Windows Azure has just released a brand new Whitepaper to provide extensive insights on its Network Security mechanisms and its potential. The networking capacity of Windows Azure facilitates the required infrastructure in order to connect virtual machines to each other, along with acting as a bridge between your data center and cloud platform.
This whitepaper has been released for all the network security experts to unravel the entire working of Windows Azure and how it can be helpful to its customers through its native features, which work best for the protection of the information assets. Given below is a snippet of some data shared in the whitepaper:
Fundamental to any shared cloud architecture is the isolation provided for each customer. In Windows Azure, a customer subscription can include multiple deployments, and each deployment can contain multiple VMs. Windows Azure provides network isolation at several points:
- Deployment: Each deployment is isolated from other deployments. Multiple VMs within a deployment are allowed to communicate with each other through private IP addresses.
- Virtual Network: Multiple deployments (inside the same subscription) can be assigned to the same virtual network, and then allowed to communicate with each other through private IP addresses. Each virtual network is isolated from other virtual networks.
An example of such a topology is shown in the Figure below, which is an example of isolated multi-tier IaaS applications hosted within Windows Azure:
Here’s where you can download the Windows Azure Network Security Whitepaper.