First, decide the boundaries
Decide which to treat as trust boundaries: on-premises, Azure, the internet, other clouds, and so on. Once boundaries are set, the roles of Firewall, NSG, UDR, and BGP become easier to organize.
Landing Zone Network Guide
1 Big Picture: Landing Zone and Networking
Landing Zone networking should be considered as a set of connectivity, separation, routing, traffic control, and operations. Before diving into individual service names, confirm the overall roles on a map.
Key points of this chapter
- Understand chapter connections with the overall map
- Decide connectivity, then check routing
- Include DR, monitoring, and standardization in the design scope
Explanation note
First explain the flow with a diagram, then supplement only the key points in text. For those unfamiliar with networking, showing where traffic flows before terminology is effective.
Landing Zone network design
Networking is not just connectivity; it is an important Landing Zone design area alongside identity, auditing, security, and operations.