Azure Update - 26th September 2025

Key Concepts

• Azure Kubernetes Fleet Manager: Centralized management of multiple AKS clusters.
• Azure Disk Encryption (ADE): In-OS encryption for Azure VMs using BitLocker (Windows) or DM-Crypt (Linux).
• Disk Encryption Sets (DES): Azure's recommended alternative to ADE for managing encryption keys.
• Encryption at Host: Encryption of temporary disks and cached data on the VM host.
• Azure Container Apps: A serverless platform for running containerized applications.
• Azure App Gateway: A web traffic load balancer that enables server sent events.
• Azure Front Door: A scalable and secure entry point for web applications, now with signed requests.
• Azure Files Premium: SSD-based file storage offering.
• Azure Backup Recovery Services Vault: A secure storage location for backups, separate from the source storage.
• Azure NetApp Files (ANF): Enterprise-grade, high-performance file storage service.
• Azure Migrate: A service for discovering and assessing on-premises workloads for migration to Azure.
• Azure Monitor Container Insights: A curated set of metrics and guidance for monitoring containerized applications.
• GitHub Copilot: An AI-powered code completion and assistance tool.
• Azure Site Recovery (ASR): A service for replicating workloads between Azure regions or from on-premises to Azure.
• Microsoft Marketplace: A unified marketplace for Azure and Microsoft partner solutions.

Azure Kubernetes Fleet Manager

• The Azure Kubernetes Fleet Manager now has an auto-upgrade channel capability.
• This allows for ring-based deployments, setting the Kubernetes minor version for each ring.
• AKS clusters in a ring will only receive patch updates for their specified minor version until it reaches end of support.
• It also works with long-term servicing clusters.

Azure Kubernetes Services Insights

• The Azure Kubernetes Services insights blade in the Azure portal is being renamed to "Monitor."
• It is also being moved to the top-level list of available blades for increased visibility.

Nvidia GPU Virtual Machine SKUs

• The V series (visualization) V3 SKUs for GPU-enabled virtual machines are being retired in one year.
• Users should migrate to another SKU, such as the V5 series, before the retirement date to avoid deallocation.

Azure Disk Encryption (ADE) Retirement

• Azure Disk Encryption (ADE) is being retired in three years.
• ADE is an in-OS encryption solution managed by Azure, using BitLocker for Windows VMs and DM-Crypt for Linux VMs.
• It integrates with Azure Key Vault for key management, but has management limitations.
• The recommended alternative is to migrate to Disk Encryption Sets (DES) for customer-managed keys or enable encryption at host.
• Encryption at host encrypts temporary disks and cached content on the VM host using the same key as the Disk Encryption Set.
• Migration requires a planned approach and should not be left until the last minute. Consider integrating it into major refresh cycles or DevOps rollout processes.

App Service on Arc Enabled Kubernetes Retirement

• App Service on Arc enabled Kubernetes is being retired immediately.
• Users should migrate to Azure Container Apps on Arc enabled Kubernetes.
• Azure Container Apps offers similar capabilities, including Logic Apps integration and hybrid networking options.

Azure App Gateway

• Azure App Gateway now supports server-sent events (SSE) in General Availability (GA).
• SSE is useful for real-time data streaming from the server to the client.

Azure Front Door

• Azure Front Door now supports signed requests in preview.
• This allows for restricting access to premium content (e.g., media streams, file downloads, APIs) based on user authentication, geolocation, and time-based constraints.
• Clients must provide a signature to access content governed by the defined rules.

Azure Files Premium

• Azure Files Premium (SSD-based) now supports Azure Backup Recovery Services Vault protection.
• Using a vault stores backups on separate media from the source storage account, offering enhanced protection compared to regular snapshots.
• Backups can be stored for up to 99 years with custom schedules.

Azure NetApp Files (ANF)

• Azure NetApp Files (ANF) flexible service level is now generally available (GA).
• This allows for independently setting capacity and throughput, unlike traditional service levels where they are linked.
• This flexibility can enable configurations with up to five times the throughput of the Ultra service level or large capacity with low throughput, optimizing cost based on specific needs.

Database Updates

• Azure Migrate: Now supports discovery and assessment of PostgreSQL databases on VMware, Hyper-V, on-premises, and other clouds for migration to Azure Database for PostgreSQL.
• Azure Database for MySQL: The flexible offering now allows triggering on-demand backups and deleting on-demand backups.
• PostgreSQL 16: Released with performance improvements (up to 3x), virtual generated columns, single sign-on support with OAuth 2, faster upgrades, and other enhancements. Azure Database for PostgreSQL has support for PostgreSQL 16 in preview.

Miscellaneous Updates

• Azure Monitor Container Insights: High scale mode is now generally available (GA).
  • High scale mode enables higher log collection throughput (up to 50,000 logs per second).
  • Recommended for AKS clusters with over 2,000 logs per second.
  • Requires at least 16 CPU cores per node to avoid impacting regular workloads.
• GitHub Copilot: Improved Java and .NET app modernization support.
  • Uses an AI agent to analyze and identify breaking changes during upgrades to newer versions of Java and .NET.
  • Assists with implementing fixes and general app modernization tasks.
• Azure Site Recovery (ASR): Now supports using Premium SSD v2 for replicated machines.
• Microsoft Marketplace: A new unified marketplace combining the Azure Marketplace and Microsoft AppSource.
  • Provides a central location for finding partner solutions, including AI agents and data-related tools.

Synthesis/Conclusion

This Azure update covers a range of changes, from retirements requiring immediate action (App Service on Arc) to features enhancing flexibility and performance (ANF flexible service level, PostgreSQL 16). The emphasis is on modernizing infrastructure (migration from ADE to DES, containerization with Azure Container Apps), optimizing costs (ANF flexible service level), and leveraging AI for development and operations (GitHub Copilot, Azure Monitor Container Insights). The retirement of Azure Disk Encryption is a significant announcement that requires immediate planning and action for affected users. The new Microsoft Marketplace aims to provide a comprehensive platform for discovering and deploying partner solutions.