Back
azure hub spoke private endpoint terraform architecture diagram
15Apr, 2026

Extending Azure Hub-and-Spoke Routing with Terraform Modules: Private Endpoint, DNS, and RBAC

Introduction Azure hub spoke private endpoint Terraform setups are where simple designs start to break. In a previous article, I showed how to build hub-and-spoke routing in Azure using Terraform/OpenTofu modules. That setup introduced a key idea: Hub-and-spoke is not about peering. It is about controlling traffic flow. But that …

azure vnet peering terraform hub and spoke architecture
02Apr, 2026

Azure VNet Peering with Terraform – Why Hub-and-Spoke Is Not Transitive

In this guide, we explore how Azure VNet peering Terraform works in real-world hub-and-spoke architectures. When engineers start building hub-and-spoke architectures in Azure, there is one assumption that almost always appears: If both spokes are connected to the hub, they should be able to communicate with each other. That assumption …

Azure infrastructure Terraform layered architecture model showing network, security, traffic, compute and data access
29Mar, 2026

Azure Infrastructure with Terraform/OpenTofu: From Network Design to Scalable Compute

Azure infrastructure Terraform is often presented as a set of individual resources — but real platforms are built as connected architectural layers. When engineers start working with Azure and Terraform, most examples focus on individual resources. A Virtual Network here. A VM there. Maybe a Load Balancer on top. But …

Azure Private DNS Terraform architecture
18Mar, 2026

Azure Private DNS with Terraform — Foundation Before Private Endpoints

In this guide we explore how to deploy Azure Private DNS Terraform and why it forms the architectural foundation behind Private Endpoints and private platform services. When engineers start working with private networking in Azure, they usually begin with Private Endpoints. They deploy a storage account, create a private endpoint, …

AKS pulling images from Azure Container Registry using Private Endpoint and Private DNS with Terraform
19Dec, 2025

Securing AKS Image Pulls with Azure Private Endpoints (using Terraform/OpenTofu)

VNet, ACR, Private DNS, and Intent-Driven Networking with Terraform AKS ACR Private Endpoint Terraform is a common requirement when securing container image. Designing an Azure Virtual Network is rarely just about “connecting things together”.Once you introduce AKS, Azure Container Registry, and Private Endpoints, networking becomes a first-class architectural concern — …