-data-lake-with-data-factory/Using Azure Data Factory to pull Microsoft Graph data into a Data Lake, with Key Vault holding the App registration secrets.Thu, 06 Jun 2024 00:00:00 GMTazuredata-factorydata-lakemicrosoft-graphhttp://localhost:4321/blog/server-2012-end-of-support/http://localhost:4321/blog/server-2012-end-of-support/Windows Server 2012 and 2012 R2 reached end of support - how to get three more years of updates via Extended Security Updates.Mon, 09 Oct 2023 00:00:00 GMTazureazure-archttp://localhost:4321/blog/azure-update-manage-dynamic-scopes/http://localhost:4321/blog/azure-update-manage-dynamic-scopes/Azure Update Manager reaches general availability, its new pricing, and the preview of Dynamic Scopes for Maintenance Configurations.Wed, 20 Sep 2023 00:00:00 GMTazurehttp://localhost:4321/blog/dont-cheap-out-on-subscriptions/http://localhost:4321/blog/dont-cheap-out-on-subscriptions/Why splitting workloads across more Azure subscriptions, governed by management groups, beats cramming everything into two.Sat, 09 Sep 2023 00:00:00 GMTazurehttp://localhost:4321/blog/update-management-center/http://localhost:4321/blog/update-management-center/A look at Azure's Update Management Center (Preview) and how to manage VM patching for it using Azure Policies.Thu, 23 Mar 2023 00:00:00 GMTazure