https://imds.foo/tags/networking/Recent content in Networking on imds.fooHugoen-usSat, 29 Aug 2026 15:11:01 +0200https://imds.foo/posts/private-endpoints-storage/Wed, 12 Aug 2026 00:00:00 +0000https://imds.foo/posts/private-endpoints-storage/<h2 id="the-problem">the problem</h2> <p>Every storage account you create ships with a public endpoint. Firewall rules and &ldquo;selected networks&rdquo; narrow who can reach it, but the endpoint itself stays on the internet, resolvable and probeable. For anything holding regulated data, the cleaner answer is to remove the public path entirely and reach the account over a private endpoint inside your VNet.</p> <p>The switch sounds trivial. It isn&rsquo;t, because the moment you flip <code>publicNetworkAccess</code> to <code>Disabled</code>, every client that still resolves the public IP breaks — including your own pipelines.</p>