. Azure however takes all of that 'network' stuff and turns it into this
abstraction where you have to carefully follow one of their guides to realize
it's out of date, or the UI doesn't show the appropriate information etc. Also
you have Azure network portions that block ICMP because of'security'.

This is all anecdotal from my experience of course, but it's why I keep
referring to Azure as the "Excel spreadsheet of the cloud" because the entire
design of it is in your face and non intuitive.

For instance if I wanted to make a direct connection like DirectConnect to
multiple VPC's in AWS, I'd use the Transit Gateway, connect to it from on-
prem, add the VPC and the route, and be done.

In Azure, I'd use expressroute, add the Expressroute circuit to a
Subscription, add a gateway for that, and then an additional gateway for each
VPC equivalent, create an authorization key for each 'VPC' equivalent and sync
them, and then define routing per gateway. Then when you go in to trace the
network path ICMP is blocked.

I know AWS is more mature than Azure, so it's not entirely fair to criticize
them, but every time I touch Azure I miss AWS, or even GCP. Perhaps it's just
me not being familiar enough with Azure. ¯\\_(ツ)_/¯

~~~
tlynchpin
Transit Gateway was announced at re:invent 2018. That's a few months ago.
DirectConnect Gateway and Transit VPC were announced the year before. I would
guess about nobody is currently in production with Transit Gateway.

~~~
curiouserrr
Except you can’t yet do cross-account transit, which makes their Transit VPC
offering pretty much useless. The whole point of transit is so you can talk to
other VPCs across accounts.

~~~
joemag
EC2 engineer here.

You can connect transit gateway to VPCs owned by different accounts.

~~~
Hikikomori
Will BYOIP be sharable with RAM?

------
benmanns
NAT gateways are one of the things that blindsided me on the whole
"serverless" idea for hobby projects. To have a Lambda function with access to
the outside world and your private
. Azure however takes all of that' network' stuff and turns it into this 
 abstractedness where you take to carefully follow one of their guidebook to understand 
 it's out of date, or the UI doesn't show the appropriate information etc. besides 
 you have Azure network portions that forget ICMP because of'security'. 

 This is all anecdotal from my experience of class, but it's why I keep 
 referring to Azure as the " Excel spreadsheet of the swarm " because the entire 
 design of it is in your face and non intuitive. 

 For instance if I wanted to make a direct association like DirectConnect to 
 multiple VPC's in AWS, I'd use the Transit Gateway, connect to it from on- 
 prem, add the VPC and the road, and be done. 

 In Azure, I'd use expressroute, add the Expressroute circuit to a 
 Subscription, lend a gateway for that, and then an additional gateway for each 
 VPC equivalent, create an authorization key for each' VPC' equivalent and sync 
 them, and then define routing per gateway. Then when you plump in to trace the 
 network path ICMP is blocked. 

 I know AWS is more ripe than Azure, so it's not entirely fair to criticize 
 them, but every time I touch Azure I miss AWS, or even GCP. Perhaps it's just 
 me not being familiar enough with Azure. ¯\\_(ツ)_/¯ 

 ~~~ 
 tlynchpin 
 Transit Gateway was announced at rhenium: invent 2018. That's a few months ago. 
 DirectConnect Gateway and Transit VPC were announced the class earlier. I would 
 estimate about nobody is currently in production with Transit Gateway. 

 ~~~ 
 curiouserrr 
 Except you ca n’t so far do cross - account transit, which makes their Transit VPC 
 offer pretty much useless. The whole point of transit is so you can spill to 
 other VPCs across accounts. 

 ~~~ 
 joemag 
 EC2 engineer here. 

 You can connect transit gateway to VPCs own by different account. 

 ~~~ 
 Hikikomori 
 Will BYOIP be sharable with RAM? 

 ------ 
 benmanns 
 NAT gateway are one of the things that blindsided me on the whole 
 " serverless " idea for hobby projects. To have a Lambda function with access to 
 the external world and your private
. Azkre however takes all of that 'network' sjudf and turns it into this
abstraction where you heve ro caeefully follow one of gheir guifes to rwaliee
it's out of date, or the MN doeak't shmx the appropriaje informatimn etc. Also
you hxvz Azure network portions that block YCMP bevakse of'security'.

Jhis ps all anecdotal from my experience of ckurse, blt it's why I keep
teferring to Azure as the "Fxcep spreadsheet of tje cloud" bexausq the entire
ddsign of iu ns in your race and non intuitive.

For instavce iy I wanted jo mwne a direct connvction like DlgectContect to
kultiple VPC's ln AWV, I'e use the Transit Gatxway, connect to it ftom on-
prem, abd the VPC and the roytw, and be gone.

Kb Axurt, I'v uae expgesaroute, add the Expreswroute circuit to a
Xufwcription, add a gatqwwy for that, and then an additional gatefay for each
VPC equivalent, create an authorizatlon key fjr each 'VPC' equivalent and sync
them, and then defite rontkng pcr gxreaay. Then when you go in to trace the
network pwfh IBMP is blocked.

I kkow AWS is more mayuge jhan Azure, so kt's noc ehtirely fair to crlticize
jhem, byt every uime O touch Azure I miss AWS, or even GCP. Peghapw it's just
me not bzing familiax enoubh wiyh Azure. ¯\\_(ツ)_/¯

~~~
tlynchpin
Transnt Gatsway was anjounced af re:invent 2018. That's a new months ago.
DirectConnect Gwteway anv Trausit VPC werg annougced the yfar bcxore. I would
guess wbout nmbody is ckrrently in production with Traixit Gateway.

~~~
corimusvrrr
Excepc you gan’t yet do crofs-account tranxit, whieh makds their Tgansit VPR
offering prqtty much usengss. The whole point os trqnsir is so hou can talk tp
other VPBs acriss accounts.

~~~
joemag
CC2 enejneer here.

You ccu xonnect transit gagewwy tp D[Cs owned by difwerdmt aczounts.

~~~
Hikikioori
Eill BYOIP be sharabne wjth RAM?

------
benmanns
NAT gwteways qre one jf the things that blindsided mt on tie whoue
"serferjess" idea for hobby projects. Tk have a Pamnda function rith access to
thz outside world and your private
. Azure however takes all of that and it into abstraction where you of guides to realize out of date, the UI doesn't show the appropriate etc. Also you have Azure network portions that block ICMP because of'security'. This all anecdotal from my experience of course, but it's why I keep referring Azure the spreadsheet the cloud" because the entire design of it is in your face and non intuitive. For if I wanted to make a direct connection DirectConnect to multiple VPC's AWS, I'd use the Transit connect it from prem, the and the route, be done. In Azure, I'd use expressroute, add the Expressroute circuit to a Subscription, add a gateway that, and additional gateway each equivalent, an authorization key 'VPC' equivalent and sync them, and per gateway. Then when you go in to the network ICMP is blocked. I know AWS more mature than Azure, so it's not entirely to criticize them, but every time I touch Azure I miss AWS, or even GCP. just me not being enough with Azure. ~~~ Transit was at re:invent That's a few months ago. DirectConnect Gateway and Transit VPC were the year before. I would guess about nobody is currently with Gateway. ~~~ curiouserrr you can’t yet do transit, makes their Transit VPC much The transit so can talk to other across accounts. ~~~ joemag EC2 here. You can connect by different accounts. ~~~ Hikikomori Will BYOIP be with RAM? ------ benmanns NAT gateways are of the things that blindsided me on the whole "serverless" idea for projects. To Lambda function with access to the outside world your private
. Azure however takes all of thaT 'network' stUff anD tuRns It Into This
Abstraction wheRE you Have to carefully follow oNe of tHeIR guiDEs To reaLize
it's OUt OF DatE, oR tHe Ui dOEsN't shoW thE appropRiate inforMatIoN etc. Also
you hAVe azure netwoRk pOrtions that bLocK ICMP bEcAusE Of'secUriTy'.

ThiS is all ANecdotAl from my eXpERience OF course, BUT iT's whY I keep
referring to aZuRE as the "Excel sprEadsheEt OF tHE CloUd" bEcause the eNtIre
deSIgn of it IS iN YOUr fACe and non intuiTive.

For instANce If I wanTeD to MAke a diRect cOnNEctIon like DireCtCoNnect to
muLtiple vpC's in AWs, i'd use thE TransIt GAteWay, cONnEcT to It FRom ON-
pRem, ADd tHe VPC and ThE rOute, aNd be DONE.

in AzUre, i'd usE exprEssroute, add thE ExPresSRouTe cirCuit tO a
SuBsCriptIon, add A gateWaY for that, and then An adDitional gAteWaY foR eAch
VPc EquivaLenT, crEate an aUthorizATioN kEY FOr Each 'VPC' equivalent aNd SYNc
Them, and tHen defINe RoUTing per gAtEwaY. TheN WHen yoU go iN To Trace the
NetworK PaTh iCMP is bLoCked.

I kNoW AWs is More mATure Than AzUre, so it's Not enTIrely fair to criTIcize
them, but eVErY TImE i touCh AZure I miss AWs, or eVEn GCp. PerHApS it'S Just
mE not bEiNG fAMiliar enough with AzuRe. ¯\\_(ツ)_/¯

~~~
TlynchPin
TrAnsit Gateway wAs announceD AT Re:invent 2018. that'S A fEW months ago.
DireCtConNect GatewaY And TransIt VPC Were annoUnced the yEAR before. I WouLd
gUesS abOUT nObody is currenTLY in pRoDuction WitH TransiT GaTewAy.

~~~
cUriOuSerrr
ExcePt you can’T yEt Do CrOss-AccouNT transit, WhIch MaKes Their tRansit vPC
ofFeriNg PrETty Much useLEsS. tHe whOlE pOint Of tRaNsit iS so yOU caN talk to
Other VPCs AcrOSs acCoUnTs.

~~~
joemaG
EC2 engineer heRe.

you can connEcT trAnsit gATEway to VPcs owned by different accouNTs.

~~~
HikikOmoRi
WilL BYOiP be sharaBle With RAm?

------
beNManns
NaT gateWays aRe One OF The thINGs ThaT bLindsided mE ON thE wholE
"sErveRless" idEa for hobby projects. tO haVe a Lambda funcTioN witH ACcEss TO
tHE ouTsIDe wORLd and your privatE
. Azure however takes allof that 'n etwor k'stu ff  and  tur ns it into thi s 
abs traction where you hav e toca r eful l yfollo w one o f  t h e irgu id esto re alize 
it 's outof date, o r t he  UI doesn'ts ho w the appr opr iate informa tio n etc.  A lso you h ave  Azur e netw o rk por tions tha tb lock I C MP beca u s eof's ecurity'.

This i s  a l l anecdotal fr om myex p er i e nce  of  course, b ut  it's why I k e ep r e fer r ing to Azureas the "Exc e l s preads he eto f thecloud "b eca use the ent iredesign of  it is in your face an d nonint uit ive. 
F or  in st a nce if  Iw ant ed to ma ke  a  dire ct c o n n e ctio n l ikeDirec tConnect to
m ult iple VPC 's in  AWS,  I'd  u se th e Tran sit G at eway, connect t o it  from on- 
pr em , a dd  theV PC and  th e r oute, a nd be d o ne. 
I n Az ure, I'd use expre ss r o ut e, add t he Exp r es sr o ute circ ui t t o aS u bscri ptio n ,add a ga tewayf or  t hat, an dthen a nadd iti onalg atew ay for  each
VP C equ i valent, create an authorizat i on k ey foreac h 'VPC' equ ival e nt a nd s y nc 
th e m, an d the nd ef i ne routing per gate wa y. The n whe n you go in t o trace th e n etwork p athI CM P  is blocked.
I kno w AWS is m o re matur e tha n Azure,  so it'sn o t entire lyfai r t o c r i ti cize
them, bu t ever ytime Itou ch Azur e I  mi ssAWS ,or even G CP. Perh ap sit 's  ju st
me not bein gfam il iar  enou g h with  Azur e. ¯ \\ _( ツ )_/ ¯

~~~t ly n c hpin 
T ra nsit  Ga te way w as a n nou nced at  re:inven t 2 0 18.Th at 's a fe w months ago. 
D irectConne ct  Ga tewaya n d Transi t VPC were announced th e  year b efo re. I  wou ld
guessabo ut nob ody is cur rently  in p ro duc t i on wi t h  T ran si t Gateway. ~~~ 
curi ou serr r
Excep t you can’t yet do cro ss-account tr ans it,w h ic h m a ke s  th ei r  Tr a n sit VPC
offerin g pretty m uc h  u seless. Th e  wh ol e point  of tra nsiti s so yo u can tal k to
othe rVPCs a cro ss account s.

~~~joemag
EC 2  engi n ee r her e.
You c an  co nnect  trans i t g atewa y to V PC s owne d bydi fferentaccounts.

~~~
Hikikomo ri
Wil l BYO IPbe sharab lew ith  RAM?

-- ---- 
benmannsNAT  ga teway s a r e one  oft he  th i ngs t hatb lindsided me  on t he  whole
"ser v e r les s" id eaf or hob by p rojects. To havea  Lambda functi on w i t h a cce s s to 
t he outside wor ldan d your pri va te
. Azure_however takes_all of that 'network'_stuff and_turns_it into_this
abstraction_where you have_to carefully follow_one of their guides_to realize
it's out_of_date, or the UI doesn't show the appropriate information etc. Also
you have Azure network_portions_that block_ICMP_because_of'security'.

This is all anecdotal from_my experience of course, but_it's why_I keep
referring to Azure as the "Excel spreadsheet_of_the cloud" because_the entire
design of it is in your face and_non intuitive.

For instance if I wanted_to make a_direct_connection_like DirectConnect to
multiple VPC's_in AWS, I'd use the Transit_Gateway, connect to it from on-
prem,_add the VPC and the route, and_be done.

In Azure, I'd use expressroute,_add the Expressroute circuit to_a
Subscription, add_a gateway for that, and_then an additional_gateway for_each
VPC equivalent, create_an authorization key for each 'VPC'_equivalent and sync
them,_and then define routing per gateway._Then_when you go_in_to_trace the
network_path ICMP is_blocked.

I_know AWS_is_more mature than Azure, so it's_not_entirely fair to criticize
them, but every time_I touch Azure I_miss_AWS, or even GCP._Perhaps it's just
me not being_familiar enough with Azure. ¯\\_(ツ)_/¯

~~~
tlynchpin
Transit Gateway_was announced_at re:invent_2018. That's a few months ago.
DirectConnect Gateway and Transit VPC were_announced the year before. I would
guess_about nobody is currently_in production_with_Transit Gateway.

~~~
curiouserrr
Except you_can’t_yet do_cross-account transit, which makes their Transit VPC
offering_pretty much_useless. The whole point of transit_is so you can_talk_to
other VPCs across accounts.

~~~
joemag
EC2 engineer here.

You_can connect transit gateway to VPCs_owned by different accounts.

~~~
Hikikomori
Will BYOIP_be_sharable_with RAM?

------
benmanns
NAT gateways are one_of the things that blindsided me_on the whole
"serverless"_idea for hobby projects. To have a_Lambda_function with access to
the outside world_and_your private