Skip to content

Commit 079fa73

Browse files
committed
added ACNS section to security fundamentals doc
1 parent 89a6bfd commit 079fa73

File tree

2 files changed

+14
-2
lines changed

2 files changed

+14
-2
lines changed

articles/networking/fundamentals/networking-overview.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: networking
55
author: mbender-ms
66
ms.service: azure-virtual-network
77
ms.topic: conceptual
8-
ms.date: 10/23/2024
8+
ms.date: 11/08/2024
99
ms.author: mbender
1010
---
1111

@@ -72,7 +72,7 @@ Using Azure DNS, you can host and resolve public domains, manage DNS resolution
7272

7373
### <a name="nat"></a>NAT Gateway
7474

75-
Virtual Network NAT(network address translation) simplifies outbound-only Internet connectivity for virtual networks. When configured on a subnet, all outbound connectivity uses your specified static public IP addresses. Outbound connectivity is possible without load balancer or public IP addresses directly attached to virtual machines.
75+
NAT Gateway simplifies outbound-only Internet connectivity for virtual networks. When configured on a subnet, all outbound connectivity uses your specified static public IP addresses. Outbound connectivity is possible without load balancer or public IP addresses directly attached to virtual machines.
7676
For more information, see [What is Azure NAT gateway](../../virtual-network/nat-gateway/nat-overview.md)?
7777

7878
:::image type="content" source="./media/networking-overview/flow-map.png" alt-text="Diagram of virtual network NAT gateway.":::

articles/security/fundamentals/overview.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -301,6 +301,18 @@ You can enable the following diagnostic log categories for NSGs:
301301

302302
[Microsoft Defender for Cloud](../../security-center/security-center-introduction.md) continuously analyzes the security state of your Azure resources for network security best practices. When Defender for Cloud identifies potential security vulnerabilities, it creates [recommendations](../../security-center/security-center-recommendations.md) that guide you through the process of configuring the needed controls to harden and protect your resources.
303303

304+
### Advanced Container Networking Services (ACNS)
305+
306+
Advanced Container Networking Services (ACNS) is a comprehensive suite designed to elevate the operational efficiency of your Azure Kubernetes Service (AKS) clusters. It provides advanced security and observability features, addressing the complexities of managing microservices infrastructure at scale.
307+
308+
Advanced Container Networking Services (ACNS) offers a comprehensive suite of features designed to enhance the operational efficiency and security of your Azure Kubernetes Service (AKS) clusters.
309+
310+
These features are divided into two main pillars:
311+
312+
- **Security**: For clusters using Azure CNI Powered by Cilium, network policies include fully qualified domain name (FQDN) filtering for solving the complexities of maintaining configuration.
313+
314+
- **Observability**: This feature of the Advanced Container Networking Services suite brings the power of Hubble’s control plane to both Cilium and non-Cilium Linux data planes, providing enhanced visibility into networking and performance.
315+
304316
## Compute
305317
The section provides additional information regarding key features in this area and summary information about these capabilities.
306318

0 commit comments

Comments
 (0)