Operations & Troubleshooting
「設定を見る」から「同じtest vectorで証拠を積む」へ。security、route、reachability、flow、packet、applicationを証明範囲ごとに分け、incidentとchangeを再現可能にします。
28 articles
では11記事を深掘り。で既に深掘り済みのNext Hopと、service-specific既存記事は導線として保持します。
Immediate diagnostics
1回のfailureを同じ5-tupleでsecurity / route / reachability / packetへ落とす。
Azure Network Watcher
diagnostic suite全体の使い分けとevidence model。
Operations & TroubleshootingIP Flow Verify
VM NICのNSG/security admin rule判定を5-tupleで検査。
Operations & TroubleshootingNSG Diagnostics
VM/VMSS/Application Gateway等のsecurity filtering issueを診断。
Operations & TroubleshootingNetwork Watcher Next Hop
Azure-selected next hop / route tableを確認。
Operations & TroubleshootingEffective Security Rules
NIC/subnetへ適用される実効security policy。
Operations & TroubleshootingConnection Troubleshoot
point-in-time reachability、latency、hops、fault。
Operations & TroubleshootingNetwork Watcher Packet Capture
VM/VMSSのpacketをdata-plane evidenceとして取得。
Continuous visibility
継続監視・flow telemetry・KQLで「いつから・どこで・どれだけ」を追う。
Connection Monitor
endpoint間の継続synthetic reachability/latency監視。
Operations & TroubleshootingVirtual Network Flow Logs
VNet単位のL4 flow metadata、policy/encryption/throughput。
Operations & TroubleshootingNSG Flow Logs Retirement
legacy NSG Flow LogsからVNet Flow Logsへの移行。
Operations & TroubleshootingTraffic Analytics
flow logsをaggregate/enrichしてLog Analyticsで分析。
Operations & TroubleshootingNetworking KQL Patterns
NTANetAnalyticsを中心にincident queryを再利用可能にする。
Service-specific operations
generic network evidenceと各service固有health/logを組み合わせる。
Application Gateway Troubleshooting
DNS→listener→backend health→TLS/SNI→WAFをrequest pathで追う。
Operations & TroubleshootingAzure Firewall Troubleshooting
UDR→policy→DNAT/SNAT→DNS→return pathを確認。
Operations & TroubleshootingExpressRoute Monitoring
provider/circuit/BGP/route/gateway telemetryを層別化。
Operations & TroubleshootingVPN Gateway Monitoring
tunnel/BGP/diagnostic logでhybrid pathを監視。
Incident method & change safety
tool単位ではなく再現可能なincident/change workflowとして閉じる。
Packet Walk Method
DNSからreturn pathまでboundaryごとに証拠を積む。
Operations & TroubleshootingNetwork Incident: First 15 Minutes
最初の15分でscope/time/tuple/change/effective stateを固定。
Operations & TroubleshootingNetwork Change Validation & Reachability Verification
positive/negative/static/active testで変更を検証。
Operations & TroubleshootingAzure CLI Network Cheat Sheet
read-only network inventory/diagnostic command reference。
Platform reference & lifecycle
subscription/regionのcapacity、権限、provider/API、inventory、change audit、logging、platform health、retirementを横断して確認する reference。
Azure Networking Limits / Quotas
subscription/region limits、current usage、headroomをdeployment前に確認。
Operations & TroubleshootingNetworking RBAC / Least Privilege
Network Contributor、scope inheritance、diagnostic権限を監査。
Operations & TroubleshootingResource Provider / API Version
registration、region support、API version mismatchを切り分け。
Operations & TroubleshootingResource Graph: Network Inventory
subscription横断のnetwork estateをKQLでinventory。
Operations & TroubleshootingActivity Log / Change Correlation
caller、correlation ID、control-plane changeをincident timelineへ接続。
Operations & TroubleshootingDiagnostic Settings / Network Logging
resource logs、metrics、destinations、retention、欠測を設計。
Operations & TroubleshootingService Health / Resource Health
platform issueとtenant configuration issueを分離して証拠化。
Operations & TroubleshootingNetworking Lifecycle / Retirements
retired/retiring SKUとfeatureをdeadline前にinventory・移行。