Verify container-group egress identity separately from its inbound address
An externally reachable Azure Container Instances address is not the group's outbound source address.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 15 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,200 articlesNetworks & Infrastructure
Separate incremental DDoS reports from the completed mitigation summary
Azure DDoS Protection produces periodic snapshots during mitigation and a distinct report for the whole period afterward.
Read the guide
Choose ExpressRoute Direct encapsulation with the correct VLAN uniqueness boundary
QinQ and Dot1Q use different C-Tag uniqueness scopes, and the Direct resource's encapsulation cannot be changed afterward.
Read the guide
Validate the expanded Machine Configuration package, not just its ZIP size
Custom package acceptance depends on its uncompressed size and bundled configuration dependencies.
Read the guide
Review StandardV2 NAT Gateway cutover exceptions before relying on session continuity
Microsoft lists existing-flow and IPv6 load-balancer issues specific to adding StandardV2, despite broader NAT Gateway continuity guidance.
Read the guide
Do not treat Blob change feed as a complete access audit
Change feed records successful mutations in per-blob order; read attempts and failed requests need a different evidence source.
Read the guide
Separate File Sync tiering exclusions from immediate local recall
An exclusion does not instantly recall already-tiered content or prevent every remote file from arriving as a placeholder.
Read the guide
Measure the update fan-out before denormalizing Azure Table relationships
What maintenance cost can a one-request Azure Table relationship model hide?
Read the guide
Track Azure NIC MAC addresses as lifecycle-bound observations
Azure assigns the MAC address at first VM start, and documented NIC or primary-address changes can end its persistence.
Read the guide
Provide cluster-local certificate secrets when moving to Application Gateway for Containers
An externally mounted Key Vault certificate is not the frontend certificate reference required by Application Gateway for Containers.
Read the guide