Skip to main content

Simon PainterCloud Updates Azure AWS Networks Security

All Tags GitHub LinkedIn

All posts

2026

The certificate mismatch that stops you using privatelink FQDNs, and why it's deliberate
Field notes: .AL breaks DNSSEC, Cloudflare invents a way to say so, and Azure Front Door learns JavaScript
Field notes: United Airlines vs the IP pool, Front Door closes the loop on October, and Cloudflare picks its post-quantum poison
Two rulesets, one outbound endpoint: scoping DNS forwarding rules per VNet in Azure
Field notes: AWS uses MCP to migrate its own network, ExpressRoute routing revisited, and Ivan comes back from the beach
Field notes: a quiet week, AWS Cloud WAN earns its BGP attributes, and the post-quantum clock starts ticking
Field notes: encrypted DNS that isn't quite, a Cloudflare post-mortem worth re-reading, and Azure shipping plumbing
How DHCP really updates DNS
Field notes: private origins, an Australian BGP wobble, and a quiet week in Azure
Field notes from the routing tables — week one
How this column actually gets written
Random by design: how AWS made expander-graph data centre fabrics work
DNS AID: decentralized AI agent discovery via DNS
Making simonpainter.com WCAG 2 AA compliant, and keeping it that way with CI
S2S VPN certificate authentication is now generally available
Hybrid Cloud Reference Architectures
How to write inclusive language rules in Copilot instructions
From chatbots to workflows: why the GitHub app is the next step
Meet uping: pronounced 'micro ping'
CNAME rules in DNS - what you need to know
IPv8: a late and confused April Fool
Ping is lying to you - try these instead
Vibe code project: Internet Map
Why there are exactly 13 DNS root servers
Quad9 now supports DoQ along with DoH3
NFC Keyrings - An MVP Summit Side Project
A visit to the Microsoft Inclusive Tech Lab
Reducing HIP: This Meeting Could Have Been Code
BGP for Enterprise Cloud Connectivity
DDR: DNS Discovery and Redirection
DNS Service Binding (SVCB) and HTTPS Records: A Practical Guide
Encrypted DNS: What Microsoft's DNS over HTTPS public preview means for you
BGP Route Server MCP
Public preview of Azure Virtual Network Routing Appliance
Post the Wrong Answer: Why Your First Draft Should Be Imperfect
They keep telling us that ZTNA is so much better than VPN
DNS as an API Proxy: A Pokemon Type Lookup Example
Priority calls with bubble sort
Azure Basic Data Protection

2025

My first look at Vercel
Rage Against Bad Network Diagrams
Egress IP decision tree updated
Integrating Azure Route Server with Infoblox NIOS
Is this a bug in the Infoblox NIOS Azure Marketplace offering?
Service Endpoints. Not as good as a Private Endpoint, but better than nothing.
Checking the health of the Internet
Azure Firewall Prescaling
Azure Private Link Direct Connect
Selling networks the Mad Men way
169.254.169.254: The Instance Metadata IP Address in Azure
Azure Service Tags
168.63.129.16: The Magic IP Address in Azure
Custom icons for Mermaid diagrams in Docusaurus
The network documentation pyramid: why your spreadsheets aren't enough
Azure Global Load Balancer: It's anycast, Jim!
Exporting Azure resources to Terraform code
Dijkstra in OSPF
Azure ExpressRoute Gateway and Public IPs
MCP Inspector
MCP Server for Netbox
Bringing it all together for network automation
HA internet egress using enforza.io
Where to put your cloud
Dual AS for BGP ASN migrations and changes
Modular Networking
Netbox and Terraform
MCP for Netbox
Is MCP the new fad for poor knowledge management?
Azure Private Subnet and IPageddon
Egress IP decision tree
Infrastructure documentation
Useful sed command
The vlan add disaster
Azure Loadbalancer: The NAT device you didn't know you wanted
AWS Route Server vs Azure Route Server
Microsoft Most Valuable Professional
It's not just Zero Trust though
Of course it's MTU, but how is it MTU?
Lessons from Svalbard
Azure Latency Surprise: PrivateLink Outperforms VNET Peering
Azure Subnet Peering Part 2
More on FQDN Filtering
Exploring Azure Network Latency: The Fundamentals
Comparing BGP communities in AWS and Azure
Multiple prefixes on a subnet
FizzBuzz Revisited: A Tale of Two Algorithms
Using packet captures to measure firewall latency
The Hidden Cost of Progress
GitHub action to test build of Docusaurus
Microsoft documentation hidden intent
CIDR ranges in AWS and Azure
ExpressRoute construct naming
Aviatrix. What's all that about?
AWS Egress Security
IPv6 Adoption
The prefix limit in Azure Route Server and how it's counted
Where to WAF
Using AWS Route 53 instead of Anycast and RouteServer
Understanding Azure AZ Sharding and Physical Zone Mapping
Azure Subnet Peering
How the internet works

2024

The case for non-technical managers in technical teams
Summary of common search algorithms
Beyond DNS: Implementing Anycast in Azure with Route Server and NVAs
Zen and the art of AI CVs
Ways of finding your IP
The secret IP that turned out to be DNS forwarding.
Cloud Readiness Assessment Methodology
The Power of Intentional Alerting
Longest Prefix Matching
Cloud networking news from Ignite 2024
From Network Blame to Platform Teams
Uploading my Docusaurus site
How to set up Github Actions to publish to S3 website
SD-WAN: A Strategic Step Toward Zero Trust
Transit route prevention with Azure Route Server
Azure Virtual WAN: The Promise vs. Reality
Finding dead DHCP scopes
Egress Security from Cloud
FQDN Filtering
Azure Private Link Services: Enabling Secure and Flexible Network Architectures
A little look at the AWS Gateway Load Balancer

2023

Python Route Summarisation

Tags

A

Algorithms4
Anycast5
Architecture5
Artificial Intelligence14
Automation9
AWS17
Azure45

B

Bash3
BGP16
Business12

C

Career Development2
CI/CD6
Cloud13

D

DHCP3
DNS26
Documentation2
Docusaurus4

E

Educational15
enforza.io2
ExpressRoute3

F

Firewall9

G

Github5
Github Action5

H

High Availability3

I

IPv64

L

Labs1
Load Balancing4

M

Making1
Migration1
Model Context Protocol8
Monitoring3

N

Netbox3
Networks33
NFC1

O

Opinion23
OSPF2

P

Performance5
Personal12
Private Link4
Programming3
Python7

R

Routing Protocols5

S

Scripting2
SDWAN2
Security11

T

Terraform5
Troubleshooting5

Z

Zero Trust7

Content

All Posts
Cloud Updates
All Tags

Connect

GitHub
LinkedIn

Projects

Refried Bean
Connectivity Matters

Copyright © 2026 Simon Painter