Node Auto-Provisioning (NAP) in Azure Kubernetes Service (AKS) allows you to define AKSNodeClass resources to dynamically provision node pools based on workload demands. Below is a detailed, step-by-step guide to configure AKSNodeClass resources for NAP. Prerequisites Step 1: Enable NAP Feature in Your Azure Subscription NAP is currently in preview. Enable the feature flag for your subscription….
Read More →Category: azure
A Linux-based serverless plan that extends the classic Consumption model with: VNet integration, configurable instance memory sizes (512 MB / 2048 MB / 4096 MB), always-ready instances for reduced cold starts, per-function scaling, up to 1,000 scale-out instances, and Azure Files mounts. Pay only for what you use, scales to zero. Supported Languages Language Versions…
Read More →In Azure Kubernetes Service (AKS), you can apply PSS alongside Deployment Safeguards (which handles operational best practices like resource sizing and topology spread). Deployment Safeguards enforce Kubernetes best practices via Azure Policy. Two levels: AKS Automatic clusters get Enforce by default. AKS Standard clusters opt in manually. Prerequisites Step 1: Install/Update the AKS Preview Extension…
Read More →Important Note: Azure Trusted Launch (also known as Azure Secure VM) requires Gen2 VMs or later because it relies on TPM 2.0 and UEFI firmware, which are not supported on Gen1 VMs (which use TPM 1.2 and BIOS). Therefore, direct upgrade of Gen1 VMs to Trusted Launch is not possible. Instead, you must migrate your…
Read More →SQL Migration to SQL Server on Azure Virtual Machines (Azure Architecture) Migrating SQL databases to SQL Server on Azure Virtual Machines (VMs) allows you to maintain full control over the SQL Server environment while leveraging Azure’s scalability, security, and managed infrastructure. Below is a comprehensive guide covering planning, execution, and optimization within the Azure architecture….
Read More →Instance mix in Azure Virtual Machine Scale Sets allows you to define multiple VM sizes within a single scale set that uses Flexible Orchestration Mode so Azure can choose among them during provisioning. This capability improves provisioning success, helps reduce cost, and supports predictable allocation ordering when your workload can run on different VM sizes…
Read More →Secure Boot is a security standard that ensures only trusted software runs during the boot process. In Azure, Secure Boot uses UEFI (Unified Extensible Firmware Interface) keys to validate the integrity of boot loaders and drivers. For advanced scenarios, you may need to customize Secure Boot keys. This feature allows you to modify Unified Extensible…
Read More →Hibernation for Windows virtual machines in Microsoft Azure allows a VM to pause execution while preserving the in-memory state to disk. When resumed, applications and OS sessions continue exactly where they left off, unlike a full reboot. Key Benefits Supported VM sizes VM sizes with up to 64-GB RAM from the following General Purpose VM…
Read More →Linux VM hibernation in Microsoft Azure enables virtual machines to pause execution while preserving the full in-memory state to disk. When the VM is started again, the Linux OS resumes exactly from where it left off—processes, applications, and sessions intact. This feature is designed for cost optimization and fast resume for stateful Linux workloads. Supported…
Read More →In Microsoft Azure, Automatic Extension Upgrade ensures that VM extensions are automatically updated to the latest minor version without manual intervention. This helps keep virtual machines and scale sets secure, stable, and compliant. It applies to: Prerequisites Before enabling automatic upgrades: Supported extensions To check if your extensions are supported for automatic upgrade, view Automatic…
Read More →Tags are metadata elements that you can apply to Azure resources to help categorize and organize them according to business, operational, or governance needs. A tag is a key–value pair. For example, to track deployment environments, you might add a tag with the key Environment and the value Production, forming Environment = Production. This article…
Read More →There are several scenarios where you may need to move Azure IaaS virtual machines (VMs) from one region to another—for example, to improve reliability and availability, enhance manageability, or meet governance requirements. Azure Site Recovery (ASR) enables you to replicate and move Azure VMs to a secondary region. In this you will learn how to:…
Read More →Availability Zones in Azure provide enhanced resiliency by protecting applications and data from datacenter-level failures. Each Availability Zone consists of one or more datacenters with independent power, cooling, and networking. Azure ensures high availability by offering a minimum of three physically separate zones in every zone‑enabled region. This physical isolation within a region helps safeguard…
Read More →You have control over when to update the scale set instances when using the manual upgrade policy mode. When the scale set model changes, nothing happens automatically to the virtual machines that are already in place. The most recent model is used in new instances that are added to the scale set. Any modifications made…
Read More →Rolling upgrade policy mode The scale set updates in batches when using a rolling upgrade policy mode. With options like batch size, maximum healthy percentage, prioritizing unhealthy instances, and enabling upgrades across availability zones, you also have additional control over the upgrades. Production workloads that need a certain number of instances to be available at…
Read More →The upgrade policy mode you select can affect the overall service uptime of your Virtual Machine Scale Set. The available upgrade policy modes are automatic, manual, and rolling. The upgrade policy mode can be defined during the scale set formation process or adjusted after deployment. If you do not specifically specify the upgrade policy mode,…
Read More →In the past, App Service virtual network integration required one subnet for each App Service plan integration. In the case of many App Service plans, subnet management may be an unnecessary administrative burden. An address space of at least /26 (64 addresses) is required for a subnet used for multi plan subnet join (MPSJ). While all…
Read More →You can record the graphical sessions for connections made to virtual machines (RDP and SSH) via the bastion host if you have activated the Azure Bastion Session recording capability. Recorded sessions are saved in a blob container inside your storage account (via SAS URL) once the session has been ended or disconnected. You can access…
Read More →Control Plane Operations Control Plane in Azure Cosmos DB is a RESTful service that allows you to perform a variety of activities on your Azure Cosmos DB account. It exposes a public resource model (for example, a database or an account) and multiple operations to end users, allowing them to conduct actions on the model….
Read More →Azure Cosmos DB has numerous preview features for which you can request access. Here are the methods for requesting access to these preview features. Ref: Steps to register for a preview feature
Read More →Azure Cosmos DB automatically does a full backup of your data every 4 hours, and the most recent two backups are retained at all times. This is the default setting, and it comes at no additional cost. You can adjust the default backup interval and retention duration during or after creating an Azure Cosmos DB…
Read More →You can configure the default consistency level on your Azure Cosmos DB account at any time. The default consistency level configured on your account applies to all Azure Cosmos DB databases and containers under that account. Azure Cosmos DB offers five well-defined levels. From strongest to weakest, the levels are: The default consistency level is the consistency…
Read More →Configure multi-region writes in your applications that use Azure Cosmos DB In multiple region write scenarios, you can improve performance by writing just to the area closest to your application instance. Azure Cosmos DB handles the replication for you in the background. After you activate your account for multiple write regions, you must make two…
Read More →Start by creating a new Azure Cosmos DB for NoSQL account 4. Within the Basics pane, configure the following options, and then select Review + create: 5. Wait for the deployment to complete. After the deployment is completed, Go to resource to navigate to the new Azure Cosmos DB for NoSQL Azure Cosmos DB Dynamic scaling (per region and…
Read More →Azure Backup allows you to use your own encryption keys to secure backup data. This feature is available for Recovery Services Vaults and is enhanced for Backup Vaults. Customer Managed Keys (CMK) can be used to create a new backup vault or to adjust the encryption parameters of an existing vault. The encryption key that…
Read More →