---
# System prepended metadata

title: Cloud DMZ note

---

# Cloud DMZ note

## What's Cloud DMZ?
* [軟體定義網路：雲端 DMZ](https://docs.microsoft.com/zh-tw/azure/cloud-adoption-framework/decision-guides/software-defined-network/cloud-dmz)
* [What is Azure Web Application Firewall on Azure Application Gateway?](https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview)
* [周邊網路](https://docs.microsoft.com/zh-tw/azure/cloud-adoption-framework/ready/azure-best-practices/perimeter-networks)
## Why?

## Benefit?

## Design
* [Azure best practices for network security](https://docs.microsoft.com/en-us/azure/security/fundamentals/network-best-practices)
* [Designing a DMZ for Azure Virtual Machines](https://petri.com/designing-a-dmz-for-azure-virtual-machines)

## How?
* [實作安全的混合式網路](https://docs.microsoft.com/zh-tw/azure/architecture/reference-architectures/dmz/secure-vnet-dmz?tabs=portal)
* [Implement a secure hybrid network](https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/secure-vnet-dmz?tabs=portal)
* [部署高可用性 NVA](https://docs.microsoft.com/zh-tw/azure/architecture/reference-architectures/dmz/nva-ha?tabs=cli)- NVA 通常是用來控制從周邊網路 (也稱為 DMZ) 流至其他網路或子網路之網路流量的流動
* [Build DMZ in Azure Cloud](https://araihan.wordpress.com/2018/10/03/build-dmz-in-azure-cloud/)
* [DMZ with NSG example](https://azure.microsoft.com/zh-tw/resources/templates/dmz-nsg/)
* [使用 NSG 实现 DMZ 区域](https://docs.azure.cn/zh-cn/articles/azure-operations-guide/virtual-network/aog-virtual-network-use-nsg-dmz)

## Reference
* [實作安全的混合式網路](https://docs.microsoft.com/zh-tw/azure/architecture/reference-architectures/dmz/secure-vnet-dmz?tabs=portal)
* [軟體定義網路：雲端 DMZ](https://docs.microsoft.com/zh-tw/azure/cloud-adoption-framework/decision-guides/software-defined-network/cloud-dmz)
* [Implement a secure hybrid network](https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/secure-vnet-dmz?tabs=portal)
* [部署高可用性 NVA](https://docs.microsoft.com/zh-tw/azure/architecture/reference-architectures/dmz/nva-ha?tabs=cli)- NVA 通常是用來控制從周邊網路 (也稱為 DMZ) 流至其他網路或子網路之網路流量的流動
* [What is Azure Web Application Firewall on Azure Application Gateway?](https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview)
* [Build DMZ in Azure Cloud](https://araihan.wordpress.com/2018/10/03/build-dmz-in-azure-cloud/)
* [Azure best practices for network security](https://docs.microsoft.com/en-us/azure/security/fundamentals/network-best-practices)
* [周邊網路](https://docs.microsoft.com/zh-tw/azure/cloud-adoption-framework/ready/azure-best-practices/perimeter-networks)
* [使用 NSG 实现 DMZ 区域](https://docs.azure.cn/zh-cn/articles/azure-operations-guide/virtual-network/aog-virtual-network-use-nsg-dmz)
* [Designing a DMZ for Azure Virtual Machines](https://petri.com/designing-a-dmz-for-azure-virtual-machines)
* [DMZ with NSG example](https://azure.microsoft.com/zh-tw/resources/templates/dmz-nsg/)
* [Can you have an event hub in a virtual network DMZ?](https://stackoverflow.com/questions/65868429/can-you-have-an-event-hub-in-a-virtual-network-dmz)
* [Network security for Azure Event Hubs](https://docs.microsoft.com/en-us/azure/event-hubs/network-security#bind-event-hubs-to-virtual-networks)