Docs section: Network & Connectivity - Target information about avdaccelerator HOT 5 CLOSED

I would also add AzFW and its suggested configuration for AVD.

from avdaccelerator.

Changes to existing documentation: we need to overhaul the current documentation as it mostly talks of CAF and ALZ but not a lot of specifics on AVD, we will use some of the existing info in the document but in general we need to align with what other teams (like AVS Enterprise-scale network topology and connectivity for Azure VMware Solution - Cloud Adoption Framework | Microsoft Docs) have delivered in their accelerator docs.

The newly proposed structure for the doc will include customer scenarios section (customer profile, architectural components with diagram, considerations):

• Quick intro: brief info on ALZ connectivity, AVD’s networking and mentions hybrid, performance, security, and scale.
• Networking components and concepts: quick description of networking concepts and components that interact with the AVD deployment: NSG, ASG, Azure Firewall, Azure virtual network, NVA, vWAN, hub&spoke, UDR, AVD traffic flow, private link, azure files networking, ANF networking.

• Networking Scenarios:

1: Hub&Spoke
2: vWAN
3: Traffic inspection: NVA, secure hub, azure firewall (forced tunneling).

• General design considerations and recommendations:

Hub-Spoke vs vWAN
AVD Ports and protocols requirements
AVD Bandwidth and latency
AVD Internet connectivity (Outbound)
Zero trust on AVD networking Security
Plan for IP addressing
DNS
Native vs Short path

from avdaccelerator.

Network and topology doc created and submitted including diagrams for scenario 1.

PR submitted: https://github.com/MicrosoftDocs/cloud-adoption-framework-pr/pull/2988

from avdaccelerator.

Pending:

• Scenarios
  -- Zero-trust: NSG/ASG for micro-segmenting east/west and forced NVA/AzFW in the hub for north/south
  -- RDP Shortpath
  -- NVA/AzFW in the hub to control north/south specially internet outbound
  -- Cross-region example

• Subjects:
  -- Network policy driven governance
  -- Monitoring
  -- Plan for IP addressing
  -- Internet inbound/outbound filtering options
  -- Micro segmentation
  -- Network security

from avdaccelerator.

Moving this issue to complete.

New issue created for networking docs and scenarios updates (#71)

from avdaccelerator.