Expert · Incident · 15 of 180:00 / 12:00

The wiki is gone

Problem

wiki.corp.internal doesn't open anymore.

Your job
  • Get wiki.corp.internal resolving to 10.1.1.8 and opening on 443 from vm-user
Without breaking
  • Keep intranet.corp.internal resolving to 10.1.1.4broken
Background

"wiki.corp.internal doesn't open anymore. The intranet still works." Last night the wiki moved from an old VM to vm-wiki2 at 10.1.1.8, and a cleanup deleted the old VM. Names come from the private zone corp.internal. Users sit in subnet-users, like vm-user.

How to work it
  1. 1See it fail

    Prove the problem yourself before you change anything. Reports are often wrong.

    VM commands forVMs: Linux
    1. ssh vm-user
      What's this?

      Opens a shell on vm-user, so the next commands run on that VM. In this lab it's a shortcut. In real Azure you'd connect through something like Azure Bastion, or SSH to an address you can reach.

    2. nslookup wiki.corp.internal
      What's this?

      Asks the VM's DNS server what IP address a name points to. Run it on the VM that has the problem, because each VM can get a different answer.

    3. nc -zv wiki.corp.internal 443
      What's this?

      netcat, a standard Linux tool. Tries to open a TCP connection and reports whether it worked.

      • -z only check whether the port answers. Send no data
      • -v print the result in words
      • wiki.corp.internal where to connect
      • 443 the port to try

    Ticks off when the test runs on vm-user.

  2. 2Find where it stops
  3. 3Name the cause
  4. 4Fix it and test again
Sources on Microsoft Learn (4)
0/2 changes
Network map
?
  • Resource group, the outer dashed frame
  • Virtual network, with its address space top right
  • Subnet, with range and usable IPs (5 reserved)
  • Network security group. A small shield on a VM's NIC means the NIC has one too
  • Route table on the subnet
  • NICVM Appliance Private endpoint
  • Peering Connected Initiated or access off
  • Goal working Goal broken, X marks where it stops
  • Private DNS zone, dotted lines go to linked VNets
  • Orange pulse: what your last command changed. Drag to pan, Ctrl and scroll to zoom.
Resource grouprg-labvnet-app: tap to inspectVirtual networkvnet-app10.1.0.0/16subnet-app: tap to inspectsubnet-app10.1.1.0/24 · 251 usablevm-intranet 10.1.1.4: tap to inspectNICvm-intranet10.1.1.4vm-wiki2 10.1.1.8: tap to inspectNICvm-wiki210.1.1.8subnet-users: tap to inspectsubnet-users10.1.2.0/24 · 251 usablevm-user 10.1.2.4: tap to inspectNICvm-user10.1.2.4corp.internal: tap to inspectDNSPrivate DNS zone · corp.internal · 1 link · intranet → 10.1.1.4
  • vm-user → wiki.corp.internal:443should work: not working
Goals 0/2
Cloud Shell · bashVMs: Linuxrg-lab · eastus2
cloudshell:~$