DEV Community

Discussion on: AzureFunBytes - AZ-900 Stream, Network Security Groups, SSH Keys, Linux VMs, and your questions.

Collapse
 
thatham profile image
Venkatesh Thatham

Hi,
I need your advise to configure an environments in Azure. Well, I'm not not from networking background and I'm confused how to deploy our application securely in Azure.

My requirement is, with in a vnet there'll be 3 subnets such as front-end subnet, aks subnet and db subnet along with both firewall and gateway subnets

Front-End subnet has => storage, static website, CDN (Internet exposed)
Aks subnet => aks for micro services (few apis should be Internet exposed and some are internal)
Back-End subnet => azure service bus, event hub (allow in/out only from front end or aks subnets)
Database subnet => CosmosDb, SQL Server and Azure Search (allow in/out only from aks subnet)

How to configure inbound and outbound rules to control traffic between subnets
Is network route table is essential for this requirement?
Am I missing any essential resources?
Is there any best way to accomplish the above requirement?

Thank you in advance