u/RiosEngineer

Foundry has been a bit of a mess IMO. Hub to New Foundry on the cognitive RP. So recently I wanted to explore BYON in the New Foundry and what's involved, some real gotchas I stumbled across etc. Maybe it helps others out too who are exploring the option. If so I did blog about it: https://rios.engineer/a-real-look-at-byon-microsoft-foundry/

The main cover points:

- Explicit egress via hub firewall for agent tool calls
- Resource dependencies and private networking (and how VNet flow logs don't actually help see private agent dependency traffic due to Foundry's Data Host Proxy)
- Governance model for Foundry accounts
- Azure Bicep snippets

I'm mostly wanting to use private APIM with it too, thinking of writing something up for that with the policy I'm using for auth + rate limiting, app roles, etc. Let me know if you think this may be of interest.

For what it's worth I spent bloody ages configuring this and testing it out, so in the age of AI slop articles I hope it provides something useful to the Azure community.

I blogged my entire journey with it and thought it may be useful for others who are curious about getting started or exploring the project.

Radius is an open source platform from the Azure Incubations team (built on Dapr and Spotify's Backstage) that lets developers define cloud-native applications, while operators (basically just cloud/platform engineers) define infrastructure environments and recipes that enforce organisational standards, security, and best practices.

The same app code can then be deployed across local, Azure or AWS without changes for example so it's an interesting project to keep an eye on IMO.

In the blog I cover:

- The core problem Radius solves: decoupling app definitions from infrastructure implementations
- How recipes let operators enforce standards without touching app code
- A hands-on walkthrough of building a Dapr app incrementally with Radius and Bicep
- Understanding portable resources and environments
- Writing and publishing your own recipes with Bicep
- How Radius integrates with Kubernetes and Azure

If you fancy the read you can here. It's fairly comprehensive so hopefully helps break it down nicely. Is anyone actually using Radius out there? Genuinely not used it outside of my own lab/local.