Maybe write an article on SQLMI endpoints

https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/private-endpoint-overview?view=azuresql&tabs=separate-vnets

Questions

• What happens when we deploy a SQLMI from Azure Portal with regards to networking? Do we still need network policy?

ManagedInstance subnet still gets created when deploying from the portal without specifying a network and asking Azure to create one

• Do we still need the ManagedInstance subnet?

Yes

• What requirements are there for Private Endpoint Connection
• Outline differences between private endpoint connection and private endpoint

Notes

After bicep deploy

• PowerShell: Grant ADF Managed Identity Key Vault Secrets User Role on Key Vault

• Add Key Vault as linked Service in ADF

• Create Integration Runtime with Managed Vnet

• Create managed private endpoint in ADF, or Private Endpoint Connection in SQLMI first?

  • SQLMI Private Endopint Connection cannot be created in the ManagedInstance subnet

• Create a managed private endpoint in ADF to connect to the SQLMI

• Private Endpoint connection appears in the SQLMI resource and needs approval

• • Create Connection to SQLMI using secret in Key Vault. Works fine

• ADLS restrict to Virtual Network

• New Linked Service needs a Private Managed endpoint to be created for ADLS, must be approved

• Install Integration Runtime on the VM

CREATE TABLE STAGING.price_paid (
    transactionuuid uniqueidentifier not null,
    pricenumeric bigint,
    transfer_datedate DATE,
    postcodetext nvarchar(10),
    property_typechar CHAR(1),
    newly_builtboolean CHAR(1),
    durationchar CHAR(1),
    paontext nvarchar(200),
    saontext nvarchar(200),
    streettext nvarchar(200),
    localitytext nvarchar(100),
    citytext nvarchar(100),
    districttext nvarchar(100),
    countytext nvarchar(140),
    ppd_category_typechar NVARCHAR(5),
    record_statuschar nvarCHAR(2)
);

Tests

Private Endpoint

1. 15:16
2. 15:06
3. 17:44

Self-Hosted RunTime
1.

Data

https://www.gov.uk/government/statistical-data-sets/price-paid-data-downloads

http://prod.publicdata.landregistry.gov.uk.s3-website-eu-west-1.amazonaws.com/pp-complete.csv

How to Setup IPv6 with Pfsense - Mark Allison

https://markallison.co.uk/blog/setup-ipv6-pfsense-zen/

EXECUTE denied on Managed Instance - Mark Allison

https://markallison.co.uk/blog/regread-failure-on-mi/

Sql Virtual Machine Race Condition - Mark Allison

https://markallison.co.uk/blog/sqliaas-problem/

Loving Hugo - Mark Allison

https://markallison.co.uk/blog/loving-hugo/

Research and prep

• Create a resource group using bicep to include

• Recovery Services Vault
• A Virtual machine that backs up to the vault

• Create PowerShell code to -- not sure if this is too much work or not.

• Take a snapshot of the VM OS Disk
• Create a Managed Disk from the Snapshot
• Restore the VM from the vault into a new Test VM
• Imagine the machine is blue-screening here.
• Swap the OS Disk in the restored VM for the Managed Disk taken from the snapshot
• Machine will shut down, when complete, start the machine up again.

Video

• Create a short YouTube video

Script

Intro

• We perform quarterly DR testing
• Recently one of our VMs blue screened a restore
• Re-tested, same issue
• Tested an older backup from before patching, didn't blue screen
• Taking a snapshot of the production VM and attaching the OS disk to the restored VM worked

Demo

• Recreate RSV and a VM with a job
• Show how to swap the OS disk
• Clean up

I Set up IPv6 at Home - Mark Allison

https://markallison.co.uk/blog/setup-ipv6-at-home/

SQL Managed Instance Server Audit Fails - Mark Allison

https://markallison.co.uk/blog/mi-server-audit-fails/

Adf Failed To Deactivate Trigger - Mark Allison

https://markallison.co.uk/blog/adf-failed-deactivate-trigger/

Browser cache was the winner

How to Move a VM to Another Vnet in Azure - Mark Allison

https://markallison.co.uk/blog/move-vm-to-another-vnet/

Options

• Snapshot disks

• etc

• recommendation