$ whoami christoph # Senior Cloud Architect · Microsoft Azure MVP

Azure networking, built and run in the real world.

I’m Christoph, Senior Cloud Architect for Azure. I design and build landing zones, policies, VNETs, routing, DNS, firewalls and Private Endpoints for enterprise customers, and ship them as code. Along the way I write down what I learn: the fixes, the gotchas and the occasional rabbit hole.

Read the articles More about me

20+ years in IT · Azure since 2019 · Microsoft MVP Azure Networking since 2025 · Speaker at community events

$ ping christoph

64 bytes from christoph: ttl=64 time=0.42 ms

Reply received. Coffee required.

$ curl -si https://cloudchristoph.com/coffee

HTTP/2 418

I'm a teapot.

$ terraform destroy

Error: lifecycle.prevent_destroy = true

$ dig +short TXT why.is.it.down.cloudchristoph.com

"It's always DNS."

$ terraform apply -auto-approve # yolo

Apply complete! Resources: 42 added.

Latest articles

All articles →

NetworkingEN

Apply Tenant Restrictions with Azure Firewall

Use the Azure Firewall Header Insertion to secure your environment against accessing foreign tenants.

Published 4 Aug 2026 · 8 min

Infrastructure as CodeDE

Hub-Deployment mit Azure Verified Modules

Ein Hub-and-Spoke-Netzwerk in Azure mit einem AVM-Pattern-Modul aufbauen: Adressplanung, Firewall Policy und Firewall-Regeln Schritt für Schritt.

Published 26 Mar 2026 · 8 min

NetworkingEN

Santa Claus' Cloud-Powered Christmas: Azure Multi-Hub Deployments

Festive Tech Calendar 2024: connecting regional Azure hubs in a full mesh while keeping spokes isolated, with careful IP planning and simple route tables.

Published 3 Dec 2024 · 9 min

Things I built

Small open-source tools for Azure, mostly things I needed myself in projects and figured others might need too.

Azure Firewall Watch

A terminal UI for live log monitoring of Azure Firewall: tail -f for your firewall, with instant filters and a trace of which rule matched.

Docs (external)GitHub (external)Latest release (external)

Certbot Plugin for Azure DNS

Wildcard certificates via the ACME dns-01 challenge. A maintained drop-in replacement for certbot-dns-azure.

Docs (external)PyPI (external)GitHub (external)

On stage

Live demos, clear words, no slide walls. Talks in German or English.

All talks →

26 Nov 2026
Find me at the Microsoft MVP Espresso LabUpcoming
No talk this time, just coffee and good conversations about Azure, networking and whatever keeps you busy.
SoftwareOne Innovation Summit, Mainz
1 Oct 2026
Öffentlich oder privat? Die richtige Netzwerkanbindung für Azure-Dienste
Public, restricted, Service Endpoints or Private Endpoints: how to pick the right connectivity model without needless complexity.
CDC Germany, Hanau
31 Jul 2026
Azure Firewall im Betrieb: Traffic, Routing und die häufigsten Fehler
Azure Firewall is deployed quickly. In operation, you soon notice how much its behavior depends on routing, rule definitions and actual traffic flows.
SysAdminDay, Leipzig