Keep individual NVA BGP peers when advertising a shared load-balancer next hop
A common forwarding address does not replace each appliance's routing session with Azure Route Server.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 109 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,777 articlesGuidance and analysis from DSE
Plan a new node type for nonmanaged Service Fabric zone migration
Can an existing nonmanaged Service Fabric node type be switched to multiple availability zones in place?
Read the guide
Account for disks added in Azure before Site Recovery failback
Which data needs a separate return plan if disks were attached while a failed-over workload was running in Azure?
Read the guide
Plan a new account when moving standard block blobs to premium
Can an existing standard general-purpose v2 storage account be converted directly into premium block blob storage?
Read the guide
Separate Elastic SAN private-endpoint creation authority from connection approval
The role used to create the volume-group endpoint and the operation used to approve its connection are distinct checks.
Read the guide
Check volume-root FSRM quotas when File Sync tiering never settles
A hard quota at the volume root can make quota-restricted space disagree with physical free space and drive repeated tiering.
Read the guide
Freeze rolling-upgrade phase and skip decisions before the upgrade starts
Will changing application-emitted phase or skip metrics alter a rolling upgrade already in progress?
Read the guide
Validate Linux extension readiness across platform opt-in, guest mode, and agent version
Is setting the Azure FIPS 140-3 extension-encryption flag sufficient to establish a working Linux extension path?
Read the guide
Do not use missing Virtual WAN propagation as proof of network isolation
Can two secured-hub virtual networks still communicate when their routes are not propagated to each other?
Read the guide
Do not use a selector label to narrow a WAF EqualsAny exclusion
Application Gateway replaces the selector with an asterisk when an EqualsAny exclusion is created.
Read the guide