Active/Active NVA on Azure with HaPorts (Palo Alto and SAP RISE)

[@ToivoVoll]

THANK YOU! I can't begin to explain just how useful this is.

[@adlai7]

Is this design using a VWAN hub, or are the Palo FWs deployed in hub/transit VNET? If not using a VWAN hub, how would this design change if you wanted to introduce a VWAN hub to centralize the VNET peering/routing and you still needed to have the Palos perform east/west traffic inspection between the SAP rise (red network) and the other spoke VNETs (blue networks)? Would that be accomplished using multiple route tables in the VWAN hub?

[@Alex-jc3xx]

How are you able to ping in through the LB? MS doc says icmp is dropped by the LB.

[@helloworld9730]

What if the loadbalancer itself goes down?

[@AdamStuart1]

That is like asking, "what if the virtual network itself goes down?"

[@helloworld9730]

@@AdamStuart1 I apologize if my question reflects my beginner level too much.. I am studying Azure networking and I thought maybe I learn something by asking you this question.

[@helloworld9730]

@@AdamStuart1 As far as I know the VNet doesn't go down because it is logical to contain the networking resources. I mean you are trying to tell me that a VNet is like a loadbalancer. if that's the case then that's good. I am very new to cloud in general.

[@AdamStuart1]

@@helloworld9730 That's right, just like the VNet is a distributed component of the Azure SDN, so is the Azure load balancer.

[@helloworld9730]

@@AdamStuart1 That's very valuable info, thanks alot Adam. Keep up the good work I learn too much from you