Monthly recap of Azure updates
#

An easy-to-scan roundup of our newest, most important highlights. Let’s have a look what interested Azure updates are share. Read carefully through the updates, especially the products and support that are announced as becoming retired.

Again too much too mention here. Great work done by Microsoft investing in Confidential Computing. This month another great Azure confidential VM went GA, that includes NVIDIA Tensor Core GPUs. Great for AI training/inference within a Trusted Execution Environment.

Also another retirement wave of outdated security protocols, like TLS 1.0 and TLS 1.1. Followed with the expiration of extended support for both Python 3.9 and PHP 8.2 apps running on Azure App Service.

Last but not least. On AKS. Both Kubernetes version 1.27 and 1.30 will be available as Long-Term-Support (LTS) version.

Top 5 you don’t want to miss
#

Advanced Network Security with containers becomes better and better in AKS. New advanced feature called FQDN filtering is in public preview. FQDN filtering allows you to define granular network policies based on domain names rather than IP addresses. Beneficial for simplifying policy management and reducing administrative overhead by consuming DNS and complementing with L7 policies.
Azure Managed Confidential Consortium Framework (CCF) service support retirement. This will affect ongoing Confidential Computing projects, but most workloads can be transitioned to Azure Confidential Ledger service. Read more below in Azure updates section.
gRPC and mTLS protocols are now supported by Application Gateway for Containers. gRPC helps to improve bidirectional streaming capabilities and is making use of HTTP/2. mTLS is bringing increased Security possibilities for backend services by making use of authentication using the TLS protocol.
Big disadvantage was that Azure Trusted Launch VMs were not yet supported in Azure Site Recovery. Trusted Launch is a foundational Security measure for compute resources by securing the instance using Secure Boot and vTPM capabilities. Last month Windows support was added, now it’s time for Linux based VMs.
Take notice that starting from mid next year (2025), you’ll no longer be able to create new NSG flow logs. Please take notice of the succesor using Virtual Network Flow logs.