Networking (UDRs) in Azure: Inserting the VM-Series into an Azure Environment
Background: Azure provides a virtual network representation of real-world networks. This virtual network (VNET) provides a RFC 1918 private space that can be configured with subnets. For example, a VNET space can be 10.0.0.0/16 and contain subnets 10.0.1.0/24 and 10.0.2.0/24. VM’s in these subnets can talk to each other “automatically.” This is provided by the built-in routing provided by Azure. The “.1” of each subnet is always the default gateway and Azure takes care of delivering the packets to the destination inside the virtual network. This is controlled via system routes shown via dotted lines between VMs in the diagram below.
- Azure Virtual Network basics - https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-overview/
- Azure User-Defined Route (UDR) tables - https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-udr-overview
- VM-Series in Azure – more information https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next-generation-firewall/vm-series-for-azure
- VM-Series in Azure – documentation - https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure