Define the availability boundary of Cloudflare Tunnel replicas
Separate connector resilience from application health when planning multiple cloudflared replicas.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 35 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Preserve return routing when disabling Tailscale subnet SNAT
Map the return path before exposing original tailnet source addresses to a subnet behind a Tailscale router.
Read the guide
Map SureBackup masquerade routes before inviting testers
Distinguish a recovered machine’s isolated production address from the masquerade address used to reach a SureBackup lab.
Read the guide
Distinguish an active Axis MQTT client from a connected session
Check the broker connection state separately from the MQTT client’s activation state when diagnosing missing camera messages.
Read the guide
Include session-affinity traffic in an Application Gateway draining test
Check what happens to established sessions when a backend leaves the pool.
Read the guide
Separate ExpressRoute Microsoft-peering NAT advertisements from internet routes
Review the public-prefix advertisements that can create asymmetric return paths.
Read the guide
Investigate Connection Monitor's indeterminate state before declaring a network outage
Distinguish missing monitoring data from a measured connectivity failure.
Read the guide
Prove that an Azure SQL private-endpoint connection traverses the intended firewall
Pair a successful SQL connection with evidence of the firewall path.
Read the guide
Enable Virtual WAN gateway logging before depending on a log-based alert
Confirm that the gateway produces the records an alert expects to query.
Read the guide
Keep inbound VPN certificate exports separate from outbound private-key material
Map certificate direction before preparing an Azure site-to-site authentication change.
Read the guide