Azure IPAM solution/use case context #11
Replies: 5 comments 13 replies
-
|
Hey @brianmooremsft, I believe the answer is 'yes' to both. There's obviously a number of enterprise solutions out there that work well with Azure (Infoblox, etc.), but a few use cases here would be:
A discussion point internally, and with a few potential customers is indeed "I'd like to export the data from this solution into my enterprise appliance". So that would be something we can explore through API integrations in the future. I would LOVE any additional thoughts and/or feedback you may have here. We definitely feel that having a holistic view of the IP Space in Azure is a current pain point, especially when you have various teams spinning up subscriptions and creating vNet's, whom might not have knowledge of the overall IP landscape for their organization, and the implications of not selecting non-overlapping IP space as they build out their solutions (e.g. problems peering vNets, inability to connect Azure to on-prem via VPN/ExpressRoute). |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
-
|
Great to see MS picking this up and driving it. Is there anything in the roadmap to automate IP request / allocation particularly in relation to Enterprise Landing Zone concept, similar to the solution @stefanstranger has come up with https://github.com/stefanstranger/AIPAS, he has nailed our use case |
Beta Was this translation helpful? Give feedback.
-
|
I'll try to test this solution too and provide feedback when comparing what I've developed in my https://github.com/stefanstranger/AIPAS solution. |
Beta Was this translation helpful? Give feedback.
-
|
That's very awesome of you @stefanstranger. Please reach out to myself or @hbendana if you run into any issues! |
Beta Was this translation helpful? Give feedback.
-
|
Hi, I run the deploy.ps1 file and got the following errors.
|
Beta Was this translation helpful? Give feedback.
-
|
Hi @stefanstranger, just to double check you've verified all of the prerequisites, correct? https://azure.github.io/ipam/#/deployment/README?id=prerequisites |
Beta Was this translation helpful? Give feedback.
-
|
Hi @stefanstranger, could you provide information regarding versions of the following please?
Thank you! |
Beta Was this translation helpful? Give feedback.
-
|
Any update on this ? |
Beta Was this translation helpful? Give feedback.
-
|
Hi @P-Stenbumling, we're just finalizing the documentation and should have the code pushed to our main branch and ready for testing by the end of this week/Monday at the latest. I'll drop a note in this thread as soon as the code is live. Thanks for checking in, excited to get this finally launched! |
Beta Was this translation helpful? Give feedback.
-
|
@brianmooremsft, @dgitw, and @P-Stenbumling, the initial code push is complete. Please take a look at our docs which can be found here: https://azure.github.io/ipam/ Looking forward to your feedback! |
Beta Was this translation helpful? Give feedback.
-
|
Hi @vpgohil, I just wanted to clarify a few items from your note above? "...I only see limited Vnets and subnets." "...is there any way to exclude some of the subscriptions...?" Thanks you so much for the feedback, and we're looking forward to making this an amazing experience for all of you! |
Beta Was this translation helpful? Give feedback.
-
|
I see less vNets and Subnets in IPAM. I want to exclude some dev/test subscription globally from IPAM. also another issue I see is with adding admin user search return only users whose name starts with A (it could also mean it is returning limited number of users). |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for that info @vpgohil! The less vNets/Subnets is likely due to paging that is happening for the Azure Resource Graph results. I'm working on a fix for that now. The limited users in the Admin tab is likely due to the limited results the Microsoft Graph API returns at once. I'm working on a fix for that now. I'm thinking through the best way to implement a way to exclude some subscriptions. When you are logged in as an admin, you are leveraging the Service Principal credentials which is sitting at the root Management Group level, so it has visibility to everything. When you are logged in as a normal user, you only see what your authenticated user would normally see in the Azure portal. Just some information for you in the meantime while I think through a solution here. |
Beta Was this translation helpful? Give feedback.
-
|
@DCMattyG , thanks for quick response! I see reservation through API is working fine but I cannot find way to reserve from UI. |
Beta Was this translation helpful? Give feedback.
-
|
At this time, we haven't added that functionality to the UI. The reason behind that is, we had imagined reservations happening almost exclusively as part of some form of automation, whether that be embedded in an ARM/Bicep/Terraform template to deploy (for example) Landing Zones, and perhaps via Azure Automation/Functions to automate vNet creation. That said, if you have a use case in mind where it would make sense for users to come to the UI to create reservations, there is no opposition to adding that capability. |
Beta Was this translation helpful? Give feedback.
-
Apologies if I missed it in docs somewhere, but was wondering how the architects of this solution see it fitting into the larger world of IPAM solutions that enterprises customers already use to manage their traditional on-prem networks (ie Infoblox). Is the use case this Azure IPAM service/solution just for customers who may not have an existing enterprise class solution, or is it thought that this Azure IPAM solution would manage just the customer's Azure IP space and provide some "integration" to upstream IP address managers?
Beta Was this translation helpful? Give feedback.
All reactions