Skip to content

Commit 16a9dc4

Browse files
Court72Court72
authored
Merge pull request #210676 from KarlErickson/karler-gh-fix
fix table formatting
2 parents c6b6192 + 9b49e69 commit 16a9dc4

File tree

1 file changed

+26
-26
lines changed

1 file changed

+26
-26
lines changed

‎articles/spring-apps/vnet-customer-responsibilities.md

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -35,45 +35,45 @@ The following list shows the resource requirements for Azure Spring Apps service
3535

3636
## Azure Spring Apps network requirements
3737

38-
| Destination Endpoint | Port | Use | Note |
39-
| ------------------------------------------------------------ | ---------------- | ----------------------------------------- | ------------------------------------------------------------ |
40-
| \*:1194 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - AzureCloud:1194 | UDP:1194 | Underlying Kubernetes Cluster management. | |
41-
| \*:443 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - AzureCloud:443 | TCP:443 | Azure Spring Apps Service Management. | Information of service instance "requiredTraffics" could be known in resource payload, under "networkProfile" section. | |
42-
| \*:123 *or* ntp.ubuntu.com:123 | UDP:123 | NTP time synchronization on Linux nodes. | |
43-
| \*.azure.io:443 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - AzureContainerRegistry:443 | TCP:443 | Azure Container Registry. | Can be replaced by enabling *Azure Container Registry* [service endpoint in virtual network](../virtual-network/virtual-network-service-endpoints-overview.md). |
44-
| \*.core.windows.net:443 and \*.core.windows.net:445 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - Storage:443 and Storage:445 | TCP:443, TCP:445 | Azure Files | Can be replaced by enabling *Azure Storage* [service endpoint in virtual network](../virtual-network/virtual-network-service-endpoints-overview.md). |
45-
| \*.servicebus.windows.net:443 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - EventHub:443 | TCP:443 | Azure Event Hubs. | Can be replaced by enabling *Azure Event Hubs* [service endpoint in virtual network](../virtual-network/virtual-network-service-endpoints-overview.md). |
38+
| Destination Endpoint | Port | Use | Note |
39+
|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------|-------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------|
40+
| \*:1194 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - AzureCloud:1194 | UDP:1194 | Underlying Kubernetes Cluster management. | |
41+
| \*:443 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - AzureCloud:443 | TCP:443 | Azure Spring Apps Service Management. | Information of service instance "requiredTraffics" could be known in resource payload, under "networkProfile" section. |
42+
| \*:123 *or* ntp.ubuntu.com:123 | UDP:123 | NTP time synchronization on Linux nodes. | |
43+
| \*.azure.io:443 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - AzureContainerRegistry:443 | TCP:443 | Azure Container Registry. | Can be replaced by enabling *Azure Container Registry* [service endpoint in virtual network](../virtual-network/virtual-network-service-endpoints-overview.md). |
44+
| \*.core.windows.net:443 and \*.core.windows.net:445 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - Storage:443 and Storage:445 | TCP:443, TCP:445 | Azure Files | Can be replaced by enabling *Azure Storage* [service endpoint in virtual network](../virtual-network/virtual-network-service-endpoints-overview.md). |
45+
| \*.servicebus.windows.net:443 *or* [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) - EventHub:443 | TCP:443 | Azure Event Hubs. | Can be replaced by enabling *Azure Event Hubs* [service endpoint in virtual network](../virtual-network/virtual-network-service-endpoints-overview.md). |
4646

4747
## Azure Spring Apps FQDN requirements/application rules
4848

4949
Azure Firewall provides the FQDN tag **AzureKubernetesService** to simplify the following configurations:
5050

51-
| Destination FQDN | Port | Use |
52-
| --------------------------------- | --------- | ------------------------------------------------------------ |
53-
| <i>*.azmk8s.io</i> | HTTPS:443 | Underlying Kubernetes Cluster management. |
54-
| <i>mcr.microsoft.com</i> | HTTPS:443 | Microsoft Container Registry (MCR). |
55-
| <i>*.cdn.mscr.io</i> | HTTPS:443 | MCR storage backed by the Azure CDN. |
56-
| <i>*.data.mcr.microsoft.com</i> | HTTPS:443 | MCR storage backed by the Azure CDN. |
57-
| <i>management.azure.com</i> | HTTPS:443 | Underlying Kubernetes Cluster management. |
58-
| <i>*login.microsoftonline.com</i> | HTTPS:443 | Azure Active Directory authentication. |
59-
| <i>*login.microsoft.com</i> | HTTPS:443 | Azure Active Directory authentication. |
60-
| <i>packages.microsoft.com</i> | HTTPS:443 | Microsoft packages repository. |
51+
| Destination FQDN | Port | Use |
52+
|-----------------------------------|-----------|------------------------------------------------------------------------------|
53+
| <i>*.azmk8s.io</i> | HTTPS:443 | Underlying Kubernetes Cluster management. |
54+
| <i>mcr.microsoft.com</i> | HTTPS:443 | Microsoft Container Registry (MCR). |
55+
| <i>*.cdn.mscr.io</i> | HTTPS:443 | MCR storage backed by the Azure CDN. |
56+
| <i>*.data.mcr.microsoft.com</i> | HTTPS:443 | MCR storage backed by the Azure CDN. |
57+
| <i>management.azure.com</i> | HTTPS:443 | Underlying Kubernetes Cluster management. |
58+
| <i>*login.microsoftonline.com</i> | HTTPS:443 | Azure Active Directory authentication. |
59+
| <i>*login.microsoft.com</i> | HTTPS:443 | Azure Active Directory authentication. |
60+
| <i>packages.microsoft.com</i> | HTTPS:443 | Microsoft packages repository. |
6161
| <i>acs-mirror.azureedge.net</i> | HTTPS:443 | Repository required to install required binaries like kubenet and Azure CNI. |
62-
| *mscrl.microsoft.com*<sup>1</sup> | HTTPS:80 | Required Microsoft Certificate Chain Paths. |
63-
| *crl.microsoft.com*<sup>1</sup> | HTTPS:80 | Required Microsoft Certificate Chain Paths. |
64-
| *crl3.digicert.com*<sup>1</sup> | HTTPS:80 | Third-Party TLS/SSL Certificate Chain Paths. |
62+
| *mscrl.microsoft.com*<sup>1</sup> | HTTPS:80 | Required Microsoft Certificate Chain Paths. |
63+
| *crl.microsoft.com*<sup>1</sup> | HTTPS:80 | Required Microsoft Certificate Chain Paths. |
64+
| *crl3.digicert.com*<sup>1</sup> | HTTPS:80 | Third-Party TLS/SSL Certificate Chain Paths. |
6565

6666
<sup>1</sup> Please note that these FQDNs aren't included in the FQDN tag.
6767

6868
## Azure Spring Apps optional FQDN for third-party application performance management
6969

70-
| Destination FQDN | Port | Use |
71-
| ---------------------------------- | ---------- | ------------------------------------------------------------ |
70+
| Destination FQDN | Port | Use |
71+
|------------------------------------|------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
7272
| <i>collector*.newrelic.com</i> | TCP:443/80 | Required networks of New Relic APM agents from US region, also see [APM Agents Networks](https://docs.newrelic.com/docs/using-new-relic/cross-product-functions/install-configure/networks/#agents). |
7373
| <i>collector*.eu01.nr-data.net</i> | TCP:443/80 | Required networks of New Relic APM agents from EU region, also see [APM Agents Networks](https://docs.newrelic.com/docs/using-new-relic/cross-product-functions/install-configure/networks/#agents). |
74-
| <i>*.live.dynatrace.com</i> | TCP:443 | Required network of Dynatrace APM agents. |
75-
| <i>*.live.ruxit.com</i> | TCP:443 | Required network of Dynatrace APM agents. |
76-
| <i>*.saas.appdynamics.com</i> | TCP:443/80 | Required network of AppDynamics APM agents, also see [SaaS Domains and IP Ranges](https://docs.appdynamics.com/display/PAA/SaaS+Domains+and+IP+Ranges). |
74+
| <i>*.live.dynatrace.com</i> | TCP:443 | Required network of Dynatrace APM agents. |
75+
| <i>*.live.ruxit.com</i> | TCP:443 | Required network of Dynatrace APM agents. |
76+
| <i>*.saas.appdynamics.com</i> | TCP:443/80 | Required network of AppDynamics APM agents, also see [SaaS Domains and IP Ranges](https://docs.appdynamics.com/display/PAA/SaaS+Domains+and+IP+Ranges). |
7777

7878
## Next steps
7979

0 commit comments

Comments
 (0)