Welcome to Architect’s Notebook

👋 Hello! Welcome to my blog where I share insights and experiences as a Solution Architect specializing in:

  • Azure Cloud Platform - Architecture patterns, best practices, and real-world implementations
  • Cloud Security - Securing cloud infrastructure and applications
  • Microsoft Defender - Threat protection and security operations
  • Microsoft Sentinel - SIEM and security orchestration
  • Sovereignty Cloud - Compliance, data residency, and sovereign cloud solutions

Join me as I explore the evolving landscape of cloud architecture and security.

Forwarding Traffic from Azure Network to Nested Hyper-V VMs via Azure Firewall (Private Only)

Introduction Running nested Hyper-V inside an Azure VM is a common solution for migrating legacy workloads that are not immediately cloud-native. But there is a catch. When nested virtual machines use NAT, Azure networking behaves very differently from on-premises environments. Without understanding these differences, inbound and outbound connectivity can fail in ways that are hard to troubleshoot. This guide explains how to forward private Azure traffic through Azure Firewall or Other NVA to nested Hyper-V VMs, fully private and supported. ...

January 20, 2026 Â· 2 min Â· 324 words Â· Mohammed el Fizazi