Azure Networking Course

Lesson 1 • Azure Global Infrastructure Overview

Covers Azure regions, availability zones, and edge locations as networking anchors. Establishes the physical foundation for all subsequent network design decisions.

Lesson 2 • Azure Portal and CLI for Networking

Demonstrates how to navigate the Azure portal and use the Azure CLI for network resource management. Prepares students for hands-on labs in every subsequent chapter.

Lesson 3 • Azure Networking Service Categories

Maps the Azure networking portfolio into connectivity, security, delivery, and monitoring groups. Provides a mental model for navigating service selection throughout the course.

Lesson 1 • VNet Monitoring and Diagnostics

Introduces diagnostic logs, metrics, and Network Watcher for VNet visibility. Builds the habit of observability from the earliest network design stage.

Lesson 2 • Network Interface Cards and IP Configs

Details NIC attachment to VMs, private IP assignment, and multiple IP configurations. Links VM-level networking to the broader VNet design.

Lesson 3 • Public IP Addresses in Azure

Covers public IP SKUs, allocation methods, and association with Azure resources. Prepares students to expose services securely to the internet.

Lesson 4 • Subnet Design and Segmentation

Covers subnet creation, sizing, and delegation for specific Azure services. Teaches how subnet boundaries enforce traffic segmentation within a VNet.

Lesson 1 • Azure Firewall Deployment and Policy

Covers Azure Firewall SKUs, hub deployment, and Firewall Policy rule collections. Provides centralized, stateful filtering beyond what NSGs offer.

Lesson 2 • Threat Intelligence and IDPS

Configures threat intelligence filtering and intrusion detection in Azure Firewall Premium. Elevates security posture with signature-based and behavioral detection.

Lesson 3 • NSG Flow Logs and Traffic Analytics

Enables NSG flow logs and integrates with Traffic Analytics for network visibility. Connects security policy enforcement to operational monitoring workflows.

Lesson 4 • Network Security Group Fundamentals

Explains NSG rule structure, priority, and default rules for inbound and outbound traffic. Forms the baseline access control layer for all Azure workloads.

Lesson 1 • Application Gateway Configuration

Teaches Layer 7 routing, SSL termination, and WAF integration on Application Gateway. Enables URL-based and host-based routing for web application workloads.

Lesson 2 • Choosing the Right Load Balancer

Provides a decision framework comparing all Azure load balancing services by protocol, scope, and feature set. Prepares students to justify service selection in design reviews.

Lesson 3 • Azure Front Door and Global Routing

Configures Azure Front Door for global HTTP load balancing, caching, and WAF. Extends traffic distribution to a global scale with anycast routing.

Lesson 4 • Azure Load Balancer Deep Dive

Covers Standard Load Balancer components, SKUs, and health probe configuration. Establishes Layer 4 load balancing as the foundation for internal and external traffic.

Lesson 1 • Azure VPN Gateway

Configures site-to-site and point-to-site VPN connections using Azure VPN Gateway. Bridges on-premises networks to Azure VNets over encrypted tunnels.

Lesson 2 • Hub-and-Spoke Network Topology

Designs hub-and-spoke architectures with shared services in the hub VNet. Demonstrates how centralized security and routing reduce operational complexity.

Lesson 3 • VNet Peering Fundamentals

Explains local and global VNet peering, traffic flow, and peering limitations. Provides the primary mechanism for low-latency VNet-to-VNet connectivity.

Lesson 4 • Azure Virtual WAN

Introduces Virtual WAN hubs, branch connectivity, and any-to-any routing at scale. Simplifies large-scale multi-region and multi-branch network management.

Lesson 1 • Azure DNS Private Resolver

Deploys the Azure DNS Private Resolver for scalable inbound and outbound DNS forwarding. Replaces custom DNS VMs with a managed, highly available service.

Lesson 2 • Azure DNS Public Zones

Creates and manages public DNS zones, record sets, and delegation in Azure DNS. Enables authoritative DNS hosting for internet-facing domains.

Lesson 3 • Azure Private DNS Zones

Configures private DNS zones linked to VNets for internal name resolution. Eliminates custom DNS server dependency for Azure-native workloads.

Lesson 4 • Custom DNS Servers in Azure

Integrates custom DNS servers at the VNet level for hybrid resolution scenarios. Supports forwarding between on-premises DNS and Azure Private DNS.

Lesson 1 • Governance and Policy for Private Access

Applies Azure Policy to enforce Private Endpoint usage and deny public network access. Integrates private access controls into an organizational governance framework.

Lesson 2 • DNS Integration for Private Endpoints

Configures private DNS zones for each PaaS service to resolve private endpoint IPs. Ensures clients resolve service FQDNs to private IPs without manual host file edits.

Lesson 3 • Service Endpoints Overview

Explains Service Endpoints, supported services, and subnet-level enablement. Provides the simpler alternative to Private Endpoints for initial service access control.

Lesson 4 • Private Endpoint Architecture

Covers Private Endpoint NIC placement, private IP assignment, and resource mapping. Delivers private connectivity to PaaS services within the VNet address space.

Lesson 1 • Enterprise Network Architecture Patterns

Evaluates landing zone network designs, segmentation models, and multi-region failover strategies. Synthesizes all course concepts into scalable enterprise reference architectures.

Lesson 2 • Azure Network Watcher Advanced Features

Uses connection monitor, packet capture, and next-hop analysis for deep diagnostics. Provides systematic troubleshooting workflows for complex network issues.

Lesson 3 • Network Performance Optimization

Tunes MTU, TCP settings, accelerated networking, and proximity placement for throughput. Addresses latency and bandwidth bottlenecks in production Azure workloads.

Lesson 4 • User-Defined Routes and Route Tables

Creates custom route tables to override system routes and steer traffic through NVAs. Enables precise traffic engineering within and between VNets.