I’ve just finished working on a new self-guided lab that focuses on the Azure ‘Virtual Data Centre’ (VDC) architecture. The basic idea behind the VDC is that it brings together a number of Azure technologies, such as hub and spoke networking, User-Defined Routes, Network Security Groups and Role Based Access Control, in order to support enterprise workloads and large scale applications in the public cloud.

The lab uses a set of Azure Resource Manager (ARM) templates to deploy the basic topology, which the user will then need to further configure in order to build the connectivity, security and more. Once the basic template build has been completed, you’ll be guided through setting up the following:

  • Configuration of site-to-site VPN
  • Configuration of 3rd party Network Virtual Appliance (in this case a Cisco CSR1000V)
  • Configuration of User Defined Routes (UDRs) to steer traffic in the right direction
  • Configuration of Network Security Groups (NSGs) to lock down the environment
  • Azure Security Center for security monitoring
  • Network monitoring using Azure Network Watcher
  • Alerting and diagnostics using Azure Monitor
  • Configuration of users, groups and Role Based Access Control (RBAC)

Read the rest of this entry »