$ whoami christoph # Senior Cloud Architect · Microsoft Azure MVP
I’m Christoph, Senior Cloud Architect for Azure. I design and build landing zones, policies, VNETs, routing, DNS, firewalls and Private Endpoints for enterprise customers, and ship them as code. Along the way I write down what I learn: the fixes, the gotchas and the occasional rabbit hole.
20+ years in IT · Azure since 2019 · Microsoft MVP Azure Networking since 2025 · Speaker at community events
A terminal UI that streams Azure Firewall logs live from an Event Hub and explains which rule decided a flow, so you stop waiting for Log Analytics during troubleshooting.
Use the Azure Firewall Header Insertion to secure your environment against accessing foreign tenants.
Ein Hub-and-Spoke-Netzwerk in Azure mit einem AVM-Pattern-Modul aufbauen: Adressplanung, Firewall Policy und Firewall-Regeln Schritt für Schritt.
Festive Tech Calendar 2024: connecting regional Azure hubs in a full mesh while keeping spokes isolated, with careful IP planning and simple route tables.
Default outbound access for Azure VMs is on its way out. A look at the alternatives: public IP, load balancer, NAT gateway and firewall.
How to find the best fitting Azure RBAC role for a job by searching the role assignment dialog for a specific permission.
Small open-source tools for Azure, mostly things I needed myself in projects and figured others might need too.
A terminal UI for live log monitoring of Azure Firewall: tail -f for your firewall, with instant filters and a trace of which rule matched.
Checks from macOS or Linux whether RDP Shortpath works for Azure Virtual Desktop and Windows 365. An unofficial avdnettest.exe counterpart.
Wildcard certificates via the ACME dns-01 challenge. A maintained drop-in replacement for certbot-dns-azure.
No talk this time, just coffee and good conversations about Azure, networking and whatever keeps you busy. At the SoftwareOne Innovation Summit 2026, Pyramide Mainz.
Öffentlich oder privat? Die richtige Netzwerkanbindung für Azure-Dienste
Azure Firewall im Betrieb: Traffic, Routing und die häufigsten Fehler
Deep Dive into Azure Service Endpoints and Azure Private Links