Viknaraj


Monday, 2 June 2025

Migrating the VPN Gateway's basic SKU public IP address with minimal downtime.

Most of the Azure Hosted Companies are having a challenge with the basic SKU public IP address VPN Gateway Migration. This article will give you an update on how to migrate the VPN Gateway's Basic SKU public IP address to Standard SKU without changing the IP address. 

 

The Current scenario is that you will face several issues if you want to migrate the VPN Gateway's basic SKU public IP address.  

  1. 1 to 2 hours of downtime.  
  2. Download all connection configurations. 
  3. Remove all the Connections belonging to the VPN Gateway.  
  4. Delete the VPN Gateway. 
  5. Recreate the VPN Gateway. 
  6. Share the New public IP address with the customer to change their Firewall.  
  7. Recreate the Connections.   

 

Microsoft has announced a preview feature for the migration without changing the IP and other configurations.  

 During the public IP address SKU migration process, your Basic SKU public IP address resource is migrated to a Standard SKU public IP address resource. The IP address assigned to your gateway doesn't change.  

 Note: If your VPN Gateway SKU is VpnGw 1-5, it has been migrated to a VPN Gateway AZ SKU (VpnGw 1-5 AZ).  

 It will take a maximum of 15 to 20 minutes of downtime. 

 

Step 1: In the Azure Portal, navigate to the VPN Gateway, on the Configuration page, there are two options: Configure and Migrate. Select Migrate. 



Step 2: All the prerequisites are correct; we can see the Prepare button. Click the Prepare button for the new Standard SKU public IP address resources. 



 Step 3: Once the Prepare step completes, the option to Migrate your resources is available. 



Step 4: If validation is successful and traffic flows as expected, click Commit and Commit changes to finalize the migration.


Note: If you don't commit to the changes in this step, your Basic SKU public IP address resource will remain pending and won't be deleted. 

Tuesday, 8 April 2025

Microsoft AI Skills Fest

 



The Microsoft AI Skills Fest is an initiative by Microsoft aimed at helping individuals and professionals develop skills in Artificial Intelligence (AI) and related technologies. It typically includes a series of free workshops, training sessions, webinars, and hands-on labs designed to empower participants with AI knowledge and practical experience using Microsoft's AI tools like Azure AI, Copilot, and other AI services.


How do I join a Challenge?

Select the Challenge you want to participate in and register by selecting "Join the Challenge" once it starts. You will use your Microsoft Learn profile to register.

If you don't have a Microsoft Learn profile, that's okay. You can create one when you register.


Registration: https://aiskillsfest.event.microsoft.com/ 

How to Enter


Select one of the qualifying certification exams below.

Topic

Exam(s)

AI

AI-900: Microsoft Certified: Azure AI Fundamentals
AI-102: Microsoft Certified: Azure AI Engineer Associate

Azure

AZ-900: Microsoft Certified: Azure Fundamentals
AZ-204: Microsoft Certified: Azure Developer Associate

Data Platform

DP-900: Microsoft Certified: Azure Data Fundamentals
DP-700: Microsoft Certified: Fabric Data Engineer Associate
DP-600: Microsoft Certified: Fabric Analytics Engineer Associate
DP-420: Microsoft Certified: Azure Cosmos DB Developer Specialty
DP-300: Microsoft Certified: Azure Database Administrator Associate
DP-203: Microsoft Certified: Azure Data Engineer Associate
DP-100: Microsoft Certified: Azure Data Scientist Associate

Microsoft 365

MS-102: Microsoft 365 Administrator

Power Platform

PL-300: Microsoft Certified: Power BI Data Analyst Associate

Security

SC-401: Administering Information Security in Microsoft 365
SC-200: Microsoft Certified: Security Operations Analyst Associate


To collect your free Microsoft Certification exam vouchers, Click here.



Friday, 4 April 2025

DevOps



What is DevOps?

DevOps is a combination of two words:
  • Dev = Development (writing code)
  • Ops = Operations (running and managing that code on servers)

DevOps is a culture which improves the organisation's ability to deliver applications.
It's a way of working where software developers and IT operations teams collaborate closely to build, test, and release software faster and more reliably.


What is the purpose of using DevOps?
Before DevOps, delivering software was slow, manual, and error-prone.

Problems Before DevOps:
  • Developers and operations teams worked in separate silos.
  • Manual processes took a lot of time.
  • Bugs and miscommunications happened often.
  • Releasing updates was risky and was done only a few times a year.

How Developers Deployed Code Before DevOps
  1. The developer writes code on their local computer.
  2. The developer sends code to the QA (Quality Assurance) team.
  3. QA manually tests the code.
  4. If all is fine, the QA passes it to a release manager.
  5. The release manager schedules a deployment time (usually late nights or weekends).
  6. The system admin manually copies the code to the production server.
  7. If something breaks, everyone scrambles to fix it.

How DevOps Can Help
  • Developers, testers, and ops work together.
  • Code is automatically tested and deployed.
  • Mistakes are caught early.
  • Software can be released in minutes or hours instead of weeks.
 
DevOps Flow
  1. The developer pushes code to GitHub.
  2. CI tools run automated tests.
  3. CD tools deploy the code.
  4. Monitoring tools check for issues.

Software Development Life Cycle (SDLC)
SDLC is a step-by-step process to build software. It helps ensure the software is high quality, cost-effective, and delivered on time.


DevOps improves SDLC
  • Automating testing and deployment
  • Reducing manual errors
  • Providing faster feedback
  • Ensuring better collaboration
  • Making releases more

Sunday, 30 March 2025

Cost report for Each Azure Virtual Machine

 Cost report for Each Azure Virtual Machine

To manage costs, you can use cost analysis. For a more in-depth review, filtering options allow you to view expenses by specific codes on a daily or monthly basis. This is the simplest way to explore expenses. In this article, we'll learn how to check the cost of each instance on Azure.

 

Step 1: In the Azure Portal, navigate to the subscription for which you want to analyze the cost.



 Step 2: In the Cost Management section, click on Cost Analysis.



 Step 3: In the Cost Analysis, choose the Invoice date using the Invoice.



 Step 4: In the Cost analysis interface, click on the + Add filter. Set the Resource type filter to "Microsoft.Compute/virtualMachines". In the Cost Management section, click on Cost Analysis.


Step 5: Under Group by, select Resource, and select Monthly on the Granularity.


 

Step 6: Click Download, select Excel, and click Download data.


 

Step 7: To check the cost on the Azure portal using a table view, choose Table.


 

Step 8: We can see the table view and check the general cost.


 

Step 9: If we need to expand the individual cost, click the drop-down.



Thursday, 14 November 2024

BGP Capabilities and Limitations in Azure.



Border Gateway Protocol (BGP) is a widely used routing protocol on the Internet, designed for exchanging routing and reachability information between multiple networks. In the context of Azure Virtual Networks, BGP facilitates communication between Azure VPN gateways and your on-premises VPN devices, known as BGP peers or neighbours. It allows them to share "routes," enabling both gateways to understand the availability and accessibility of network prefixes through the respective gateways or routers. Additionally, BGP supports transit routing by sharing learned routes from one BGP peer with all other connected BGP peers, enabling efficient multi-network communication.

 

The BGP supports Automatic Failover VPN in Azure.

If the VPN tunnel needs an Automatic Failover VPN Connection, for example, if a customer has two internet connections over two separate links, we can create an additional connection on the Azure side using the existing virtual network gateway to have a redundant connection to customers on-premise. We can configure the BGP, which supports the Azure virtual network gateway and will route traffic through the available tunnel if one connection goes down.

 

VPN connection redundancy.

  • Using AS path prepending, you can influence routing decisions between multiple connections to your on-premises sites.
  • Azure VPN gateway will honour AS Path prepending to help make routing decisions when BGP is enabled.
  • A shorter AS Path will be preferred in BGP path selection.

For example, if there are two separate VPN connections to your on-premises router, we can enable BGP on our VPN gateway and then advertise the primary connection address prefix with a short AS path and the secondary connection address prefix with a longer AS path.

 

BGP Limitations in Azure

The Azure VPN gateway using BGP automatically advertises the following routes to your on-premises devices, and these cannot be excluded:

  • The Virtual network address prefixes.
  • Address prefixes for each Local Network Gateway connected to the Azure VPN gateway.
  • Routes learned from other BGP peering sessions connected to the Azure VPN gateway, excluding the default route and any routes that overlap with a virtual network prefix.

There is no way to restrict advertising to only one Address prefix from Azure to on-premises. Currently, there is no option to use Route filters to receive/advertise IP ranges for specific IP ranges on the Azure VPN Gateway.

 

The solution for restricting the BGP unwanted traffic.

  • The easiest way to achieve this is via on-prem routers. You will have to apply a BGP route filter to the on-prem routers.
  • Deploy the VPN directly to the spoke VNet and not choose the option to route via the remote gateway. This will only advertise the specific VNet range to the on-premises.
  • Deploy the 3rd party VPN on Azure (NetworkAppliances) that can do route filtering.

Saturday, 2 November 2024

Boost your IT Career

I had a webinar session about Clod Technology how students can earn Microsoft Certifications, and how to use Microsoft Learn; in the session, I discussed Azure Technology, Cloud Comparision and Certifications.








Thursday, 17 October 2024

The Basic SKU Public IPs will be Retired in Azure


Microsoft has announced that the Basic SKU public IPs will be retired On September 30, 2025; if you are currently using the Basic SKU IPs in your environment, it is better to upgrade them as soon as possible. When you upgrade the VMs Public IP, the IP address will never change, so the upgrading won't affect your working environment.

This process requires a maximum of 3-5 minutes of downtime, but based on your environment, the downtime will change.

If your Basic SKU Public IP is attached to the VPN / ExpressRoute Gateway, you must recreate the Gateway at that time. The IP will change, so the remote device should change the new IP.