When in doubt, encapsulate it.

How To: Securing AKS (Kubenet) Egress with Aviatrix Firenet AKS , or Azure Kubernetes Service, is Microsoft's variation on managed Kubernetes, similar to EKS (AWS) or GKE (Google). AKS has two CNIs for deployment - Kubenet  and Azure CNI . This article will focus on integrating AKS Kubenet with Aviatrix. Aviatrix  is the leading vendor of Multicloud connectivity solutions. "The Aviatrix cloud network platform delivers a single, common platform for multi-cloud networking, regardless of public cloud providers used. Aviatrix delivers the simplicity and automation enterprises expect in the cloud with the operational visibility and control they require." Firenet on Azure  enables Firewall insertion as a bump in the wire. Prerequisites Deploying Firenet on Azure is beyond the scope of this article. I'll assume that you have a working Transit Firenet deployment. Diagram - To be added Quick AKS CNI overview Kubenet is Azure's basic networking CNI. The only routable IPs ar...

 Infoblox Anycast BGP with Aviatrix Matt Kazmar, Customer Solutions Architect Infoblox is well known and used appliance for DNS, IPAM, and other functions. Like most appliances, there are versions for multiple Public Cloud providers. Aviatrix is the leading vendor of Multicloud connectivity solutions. "The Aviatrix cloud network platform delivers a single, common platform for multi-cloud networking, regardless of public cloud providers used. Aviatrix delivers the simplicity and automation enterprises expect in the cloud with the operational visibility and control they require." Why do this? DNS is a crucial requirement for any networking. Availability is a must, regardless of region. A DNS outage can cripple applications and business. Infoblox provides a DNS solution (among other things) that provides robust replication and availability of DNS resources. In the on-prem world, their appliances peer with core switches and advertise the same IPs, regardless of location. This i...

 Solved with Aviatrix Consolidate While Preserving Agility Matt Kazmar, Customer Solutions Architect     Imagine, if you will, a typical large corporation. There are many business units and no one talks to each other. The corporate IT department is overwhelmed and was slower to adopt Cloud than many teams would have liked. Out comes the corporate credit card and a new Cloud Environment is born. Cloud networks everywhere.      This environment sprawl is often called Shadow IT. While these environments are agile and responsive to user demands, they aren't subject to Governance, Compliance or Security Controls.      IT is finally onboard with Cloud and has their own infrastructure built out. The CIO requests a company-wide report on Cloud expenditures and is shocked at the volume that is returned. A directive is issued - all non-Corporate Cloud environments must be merged into the corporate managed infrastructure.     With the directiv...