Cloud Solutions Architect https://blog.obp.com.tr/ 2026-11-13T00:00:00.000Z Ozan Berk Polat https://blog.obp.com.tr/posts/azure-front-door-premium-now-supports-mutual-tls-generally-available/ 2026-11-13T00:00:00.000Z 2026-11-13T00:00:00.000Z

If you expose sensitive APIs or partner-facing apps through Azure Front Door, you no longer need to push client certificate checks down to your origin. Mutual TLS (mTLS) is now generally available on Azure Front Door Premium. Also known as client certificate authentication, mTLS lets you use X.509 client certificates to help protect applications and APIs in scenarios such as business-to-business…

https://blog.obp.com.tr/posts/azure-front-door-edge-actions-are-ga-run-javascript-at-the-edge/ 2026-11-11T00:00:00.000Z 2026-11-11T00:00:00.000Z

What if you could make routing and content decisions in the request path itself, without standing up a separate compute tier behind your CDN? Azure Front Door edge actions are now generally available, bringing serverless compute to the edge. With edge actions, you run lightweight JavaScript functions during Azure Front Door client request and response processing. That lets you make real-time…

https://blog.obp.com.tr/posts/azure-functions-now-runs-net-11-in-ga/ 2026-11-11T00:00:00.000Z 2026-11-11T00:00:00.000Z

If you run serverless workloads on Azure, your runtime upgrade path just got clearer. Azure Functions support for .NET 11 is now generally available, so you can move to the newest .NET without leaving the platform. You can build Azure Functions apps that target .NET 11 using the isolated worker model, while keeping the familiar Azure Functions programming model and host integration. In short, your…

https://blog.obp.com.tr/posts/azure-front-door-gets-post-quantum-tls-key-exchange-policies/ 2026-11-06T00:00:00.000Z 2026-11-06T00:00:00.000Z

Cryptographic threats keep evolving, and the TLS handshake at your edge is where that starts. Azure Front Door now lets you control how keys are exchanged, including a hybrid post-quantum option. The feature is generally available. You can configure a TLS key exchange policy on Front Door and choose from predefined options, so you can balance stronger protection against the client compatibility…

https://blog.obp.com.tr/posts/waf-insights-for-application-gateway-is-now-generally-available/ 2026-11-06T00:00:00.000Z 2026-11-06T00:00:00.000Z

Digging through raw WAF logs to work out why a request was blocked is slow, and it gets worse as traffic grows. If you run Azure Application Gateway with Web Application Firewall, that routine just got easier. WAF Insights is now generally available. It is a built-in experience in the WAF policy that brings WAF logs and metrics together in interactive dashboards, so you can investigate blocked…

https://blog.obp.com.tr/posts/postgresql-flexible-server-gets-a-stable-2026-10-01-rest-api/ 2026-11-05T00:00:00.000Z 2026-11-05T00:00:00.000Z

If you automate Azure Database for PostgreSQL with ARM templates, Bicep or Terraform, you now have a new stable API version to pin to. No more building production tooling on preview versions. The Flexible Server REST API version 2026-10-01 is generally available. This stable release expands what you can manage through the API: maintenance management, immutable backups and multi-tenant encryption…

https://blog.obp.com.tr/posts/azure-site-recovery-now-handles-vmss-flex-disaster-recovery-properly/ 2026-11-04T00:00:00.000Z 2026-11-04T00:00:00.000Z

If you run workloads on Virtual Machine Scale Sets with flexible orchestration, your disaster recovery story just got a lot less manual. Azure Site Recovery now offers an enhanced experience built for VMSS Flex, and it is generally available. The update improves target configuration and the end-to-end recovery workflow, covering failover and the steps that follow it, such as reprotect. In short,…

https://blog.obp.com.tr/posts/azure-storage-actions-is-ga-with-auto-updating-tasks-and-tighter-execution-controls/ 2026-11-03T00:00:00.000Z 2026-11-03T00:00:00.000Z

Automating data operations across Blob and Data Lake Storage just got less manual. Azure Storage Actions now ships three enhancements that cut down the busywork of managing tasks at scale. The update is generally available and covers three areas: automatic propagation of task definition updates, new execution controls, and case-sensitive matching. The first means that when you update a storage…

https://blog.obp.com.tr/posts/postgresql-flexible-server-move-from-vnet-integration-to-private-endpoints/ 2026-11-03T00:00:00.000Z 2026-11-03T00:00:00.000Z

Network design for Azure Database for PostgreSQL Flexible Server just got less permanent. If your server was deployed with VNet integration, you are no longer locked into that choice. The update is now generally available: you can change an existing VNet-integrated server from delegated-subnet networking to a private endpoint capable configuration. That opens the door to private endpoints for…

https://blog.obp.com.tr/posts/an-os-disk-snapshot-is-not-a-rollback-when-lvm-spans-two-disks/ 2026-11-01T00:00:00.000Z 2026-11-01T00:00:00.000Z

A test clone built from an OS disk snapshot went straight to emergency mode because the root volume group continued on a data disk.

https://blog.obp.com.tr/posts/azure-front-door-premium-waf-gets-a-managed-http-ddos-ruleset-now-ga/ 2026-10-30T00:00:00.000Z 2026-10-30T00:00:00.000Z

HTTP-layer DDoS attacks remain a leading cause of application downtime, and static controls such as IP filters and fixed rate limits often struggle to keep up with them. If you front your apps with Azure Front Door, this announcement is worth your attention. Microsoft has announced the general availability of the HTTP DDoS ruleset for Azure Web Application Firewall (WAF) on Azure Front Door…

https://blog.obp.com.tr/posts/large-os-disk-encryption-is-ga-for-azure-confidential-vm-migrations/ 2026-10-30T00:00:00.000Z 2026-10-30T00:00:00.000Z

Moving big, production-scale workloads into confidential computing has often meant compromising on the OS disk. That gap just closed: Large OS Disk Encryption (LOSDE) is now generally available for Azure Confidential VM migration scenarios. The key takeaway is that larger workloads can now move into confidential computing with the OS disk fully protected, instead of being held back by disk size…

https://blog.obp.com.tr/posts/marketplace-private-offers-get-simpler-enhancements-now-generally-available/ 2026-10-29T00:00:00.000Z 2026-10-29T00:00:00.000Z

If your team buys software through Microsoft Marketplace, the way you negotiate and consume spend just got a bit easier. Microsoft has announced general availability of enhancements to Marketplace private offers. Private offers let you align pricing and terms with what your organization actually needs, including flexible billing and custom contract lengths, while making the most of your spending…

https://blog.obp.com.tr/posts/1000-storage-accounts-per-region-azure-raises-the-quota-ceiling/ 2026-10-28T00:00:00.000Z 2026-10-28T00:00:00.000Z

If you have ever split a workload across subscriptions just to dodge the storage account limit, this one is for you. The default of 250 accounts per region, per subscription, is no longer the ceiling. Higher Azure Storage account resource quotas are now generally available. A subscription can hold up to 1,000 storage accounts with standard endpoints per region, up from the default of 250. The…

https://blog.obp.com.tr/posts/claude-spend-finally-lands-under-your-foundry-resource-in-azure-cost-management/ 2026-10-28T00:00:00.000Z 2026-10-28T00:00:00.000Z

If you run Claude models in Microsoft Foundry, you know the FinOps headache: the charges showed up under SaaS instead of the Foundry resource you deployed them with. Chargeback and budgets for AI workloads were harder than they needed to be. That changes with this generally available release. Claude models now appear in Azure Cost Management alongside the rest of your Foundry spend, so usage is…

https://blog.obp.com.tr/posts/vnet-flow-logs-filtering-is-now-ga-log-only-the-traffic-that-matters/ 2026-10-27T00:00:00.000Z 2026-10-27T00:00:00.000Z

Flow logs are only useful when you can find the signal in them. If you run busy Azure virtual networks, you know how fast unfiltered logs pile up in storage and drown the traffic you actually care about. Azure Network Watcher VNet flow logs filtering is now generally available. You decide which flows get logged based on specific criteria: IP addresses, ports, protocols, encryption state, flow…

https://blog.obp.com.tr/posts/four-suspended-skus-on-a-licensing-group-blocked-every-new-user/ 2026-10-25T00:00:00.000Z 2026-10-25T00:00:00.000Z

Old SKUs left on a license group after a renewal made every assignment fail for new members, and the admin center no longer showed them.

https://blog.obp.com.tr/posts/azure-backup-now-restores-single-files-from-premium-ssd-v2-and-ultra-disk-vms/ 2026-10-24T00:00:00.000Z 2026-10-24T00:00:00.000Z

If your VMs run on Premium SSD v2 or Ultra Disks, you have had to restore a whole disk just to get one file back. That gap has now closed. Azure Backup has made Item-Level Recovery (ILR) generally available for Azure VMs using these disk types, with both 512 byte and 4KB logical sector sizes. You can recover individual files and folders straight from a recovery point instead of rebuilding the full…

https://blog.obp.com.tr/posts/abfs-vectored-read-is-ga-fewer-round-trips-for-selective-reads-on-data-lake-storage/ 2026-10-23T00:00:00.000Z 2026-10-23T00:00:00.000Z

If your analytics jobs read small slices of large files in Azure Data Lake Storage, request overhead is probably a bigger cost than raw bandwidth. ABFS Vectored Read is now generally available and targets exactly that pattern. The idea is simple: compatible analytics engines combine nearby file ranges into fewer storage requests and run the reads asynchronously. The result is fewer network round…

https://blog.obp.com.tr/posts/azure-cosmos-db-safe-key-rotation-is-now-generally-available/ 2026-10-22T00:00:00.000Z 2026-10-22T00:00:00.000Z

Rotating account keys on a live database has always carried a quiet risk: retire the wrong key and an application you forgot about starts failing. Azure Cosmos DB Safe Key Rotation is now generally available, and it targets exactly that problem. The feature exposes timestamp metadata showing when each account key was last used. That lets you see which keys are still active before you rotate or…

https://blog.obp.com.tr/posts/keyless-tls-on-application-gateway-is-now-ga-with-managed-hsm/ 2026-10-21T00:00:00.000Z 2026-10-21T00:00:00.000Z

TLS private keys sitting on a gateway are a standing risk. Azure Application Gateway now supports keyless TLS termination, so the key never has to leave the vault. The feature is generally available and works with certificates whose private keys live in Azure Key Vault Managed HSM. Each TLS handshake signature is performed inside the HSM, and the private key is never exported to the gateway. That…

https://blog.obp.com.tr/posts/service-tags-now-match-in-azure-front-door-premium-waf-custom-rules/ 2026-10-21T00:00:00.000Z 2026-10-21T00:00:00.000Z

Keeping IP allow and deny lists current in your WAF rules is tedious and easy to get wrong. A new match condition in Azure Front Door Premium WAF removes much of that chore. The service tag match condition for Azure Web Application Firewall custom rules is now generally available on Azure Front Door Premium. Service tags represent groups of IP address prefixes used by Azure services, and Microsoft…

https://blog.obp.com.tr/posts/azure-dns-now-load-balances-directly-through-traffic-manager-linked-records/ 2026-10-20T00:00:00.000Z 2026-10-20T00:00:00.000Z

If you run DNS-based load balancing on Azure, you know the pattern: a CNAME in your zone pointing at a trafficmanager.net name. That extra hop is now optional. Azure DNS now integrates with Azure Traffic Manager and is generally available. You can associate an Azure DNS record set directly with a Traffic Manager profile, which removes the need for a CNAME record pointing to the Traffic Manager…

https://blog.obp.com.tr/posts/metrics-usage-insights-for-azure-monitor-workspace-is-now-ga/ 2026-10-20T00:00:00.000Z 2026-10-20T00:00:00.000Z

Do you actually know which metrics are driving usage in your Azure Monitor workspace? Metrics usage insights is now generally available, giving you much better visibility into what consumes your metrics budget. The feature lets you monitor workspace utilization, identify unused metrics, understand usage trends, and investigate changes in usage over time. That makes it easier to trim noise, keep…

https://blog.obp.com.tr/posts/azure-retirement-email-triage/ 2026-10-18T00:00:00.000Z 2026-10-18T00:00:00.000Z

Five Azure retirement and action-required notices, checked against the real inventory instead of memory, and the routine and queries I use to answer them.

https://blog.obp.com.tr/posts/keep-your-keys-outside-azure-external-key-management-for-managed-hsm-is-ga/ 2026-10-17T00:00:00.000Z 2026-10-17T00:00:00.000Z

If your regulator or sovereignty rules say you must keep physical control of your key-encryption keys, Azure Key Vault Managed HSM just got a lot more useful. External key management is now generally available. The feature is available in all Azure public regions. It is aimed at organizations that need to retain control of their key-encryption keys while still letting supported Azure services use…

https://blog.obp.com.tr/posts/automatic-zone-balance-for-vm-scale-sets-is-now-ga/ 2026-10-16T00:00:00.000Z 2026-10-16T00:00:00.000Z

Zonal imbalance in a scale set is the kind of problem you usually find during an outage, not before. Instances drift across availability zones after scale-in, failures or capacity events, and suddenly one zone carries far more of your fleet than the others. Automatic zone balance for Virtual Machine Scale Sets is now generally available. The feature continuously monitors scale sets deployed across…

https://blog.obp.com.tr/posts/standard-service-endpoint-is-now-ga-private-link-scale-for-iaas-to-paas-traffic/ 2026-10-16T00:00:00.000Z 2026-10-16T00:00:00.000Z

Connecting IaaS workloads to PaaS services privately has always meant trade-offs between manageability and scale. A new member of the Azure Private Link family aims to remove them, and it just reached general availability. Standard service endpoint is described as a scalable and secure approach for connecting Azure IaaS workloads to Azure PaaS services. It targets the manageability and scale…

https://blog.obp.com.tr/posts/azure-cloud-hsm-now-writes-hardware-level-audit-logs/ 2026-10-15T00:00:00.000Z 2026-10-15T00:00:00.000Z

If you run keys in Azure Cloud HSM, you can now get proof of what happened on the device itself. Hardware audit logging is generally available, and it changes how you answer the question "who did what to my HSM?" The feature produces hardware-generated audit records for supported HSM management operations. Because the records come from the HSM and not from a layer above it, they help with security…

https://blog.obp.com.tr/posts/azure-site-recovery-now-protects-azure-arc-enabled-windows-vmware-and-physical-servers/ 2026-10-15T00:00:00.000Z 2026-10-15T00:00:00.000Z

If you manage on-premises Windows servers through Azure Arc, your disaster recovery story just got simpler. Azure Site Recovery (ASR) is now generally available for Arc-enabled Windows VMware virtual machines and physical servers. The key point is that you don't have to pick between tools. You can protect Arc-managed machines with ASR while continuing to use Azure Arc for governance and inventory.…