Hub-spoke virtual networks in Azure

With the rise of AI and Quantum Readiness vnet integration of Azure services has become more relevant than ever before. When your infrastructure is of a certain size it can be a challenge to do this right. In this session I will walk through the building blocks of a good hub-spoke network in Azure.

The session contains:
- The history of vnets, service endpoints and private endpoints.
- hub-spoke network topology in practice, what you need to make it work.
- How to handle DNS for Private Endpoints in a hub-spoke topology.

After this session you have a good overview and in-depth knowledge about the most important building blocks to create a solid hub-spoke vnet foundation for your environment.

I have had this talk many times internally in several organizations and conferences.
To name a few: NIC Oslo 2023 & 2025, NDC Oslo 2024, Azure User Group Norway.

Azure Enterprise Policy as Code (EPAC)

Managing Azure Policy through the portal can be a hassle, especially when your Azure tenant(s) become of a certain size. With the rise of new AI services almost every month, good governance is key to scale environments safe and consistent. There are several ways of doing this and Enterprise Policy as Code (EPAC) from Microsoft is one of them.

EPAC comprises a number of Powershell scripts which can be used in CI/CD based system or a semi-automated use to deploy Policies, Policy Sets, Assignments, Policy Exemptions, Remediation Jobs and Role Assignments.

In this session:
- What is EPAC and how does it work?
- Determine your Desired State Strategy
- Managing Policies, PolicySets (Initiatives) and Assignments walk through
- Policy documentation (as code)

After this session you have a good understanding on how EPAC works and a good idea on where to start your own Proof of Concept and implementation.

Target audience: Azure Architects, DevOps Engineers, Security Engineers
Session time: ~45min

Azure DNS Deep Dive: Public, Private, and Hybrid Name Resolution

DNS is the foundation of almost every Azure workload, yet many organizations treat it as an afterthought—until something breaks. Azure offers multiple DNS-related services, each designed for different scenarios, and choosing the wrong one can lead to operational headaches, security gaps, and unexpected limitations.

In this session, we'll explore the Azure DNS landscape, including Azure DNS, Private DNS Zones, DNS Private Resolver, and service-specific DNS integrations. You'll learn when to use each service, where they shine, where they fall short, and which pitfalls to avoid.

Whether you're an architect, cloud engineer, or Azure administrator, you'll leave with a practical decision framework to design a DNS strategy that is scalable, secure, and future-proof.

Takeaways:

- Understand Azure's DNS services and their purpose
- Learn when to use which DNS solution
- Avoid common design mistakes and operational pitfalls
- Gain practical guidance from real-world scenarios