Skip to content

Commit 095d42f

Browse files
committed
resolve merge conflict
2 parents a707dea + 23423c5 commit 095d42f

File tree

63 files changed

+2774
-657
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

63 files changed

+2774
-657
lines changed

.openpublishing.publish.config.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -542,6 +542,12 @@
542542
"branch": "main",
543543
"branch_mapping": {}
544544
},
545+
{
546+
"path_to_root": "azure-cosmos-db-mongodb-mern-web-app",
547+
"url": "https://github.com/Azure-samples/msdocs-azure-cosmos-db-mongodb-mern-web-app/",
548+
"branch": "main",
549+
"branch_mapping": {}
550+
},
545551
{
546552
"path_to_root": "azure-cosmos-spark",
547553
"url": "https://github.com/Azure/azure-cosmosdb-spark",

.openpublishing.redirection.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11503,6 +11503,11 @@
1150311503
"redirect_url": "/azure/firewall/ftp-support",
1150411504
"redirect_document_id": false
1150511505
},
11506+
{
11507+
"source_path_from_root": "/articles/firewall/firewall-network-rule-logging.md",
11508+
"redirect_url": "/azure/firewall/firewall-diagnostics",
11509+
"redirect_document_id": false
11510+
},
1150611511
{
1150711512
"source_path_from_root": "/articles/security/governance-in-azure.md",
1150811513
"redirect_url": "/azure/governance/",

articles/active-directory/develop/msal-client-application-configuration.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ Using MSAL in your code, you specify the audience by using one of the following
8787

8888
MSAL will throw a meaningful exception if you specify both the Azure AD authority audience and the tenant ID.
8989

90-
If you don't specify an audience, your app will target Azure AD and personal Microsoft accounts as an audience. (That is, it will behave as though `common` were specified.)
90+
It is recommended to specify an audience, as many tenants, and the applications deployed in them will have guest users. If your application will have external users, the endpoints of `common` and `organization` are best avoided. If you don't specify an audience, your app will target Azure AD and personal Microsoft accounts as an audience and will behave as though `common` were specified.
9191

9292
### Effective audience
9393

articles/azure-monitor/logs/analyze-usage.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ Event
114114
```
115115

116116
## Data volume by computer
117-
You can analyze the amount of billable data collected from a virtual machine or a set of virtual machines. The **Usage** table doesn't include information about data collected from virtual machines, so these queries use the [find operator](/azure/data-explorer/kusto/query/findoperator) to search all tables that include a computer name. The **Usage** type is omitted because this query is only for analytics of data trends.
117+
You can analyze the amount of billable data collected from a virtual machine or a set of virtual machines. The **Usage** table doesn't have the granularity to show data volumes for specific virtual machines, so these queries use the [find operator](/azure/data-explorer/kusto/query/findoperator) to search all tables that include a computer name. The **Usage** type is omitted because this query is only for analytics of data trends.
118118

119119
> [!WARNING]
120120
> Use [find](/azure/data-explorer/kusto/query/findoperator?pivots=azuremonitor) queries sparingly because scans across data types are [resource intensive](./query-optimization.md#query-details-pane) to execute. If you don't need results per subscription, resource group, or resource name, use the [Usage](/azure/azure-monitor/reference/tables/usage) table as in the preceding queries.

articles/azure-vmware/vmware-hcx-mon-guidance.md

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -3,14 +3,14 @@ title: VMware HCX Mobility Optimized Networking (MON) guidance
33
description: Learn about Azure VMware Solution-specific use cases for Mobility Optimized Networking (MON).
44
ms.topic: reference
55
ms.service: azure-vmware
6-
ms.date: 3/10/2023
6+
ms.date: 3/24/2023
77
---
88

99
# VMware HCX Mobility Optimized Networking (MON) guidance
1010

1111
>[!NOTE]
1212
>
13-
>HCX Mobility Optimized Networking is officially supported by VMware and Azure VMware Solutions from HCX version 4.1.0.
13+
> VMware HCX Mobility Optimized Networking is officially supported by VMware and Azure VMware Solutions from HCX version 4.1.0.
1414
1515
>[!IMPORTANT]
1616
>
@@ -20,7 +20,7 @@ ms.date: 3/10/2023
2020
>
2121
>[Limitations for any HCX deployment including MON](https://docs.vmware.com/en/VMware-HCX/4.2/hcx-user-guide/GUID-BEC26054-D560-46D0-98B4-7FF09501F801.html)
2222
>
23-
>VMware HCX Mobility Optimized Networkign (MON) is not supported with the use of a 3rd party gateway. It may only be used with the T1 gateway directly connected to the T0 gateway with no network virtual appliance (NVA). It may be able to make this configuration function, but we do not support it.
23+
>VMware HCX Mobility Optimized Networking (MON) is not supported with the use of a 3rd party gateway. It may only be used with the T1 gateway directly connected to the T0 gateway with no network virtual appliance (NVA). You may be able to make this configuration function, but we do not support it.
2424
2525
[HCX Mobility Optimized Networking (MON)](https://docs.vmware.com/en/VMware-HCX/4.2/hcx-user-guide/GUID-0E254D74-60A9-479C-825D-F373C41F40BC.html) is an optional feature to enable when using [HCX Network Extensions (NE)](configure-hcx-network-extension.md). MON provides optimal traffic routing under certain scenarios to prevent network tromboning between the on-premises and cloud-based resources on extended networks.
2626

@@ -32,10 +32,8 @@ Throughout the migration cycle, MON optimizes application mobility for:
3232

3333
- Optimizing and avoiding asymmetric traffic flows between on-premises, Azure VMware Solution, and Azure
3434

35-
3635
In this article, you'll learn about the Azure VMware Solution-specific use cases for MON.
3736

38-
3937
## Optimize traffic flows across standard and stretched segments on the private cloud side
4038

4139
In this scenario, VM1 is migrated to the cloud using the NE, which provides optimal VM to VM latency. As a result, VM1 needs low latency to VM3 on the local Azure VMware Solution segment. We migrate the VM1 gateway from on-premises to Azure VMware Solution (cloud) to ensure an optimal path for traffic (blue line). If the gateway remains on-premises (red line), a tromboning effect and higher latency are observed.
@@ -45,8 +43,6 @@ In this scenario, VM1 is migrated to the cloud using the NE, which provides opti
4543
4644
:::image type="content" source="media/tutorial-vmware-hcx/hcx-mon-user-case-diagram-1.png" alt-text="Diagram showing the optimization for VM to VM L2 communication when using stretched networks." border="false":::
4745

48-
49-
5046
## Optimize and avoid asymmetric traffic flows
5147

5248
In this scenario, we assume a VM from on-premises has been migrated to Azure VMware Solution and participates in L2, and L3 traffic flows back to on-premises to access services. We also assume some VM communication from Azure (in the Azure VMware Solution connected vNET) could reach down into the Azure VMware Solution private cloud.
@@ -63,12 +59,10 @@ If choosing the NE path for example, the MON policy routes have to specifically
6359
Policy routes are evaluated only if the VM gateway is migrated to the cloud. The effect of this configuration is that any matching subnets for the destination get tunneled over the NE appliance. If not matched, they get routed through the T0 gateway.
6460

6561
>[!NOTE]
66-
>Special consideration for using MON in Azure VMware Solution is to give the /32 routes advertised over BGP to its peers; this includes on-premises and Azure over the ExpressRoute connection. For example, a VM in Azure learns the path to an Azure VMware Solution VM on an Azure VMware Solution MON enabled segment. Once the return traffic is sent back to the T0 as expected, if the return subnet is an RFC1918 match, traffic is forced over the NE instead of the T0. Then egresses over the ExpressRoute back to Azure on the on-premises side. This can cause confusion for stateful firewalls in the middle and asymmetric routing behavior. It's also a good idea to determine how VMs on NE MON segments will need to access the internet, either via the T0 in Azure VMware Solution or only through the NE back to on-premises.
62+
>Special consideration for using MON in Azure VMware Solution is to give the /32 routes advertised over BGP to its peers; this includes on-premises and Azure over the ExpressRoute connection. For example, a VM in Azure learns the path to an Azure VMware Solution VM on an Azure VMware Solution MON enabled segment. Once the return traffic is sent back to the T0 gateway as expected, if the return subnet is an RFC1918 match, traffic is forced over the NE instead of the T0. Then egresses over the ExpressRoute back to Azure on the on-premises side. This can cause confusion for stateful firewalls in the middle and asymmetric routing behavior. It's also a good idea to determine how VMs on NE MON segments will need to access the internet, either via the T0 in Azure VMware Solution or only through the NE back to on-premises. In general, all of the default policy routes should be removed to avoid asymmetric traffic. Only enable policy routes if the network infrastructure as been configured in such a way to account for and prevent asymmetric traffic.
6763
6864
:::image type="content" source="media/tutorial-vmware-hcx/hcx-mon-user-case-diagram-3.png" alt-text="Diagram showing the RFC1918 egress and egress traffic flow." border="false":::
6965

7066
As outlined in the above diagram, the importance is to match a policy route to each required subnet. Otherwise, the traffic gets routed over the T0 and not the NE.
7167

72-
7368
To learn more about policy routes, see [Mobility Optimized Networking Policy Routes](https://docs.vmware.com/en/VMware-HCX/4.1/hcx-user-guide/GUID-F45B1DB5-C640-4A75-AEC5-45C58B1C9D63.html).
74-
Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
---
2+
author: seesharprun
3+
ms.author: sidandrews
4+
ms.reviewer: mjbrown
5+
ms.service: cosmos-db
6+
ms.topic: include
7+
ms.date: 03/07/2023
8+
---
9+
10+
APPLIES TO:
11+
:::image type="icon" source="media/applies-to/yes-icon.svg" border="false":::
12+
MongoDB vCore

0 commit comments

Comments
 (0)