Hi, it's Bridget. There is a great deal of knowing here Right here and right now Knowing I'm gonna connect in with the vibrational energy of knowing We're gonna use that Like a spiral ladder, you know like a little staircase Going from one level to the next whether it be in a home a boat a Little cabin on the lake whatever it may be a visionless little spiral staircase That is wrought iron that you hold on to with your hands And the bottom you can feel your bare feet on the wood As it creaks a bit when you step down each step Knowing knowing stepping in To the level of your being connected to your knowing Knowing Hey, it's Bridget. This is an episode of Sunday morning coffee with Bridget. I hope you enjoy this podcast audio series Today, we're gonna focus on this topic of knowing so follow me into this space We're gonna do something a little bit different today We're gonna activate with intention this energy of knowing knowing As you breathe in and exhale out you have permission to be fully present in body To just listen to this audio or to actually close your eyes and make it meditative. It's your choice listeners choice Breathing in and ex exhaling out Allowing natural rhythm Natural patterning in your breath to form So that it is most supportive for you and whatever it is that you need at this moment At this time the pace of your body will rise to meet to your every need and so there is trust here Knowing that your body is present for you and Helping to hold your space as we continue to climb down the spiral staircase. It's only two levels. It's not that much We're just stepping into a cooler More open solarium like area with lots and lots of windows and a patio if you choose to sit out On the back patio, you are welcome to find your way there You prefer the indoors and the climate controlled energy Find one of the comfortable seats inside noticing the physical body responding to this energy knowing as you co-create this space Utilizing your mind your brilliant imagination creating the textures the colors Using your senses to feel the warmth of the light Managing the temperature around you noticing the energy changes Making and creating the space is comfortable for you. This is your knowing You know what you need, you know how you like to feel, you know how you like things to be arranged You know what you need at your comfort level in Order to be part of a meditation You know what you need at your comfort level in order to listen to a podcast So no matter where you are you are welcome Acceptance is here in knowing breathe in with intention exhale out Energy vibration of acceptance is now present with the knowing Here is a question for you Can you accept to this knowing? can you accept this knowing This knowing that is yours all yours completely yours wrapping you and holding you encompassing you in safe and sacred space This knowing within you This beautiful bright and vibrant sunny place Managed by you your spirit Can you accept this knowing? Is there more here in this phrase the sentence your higher self your spirit self has more to say more to share Can you accept this knowing as? Your truth your power your light Can you accept this knowing as an amplification of wisdom? Rising up within you to greet the thoughts in your mind To encircle them to create a positive glowing ring of yellow to bring the soul intuitive knowledge Into the mind with this golden yellow stream connected to that chakra in your belly called solar plexus That is also yellow and golden light collaborating with your thoughts interwoven supportive positive subtle nudges Leaning Toward the optimistic feeling into the waters of hope Can you accept this knowledge? The knowing is the process of you becoming more Comfortable with yourself more comfortable with the sacred self at your center core this Incredible brilliant vibrant light. It is difficult at times to believe this is you, but it is you Do you know this is you? This is you your creation You're meant to be your purpose here The connection Do you know do you know is you're knowing about connection? Do you understand that the desires that you seek external are within you? Do you accept this knowing? Can you can you? Accept this knowing it's a choice knowing is a choice acceptance is a choice The acceptance of your knowing is a powerful stream of consciousness of the acceptance of your knowing means you are here in The moment you are present you are in the now It's a bold statement Yet so simple so tiny so minute and gentle that you could barely Be cognizant of it in your day-to-day life unless you ask yourself this question That will activate this vibrational energy in this meditative tone Can you accept this knowing right it in your journal? Can I accept this knowing can I accept this knowing first it is can I? then The energy of the process unfolds to teach you and show you how to first it is can you then it is how to knowledge and wisdom and knowing unfolds and Weaves a pattern To support you Can you accept this knowing? That is the step. This is the step This is the place to connect into your center core power and then with the Intuition of the knowing inside of you in the alignment with the knowing within Then The how-to begins to show up But the acceptance of the knowing is the step number one. You are here now What do you choose? You will be asked? Within your consciousness over and over again. Can you accept this knowing? Can you accept this knowing? Can I accept this knowing? Can you live your life now? awake Knowing that you are connected you can be aligned and that it is you that is making choices That are moving the energies around you out of an into alignment both that you are really in control the control you seek external is Truly already in existence inside of you and external efforts are futile Too many variables too many inputs Too much uniqueness within you the individual Individualism in your intuition is known to you. There is a series of encodements. There are beautiful Chakra points and meridians and just an incredible weaving of golden light energy that honors The light that pulses through you that gathers and clusters and forms sacred shapes and energy within you to support you You don't even have to know this in your conscious mind. You just have to accept the knowing of this Can you accept the knowing of this can you accept this knowing?  You cannot look directly at it because it is not a one source It is a one mess And it's pure connection pure positive light energy and that is you at your center core. That's what you're made of This is who you are. This is Can you accept this? Knowing it's an invitation. It's not a request Invitation is by choice This is how to Choice is the how to And it will unfold it will rise to meet you No more seeking outside Only joyful connection expansion Coming from you at the center the core of you Moving through you and with you in alignment This is what you are seeking. Can you accept this knowing? I know this is a powerful Energetic conversation activation some of you will use this as a meditation some of you will drop right into it For some this might seem really woo-woo, and that's okay.  It's my pleasure to be able to help you on this journey I'm a psychic plus life coach and I can be found on fairy grasshopper channel on YouTube on above-life channel on YouTube and On Facebook and Instagram at Bridget inspired Thanks so much for listening to this Audio for Sunday morning coffee with Bridget. I Hope this helped you support you and serve you To inspire your spirit to fill you with hope because this is your life after all it's your life So let it Just listen thanks for listening


Deployed soldier comes home to wife, has no idea she's been lying. Jake entered his front door. Beyond excited to see his wife again. But to his surprise, she wasn't there waiting for him. Perplexed as to why she wasn't, he put his keys and bags down on the counter and called for her. There was no reply. Then he heard a strange noise.  He tentatively strode towards it. He turned the corner and his heart stood still. First lieutenant, Jake Oslo, from Houston, Texas was finally back from a long deployment overseas when his life took a sudden and irreversible turn. He was getting off his third and final flight of the day. It was a long and tiresome journey. All Jake was looking forward to now was embracing his wife who he hadn't seen in a year. But his long-awaited reunion wouldn't be quite what he expected. Jake met his wife, Megan, four years ago through mutual friends. They hit it off right away and have been caught up in a whirlwind of romance ever since, or so he thought. They got hitched a little over a year ago. It was the happiest day of Jake's life. The following weeks felt like a dream, but as the saying goes, all good things must come to an end. A few weeks after they got married, Jake received the news that he was to be shipped off to fight in Afghanistan. It was a tough blow for the newlyweds. He was to be gone for a long six months. Megan bid Jake farewell with the pain of knowing she wouldn't see her husband for six months. Little did she know how fast things change. Megan found the long distance hard, even more so than Jake. And this bothered her. She wondered why he didn't seem to find the distance as hard as she did. In Megan's mind, it meant that he didn't care as much about her. Tension began to grow between them and things went from bad to worse. Jake first noticed Megan act differently around three months into his deployment. It was when the distance really started to affect her. She became more agitated, it was like he always said the wrong thing. Jake knew they would have a very trying few months ahead of them. But he had no idea what was coming. Just when Jake thought their relationship couldn't get any more strained, he learned that his deployment would be extended for another six months. Still, he didn't worry. He was devoted to her and was confident that she felt the same way. His faithfulness was admirable but was it misplaced? Time was about to tell all. To no surprise, the extension came as another hard blow for Megan. Jake recalled how she broke down on the phone. She was crying inconsolably. It almost felt like an overreaction to Jake. He wasn't dying after all. But for Megan, this news was more than she could bear. And the final straw. From then, she made up her mind. There was no way back from this. Since then, when he'd call her, something seemed off, but he couldn't quite put his finger on it. Yet, when he asked if anything was wrong, she would reassure him that everything was fine. But it was a lie. She had resolved to detach from him and soon more secrets and lies lay between them than stars in the night sky. But just like seeing the stars, Megan's lies were impossible to see during the warm sunlight of the day, of her bright smiles and affectionate coos. Jake was none the wiser. But as he drove towards his house, these lies were about to welcome him home. He was expecting to burst through the doors to an adoring, tearful wife, but that's not what happened. Jake entered his front door, perplexed as to why she wasn't there to greet him at the door. He settled his keys and bags down on the counter and called for her. With no reply, he started to worry. Then he heard a strange noise. It sounded like a whisper. A low deep voice coming from the kitchen. He tentatively strode towards it. He turned the corner and his jaw dropped. Jake walked into a gathering of close friends and family all around his wife. But it was what was in her arms that made him gasp and freeze. It was a baby. But just as he started to compose himself and walk forwards, he heard another baby cry from across the room. Jake watched as his mom walked towards Megan and settled the other baby on her lap. Megan gave birth to twins. Jake rushed over to her completely gobsmacked. Tearfully, he asked her. Is this why you were so upset with me? Yes, she said. I really wanted you to make it home for the due date. I decided not to tell you so you wouldn't feel as bad. I wanted to surprise you. But maybe I should have told you, she confessed. His reaction? Everything made sense now. Megan's agitation, her emotional reaction to his extension, as well as his feeling that something wasn't right. Jake scolded her for not telling him, but he couldn't be mad. After all, she thought she was doing the right thing for his sake. She must have struggled. But now, he stood in wonder at his sudden escalation to fatherhood. I rounded the corner and froze at the door. I didn't know what to say. I was giggling like a little schoolgirl, Jake said recalling the moment he saw his twins. It was unreal, unlike anything I've ever felt. Looks like Jake's unblinking faith in Megan and his relationship paid off.


What's going on everyone Sam here with late sports cards have been 23 tops tier one baseball hobby 12 box case number 16 Random division style. There's a look again at your random results as always could find those on the website under the results tab As well as a link in chat. So good luck. Let's do it here. Uno Not see a knob Or a barrel bear Hold a couple of barrels last year actually hold up. I remember Reese Hoskins and hobby bias. I think for the two barrels Hold up Once it stays Petalanzo barrel or knob is disgusting Yeah, I had a little polar bear picture on it too. That's so sick. All right, starting off Jack Flaherty going to the NL central 175 out of 400 Grats on that one there NL central To 149 Dale Murphy. Nice one there for the NL East 129 out of 149 by way of the Braves And AL West to 299 J. Josh Smith aka J. Smoove J. Smoove on the rookie auto congrats there AL West 39 out of 299 J. Smoove All right again next one here everybody. Let's do it. Let's do it. Very Walker 195 out of 400 There you go. Congrats Rockies NL West NL West Got AL East Donnie baseball Don Mattingly 65 out of 149 NL West rookie auto 22 out of 299 Matthew baton Open right there starting off Shohei 41 out of 99 AL West Shohei Otani on the game use Jersey very nice one there Grats on that AL West Got a carry bonds carry carpenter 37 out of 299 rookie auto for the AL central carry it carpenter Nice one there congrats AL central and then NL East to 249 is David Cone tier one talent to 38 out of 249 Dude that's insane. Well, who are they playing the Lakers? That's wild. They have no folds. No Wendell. I don't think no Wendell's out He's up the next three games. I think Let's go bro, come on Let's go Atlanta Reese Hoskins 281 out of 400 NL East nice one there a game used joysie Casey with a spot in mosaic choice. That's down to eight eight to go on mosaic choice now everybody. That stuff is loaded I'd like four nebulas out of this on the year Bobby Whit jr. Jersey auto 28 out of 99 For the AL central nice one there Greg B. Witter that rookie auto NL central 83 out of 299 cannon Smith and jigba Despite popular belief. He is Jackson's brother is John Carlos Stan 121 at 400 Nice one there for the inks AL East This one here going to Keith in the NL central 10 of 10 silver, Inc. Auto Joey vato Tier one talent. Unfortunately, did just they did just decline his option today So you will not be a Cincinnati red anymore. Wow Dylan Johnson again. Yeah, that was a great throw and a great catch right there, too And I was a rush great play to get in that's what I meant Right when I looked up, I thought the ball is dropping in that's why He's in dude, I think he's in the for sure and Josh Winchowski to 80 of 299 rookie auto for the Red Sox AL East Wendell Carter Johnson out means one thing. Oh geez. What does that mean for us? What does it mean? No, hey at least nice one there Josh Winchowski Go go batata minutes jingles coming in at some point go go batata It's we're five games in we're already getting meaningful go go batata see minutes unbelievable Unbelievable unbelievable, dude One so don't 23 out of 400 for the NL West Like Jonathan picking up a hockey spot as well God eight of 25 George Springer on the bronze Inc. Grats on that one there Elise yeah, yeah, yeah pretty much. I mean very true and Rookie auto and Elise the 299 Mark Appel Mark Appel nice one there. I don't yeah I'd like that just sounds like an injury waiting to happen remarks when we already have enough of that You know, I think I think the Inc. You should get Bellinger That's why I would like the Yankees to get put that belly in center field, dude Man because he's expected to opt out apparently Or no, he's did he just sign a one-year because Dan's view is what I thought sounded long-term. I want I want Cody Bellinger Will Sin Contreras, I was gonna be too mixed up William is on the Brewers I just went there Wilson Contreras the 499 for the Cardinals so much easier when they're on the same team So they both moved Of course Contreras signed and William got traded Nice one here to 149 ALS Corey Seeger on car tier one talent auto. Good time to get that Really good time to get that. Grats on that to 149 and Cody Clemens 287 out of 299 going to the NL East and L East Cody Clemens got Francisco Lindor to 199 Nice one there for the NL East Louis Hamilton No, all the catchers said they love when it comes up to back because he smells good You can make this one to 299 Michael Harris nice one there rookie auto to 299 and at least that is Greg Good stuff Greg. Let's go Greg. There you go, buddy with the NL East Greg M Very solid hit there 94 out of 299. This one's pretty cool and a West 4 of 10 Tommy John Very cool. Nice one there on the silver ink auto 4 of 10 A while to have a surgery named after yourself and 250 Michael Brantley ALS 34 of 50 Part of so many very low-key important part of a lot of those Astros championships was my humble opinion All right, everybody again, we've got just seven ago Star Wars black seven to go Seven to go and six to go on galaxy And then after that the only thing we have left to fill is the two football breaks at the end got NT and we've got mosaic choice Both of which are getting very close. All right, we've got Bobby wit Jr. To 400 nice one there for the AL central That's a L central and then Miguel Cabrera also for the AL central game used back to 400. It's one there Miggie We've got to 299 rookie auto going to the NL West Miguel Vargas Miguel Vargas and then NL Central 34 of 199 Jack Flaherty Adley Ruchman game used Jersey There we go AL East nice one there on the rookie That's AL East Adley a Ruchman NL Central is gonna be a Scott Rowland 185 out of 199 Scott Rowland and it to 299 NL Central as well Lee over at Paguerro rookie auto 73 out of 299 Lee over at Paguerro It's just me is that kind of reminds you of those stupid S's we used to do doesn't it kind of look like that doesn't kind of look Like that a little bit Not shocking Aaron judged a 99 Nice one there for the Yankees AL East whenever you whenever you say something and it's it's like You say my dad followed by something usually I'm not shocked I would ever you tell me at this point 750 AL central is Lou Bob Louise Robert nice one there and the nice one here NL East to 299 Heavenly Evan Lee Evan Lee on the rookie auto 263 out of 299 See a banger in this last box now We've got Paul Canerco that is gonna be to 400 It's a boarding. It's a boarding. How's it going? Nice one there AL central and Ozzie Smith game use bat to 200 NL Central By way of the St. Louis Cardinals Ozzie Smith We've got AL West Asturi Ruiz Rookie Auto Congrats AL West 224 out of 299 Asturi and then Lyme address 18 to 25 bronze ink rookie auto also going to the AL West That's on that AL West. All right start with our relics here We've got Paul Canerco Ozzie Smith Aaron Judge Adley Rushman Miguel Cabrera Bobby Whit Francisco Lindor Wilson Contreras Juan Soto Giancarlo Stanton Reese Hoskins Shohei Otani Larry Walker and Jack Flaherty Autos now we've got Asturi Ruiz Blime address Evan Lee Lou Bob Scott Rowland the over baguero Miguel Vargas Jack Flaherty Michael Brantley Corey Seager Cody Clemens Mark Appel hit Josh Wanchowski Jackson Smith and Jigba. No, no not Jackson Cannon Smith and Jigba. Carrie Carpenter David Cohn Don Mattingly Matthew Batten Josh Smith Dale Murphy Bobby Whit George Springer Tommy John Joey Votto to 10 and then rookie auto 299 Michael Harris and at least 94 out of 299 that'll do it for the break everybody. Thanks again for the fill up next is basketball


Hi, welcome to another episode of Azure Unblogged. Today, I'm really excited to talk about AVS landing zones and some of the networking topologies that are available within it. So stay tuned. I have two special guests here to talk about their experience. Sabine, nice to have you on. Hi, I'm Mahesh. How's it going? I'm Sabine Blair. I'm with the customer of Global Architecture and Engineering Team, CAE, say that really fast. What I do is I have a customer facing an engineering role. So really helping customers with their designs and architectures to end-to-end patterns using the VMware and Azure solution. That's great. Mahesh? Yeah. Thank you, Amy and Sabine. It's great to be with you. My name is Mahesh. I'm a Cloud Solution Architect. I work with the global partners and then help them successful on the AVS engagements. Besides work, I do love my team. So don't mind if I drink my tea during this presentation. All good. I love tea too. Good. Let's talk something about AVS. All right. Let's do it. Sabine, so I'm assuming with networking, there's a bunch of building blocks. What from your perspective are those building blocks? Sure. Well, first and foremost, this really comes down to what the customers are trying to do. They're coming in with many different scenarios. They could be coming to AVS to extend their on-premise data center or they could be coming into migrate workloads. But either way, this solution really helps them to facilitate their hyper-Cloud desires and really put together an end-to-end footprint. That's exactly what a landing zone is, depending on where you land, can really facilitate how your different architectures look. One of the key components that you get is this Azure Dedicated Express Route. This is a 10-gig circuit that comes as soon as you spin up your AVS solution. This is not an additional cost. This is not an additional thing you have to add from a third-party vendor. This is something that you're getting directly from Azure. That comes with a great benefit. You get that 10-gig circuit, but unlike other vendors, we don't rate limit this. Within AVS itself, you have your ESXi hosts. Those ESXi hosts have four NICs, two for management and two for workloads. Those workloads are going at 25 gigabits per second each. When you do some optimizations on the AVS side and on Express Route side, you can get a much faster connection. Then we also have NSXT, and this is something that a lot of our customers who are using VMware already are pretty familiar with. This is the management portal, so this is what's going to help them do their static and dynamic IP addressing of their workloads. This is what they do their DCP, their DNS, their segmentation for different CIDR blocks that they're going to use for different workloads or to be dev or on production. There's a lot of things. This is a very powerful robust tool that we're really excited to have on the solution. They also get the T0 and the T1 routers. Again, that's something that's native to NSXT, where you basically have your workloads, and they communicate with those T1 routers, and then they'll communicate with the T0 router. That T0 router sits right at the edge. That's the physical uplink. Then the T1 routers is what connects to the actual NICs for those workloads. It's responsible for managing that east-west traffic between those workloads and your software-defined data centers. From there, we have network virtual appliances. This is interesting because this can be something that you use natively within NSXT. But this is something as a customer, you have the freedom to bring in as well, whether you have a license for one already on-prem, or you want to get a virtual appliance up and going in NSXT itself, in your software-defined data center, or if you want to have this in Azure. We'll see in some of the different diagrams we have later on, that we have different flows for where you want to have that traffic inspection occur, which is why you would use a network virtual appliance. With that said, if you do use that network virtual appliance in Azure, you're going to need a third-party device to do a layer three, to have some user-defined routes. That's where Azure Routes Server comes into play. That's that appliance that's going to allow you to have those user-defined routes so you can really communicate and have that flow from your NBAs to wherever it is that you want to go and have that traffic inspection. Then lastly, but not least, we also have the option for customers to use Azure Firewall. This is something that we really help to make easy for customers, because right in the AVS portal, you could just say internet enabled and your workloads were able to communicate with the internet, but that's something that's for POC because you will not be able to see that traffic and you will not be able to manage those firewall rules. This is where Azure Firewall comes into play, right in the portal, you could deploy a secure VLAN hub, configure your rules, report 80, report 443, and that route from AVS would take precedence to that Azure secured hub and then out to internet where you get that nice robust, stateful traffic inspection to help meet your security needs. So a lot of moving blocks here, a lot of things that we're excited to talk about. Yeah, that's great. Wow. So with so many components or building blocks, how does that look when it's like all put together for a customer? Yeah, and that's a great question because that is the question. That's what a lot of customers are asking us. Where exactly do we see all these different things coming into place? And it really comes into place when we think about where is it that they're trying to connect to and where is it that they're trying to go? So for example, like say you have your workloads and you're in the software defined data center, how do you communicate to workload in another software defined data center? And now we have something under a hood called any connect. And what any connect does is that underneath the hood, it's a nice full mesh point to point route leak within the AVS network itself. And that has like a tunnel that will go between those software defined data centers. Now, if you want to go outside of AVS, let's say to your Azure vNets, this is where again, you're hitting that edge. You're going from your direct connect, you're hitting that Microsoft dedicated edge. And from there, you're able to go to your Azure vNets and you're also able to go to your on-prem. And the way you'd go to on-prem or a different co-location data center is that in between those circuits, they are paired with something called global reach. So global reach is an attachment that's at your end of your express route circuit. So let's say that you have your on-prem data center and you have your AVS, your on-prem data center is going to get a direct connect, could be from vendor, could be Azure direct, but that's going to terminate with an Azure at an edge. And then it's the same thing for your AVS solution. You're going to have a direct Azure dedicated circuit, it's going to hit the global reach and then those two circuits can peer. So now you're right in the backbone, you're not going over to internet, you have like an Azure backend to have that communication end to end. Some things that we also see as well, customers looking for that traffic inspection, they could do so using the Azure firewall rule and that public IP option. So when you go to AVS and you select that public IP option, whether it be in the portal or through automation or even connected to an existing, you know, Azure VLAN, you're going to get that Azure VLAN hub, you're going to get that firewall, you're going to get those stateful rules and policies allowing you to have that traffic inspection and you're going to have that route that's going to take precedence to your internet. So that Azure firewalls was going to advertise that QuadZero to the internet. So different communication that you can even have even within Azure VNets, right? Because customers are excited to use things that are Azure native as well, they might want to start using like, you know, storage accounts and whatnot or Cosmos DB or Key Vault. So your Azure VNets can be configured in the hub and scope topology or again using that secure VLAN hub. And this is where we really see customers looking to have those different things that they can do to connect securely. That's great, wow. So speaking of like a network virtual appliance and we're talking about VMware, are there, if I'm currently using something on premises like a third party NVA, can I use that in AVS? Yeah, absolutely.  And that can really dictate where you put that network virtual appliance. So say for example, we see this is a really popular demand with customers because they may already have a network virtual appliance on premises. And if they do that, what they can do from there is just have that traffic inspection initiate from on-prem to their Azure VNets. Also, if they're in the software defined data center itself, they could use NSXT natively, but they also have the option to use a network virtual appliance that they just, you know, spin up on a virtual machine or just spin up an appliance within the software defined data center itself. So they could do that traffic inspection between their workloads East-West, but they could also have that traffic inspection where we're saying is North-South, you know, going out to those Azure VNets. Where we do see things get complicated is when they want to have that traffic inspection end to end from on-premise to your Azure VNets to your AVS, so that whole, you know, solution. What we see customers do there is one, if they don't have like the Google reach available to them, they disable it. And therefore that doesn't take precedence. So your precedence literally of your route is going to Azure, but you need to have your traffic inspection happening on both sides. So you need traffic inspection coming into Azure, boom, network virtual appliance. Then you have AVS going into Azure, boom, network virtual appliance. And then how those communicate with each other is now they need that layer three device, which would be the route servers. So that would either set up like the VXLant tunnel or EBGP, but both ways, you know, now you have that end-to-end traffic inspection. That's great, wow. Okay, so I think Mahesh has the slides like showing us the connectivity to share with us. And I have a question for you, Mahesh. Can I use my third-party NVA? Sounds like I can use my third-party NVA, but is there something at like, I can use that directly integrated in AVS? It looks like there's a lot of Azure tools that are already built. So is there anything like that? Yeah, absolutely. And we're coming back to your question and you use your favorite third-party NVA directly integrated with AVS, absolutely you can. So let's take a look at how that scenario would look like. So as you can see on the screen, you don't have any NVA running inside of an Azure Virtual Network. Instead, you will see that your favorite third-party NVA is running inside of an AVS SDBC here. And this is a great place to actually run the NVA because then you can sort of carry on your operational processes that you might have created around specific feature set of your NVA, or you have plenty of policies that you might have created based on your on-premise location and you want to carry forward those policies into AVS as well. So yes, absolutely you can run your NVA directly integrated with the AVS SDTC. So let's take a look at some of the major network flows and let's start with the connectivity with on-premise environment. So the connectivity with on-premise environment is again established using ExpressRoute Group of Reach. So this is the feature or service that connects the AVS ExpressRoute Circuit with the ExpressRoute Circuit that you already may have which connects your on-premise environment with Azure. So no change there. Let's move into the e-grace traffic now and then again the e-grace traffic would originate from the AVS guest VMs. So the traffic would originate from the guest VMs inside of an AVS SDTC. It will traverse through this NVA and this is where you can run those policies, you can inspect your traffic and then do all the things that you otherwise would have done from your on-premise environment. Once the traffic is deemed to be good, then it traverses through the tier one and tier zero gateways and then reaches to the AVS ExpressRoute Circuit. And from the ExpressRoute Circuit that is associated with AVS, it breaks out into the internet. Now, one thing to note here is that the scenario one which Sabin covered earlier, the scenario differs that instead of routing that traffic through an Azure firewall which would have been integrated with VirtualVan, the internet breakout happens directly from the AVS ExpressRoute Circuit. So that's the egress traffic, Amy that you can sort of take a look at when using your third party NVA. Now, the other two important sort of traffic flows are let's talk about the ingress traffic and let's first begin with the non-HTTP or HTTPS traffic. So this traffic would originate from internet and the Azure firewall which is integrated with the Azure VirtualVan. From there, the traffic would flow on to the AVS ExpressRoute Circuit and then over to the tier zero and tier one gateway. And it will hit this third party NVA once again. And again, you have an opportunity where you can inspect that traffic. If you want to do any processing, you can do that. And then if everything is all right, then it will hit those backend VMs for the final delivery. So that's the ingress traffic on HTTPS and HTTPS protocol for you, Amy. That leaves the last important traffic flow which is the traffic flow around or on the HTTP or HTTPS ports. Now, just like in the previous network flow, the traffic would originate out in the internet somewhere and here it would terminate on an application gateway. So application gateway is the service that provides the services like WAV or SSL termination. And once that is done, then the traffic is routed over an ExpressRoute connection back into the AVS ExpressRoute circuit. And from here, it takes its usual path through the tier zero gateway, then back to tier one inside your NVA and a backend VM that might be serving that request. So overall, this is how that scenario would look like Amy where you can run your NVA directly integrated with the AVS SDTC. Wow, that's great. And I like all your drawings of the paths that helps visualize the network traffic. Yeah, I hope it was useful. Oh, yeah, definitely. And then, so if I wanna inspect all like internet bound traffic from AVS but I wanna do it on premises, can I do that instead? Absolutely. This is exactly what the scenario depicts. So, so far we have looked at the NVA placements in multiple places. So let's sort of compare those scenarios with this. So just like in the previous case, as you would see here, there are no NVs running inside of Azure Virtual Network. There is no virtual band or there are no NVs running inside of an AVS. Instead, you would notice that your NV is now running from an on-premise location. The one thing that we'll have to note here is you will have to ensure that the quad zero route is advertised over to Azure. Now, this can be done over an express route circuit that you already might have. So this is the only thing that will have to ensure Amy that you do before you take this scenario or before you make this scenario operational. Now, just like in the previous sort of scenarios, let's take a look at some of the important network flows and then let's begin with once again the on-premise connectivity. So just like in the previous scenario, the on-premise connectivity is established using ExpressRoute Global Reach. This is the same service that connects the AVS ExpressRoute circuit with your existing on-premise ExpressRoute circuit. So no change there. Now let's move on to the egress traffic, Amy. And once again, for the egress traffic, the origin would be an AVS STD CPM. So the traffic would originate from that VM. It will pass through the tier one, tier zero gateways and then hit the AVS ExpressRoute circuit. From here, it traverses over the ExpressRoute Global Reach and to the on-premise ExpressRoute circuit and eventually reaches the NVA that is running from the on-premise location. And from here, it will break out into the internet. Now, the reason why this happens is that quad-zero route that I earlier talked about. Because you are publishing that quad-zero route from your on-premise location into Azure, that same route will be honored by AVS. And that's how basically AVS knows that it has to route all the traffic to your on-premise NVA for internet breakout from that location. Does that make sense, Amy? Yeah, that's the default route. Absolutely. Okay. So yeah, let's move on to the egress traffic now. And then let's once again begin with the egress traffic on, let's say, the non-HTTP or HTTPS ports. And this would typically, or protocols, this would typically include traffic on, let's say, RDP or the TCP ports. So here, the traffic would again originate from internet. And it would hit your NVA running from your on-premise location. From there, it will take its usual path to the on-premises extra south circuit over the global reach on to the AVS extra south circuit. And from here, back to AVS through the T-zero and tier one gateway. So no chain there. So this is how the, let's say, non-HTTP or non-HTTPs traffic would be handled. That leaves us the last network flow, which is basically talking about the egress traffic on HTTP or HTTPS protocol. And just like in the previous mode, the traffic would originate somewhere in the internet. Now, instead of routing it to firewall, we would recommend that you route it over application gateway because this is the service that, as you talked about, provides you the protection against the common web attacks. It also provides access to the termination. So all the great options when it comes to processing your web traffic. So once the traffic arrives at the application gateway, then again, using an express route connection, it would go to the AVS express route. And then from AVS express route, it would go to the tier zero, tier one gateways and back to the backend VM that will actually serve that web traffic for the users. Back to you, Amy. All right, well, great. I mean, it was great to learn about these four scenarios that you both have seen. What are some key takeaways? Obviously, networking and security are really important. So as part of an AVS landing zone, what would you say is like a key takeaway for someone listening today? Yeah, absolutely. And just to do that, I'm not limited to these four scenarios. Depending on the customer needs, there's plenty of scenarios. So these are really here to be prescriptive. So as long as customers really understand the building blocks, they know the different things that they'll be able to design. Gotcha. Yeah, absolutely. And coming back to your point, Amy. So this is, I would say, what our audience should sort of take away from this session. So remember that from the AVS perspective, the key components are Azure Virtual Ban, Azure Firewall and Application Gateway. So these are some of the Azure native services which facilitate in-grace as well as e-grace traffic flows from and to the AVS SDTC. So pay attention to that. Obviously, NVS play a huge role in the whole AVS networking. As you saw in those some of the key scenarios, NVS can be put or deployed inside multiple locations. You can run them from the Azure Virtual Network or directly integrate with AVS SDTC. Or if you want, you can run them from your on-premise locations as well. The other important thing to be aware of are the expressed-out circuits. And as Sabine earlier talked about, expressed-out circuits are that clue which connects the on-premise side with the AVS SDTC through global reach. So that has to be enabled in most of the scenarios. The final thing to be aware of are the quad-zero routes. Now quad-zero routes essentially determine how the internet breakout happens. And then specifically in some scenarios like virtual ban, those routes gets top-overted to your on-premise location. Now that means that all the internet-bound traffic might have to be routed to Azure and you may or you may not want that. So please pay special attention to the quad-zero routes. If you looked or as seen in the scenario four, in some cases you would actually deliberately want to push or advertise the quad-zero route from your on-premise location to Azure so that you can have the internet breakout from your on-premises location. So pay special attention to the quad-zero routes. And a quick summary in scenario one that we discussed, we looked at Azure Virtual Van as the key service. In scenario two, we looked at NV which was running from a Azure virtual network along with an Azure route server. In scenario three, we looked at the NV which was directly integrated with AVS. And finally in scenario four, we looked at an NV which was running from an on-premise location. So that's a quick summary I would say, Amy, for our audience. That was great. Yeah, I learned a lot. There's so much to take in. And then do we have a final slide to share with the architecture you referenced? Okay, great. So we have the AVS landing zone, reference architecture, implementation and guidance. And I thank you Mahesh and Sabine for joining me today and sharing your in-depth knowledge. This was great. And for everyone watching, you can definitely get the slides from today and any links below. And I just want to thank you again. Thanks for joining. Anytime. Thank you. Thank you. So goodbye. Have a good day. You too. Thank you.