undefined | Better HN

0 pointsnotreallyserio4y ago0 comments

Google offers a way to access Google services from your VM 1918 IPs so you don't need to use NAT. I wonder if Azure would consider doing the same.

0 comments

If you do the blocking in Azure via a Network Security Group, it's simple. You can allow outbound traffic to Azure services and deny anything else.

Until an Azure service is misused for exfil.

Not all services support it yet, but private endpoints are a great solution to this issue in azure.

j / k navigate · click thread line to collapse

0 pointsnotreallyserio4y ago0 comments

Google offers a way to access Google services from your VM 1918 IPs so you don't need to use NAT. I wonder if Azure would consider doing the same.

If you do the blocking in Azure via a Network Security Group, it's simple. You can allow outbound traffic to Azure services and deny anything else.

Until an Azure service is misused for exfil.

Not all services support it yet, but private endpoints are a great solution to this issue in azure.

j / k navigate · click thread line to collapse