You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/redis/private-link.md
+29-41Lines changed: 29 additions & 41 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,9 +13,15 @@ ms.custom:
13
13
14
14
# What is Azure Managed Redis with Azure Private Link?
15
15
16
-
In this article, you learn how to create a virtual network and an Azure Managed Redis instance with a private endpoint using the Azure portal. You also learn how to add a private endpoint to an existing Azure Managed Redis instance.
16
+
In this article, you learn how to create a virtual network and use it with an Azure Managed Redis instance with a private endpoint. Azure Private Endpoint is a network interface that connects you privately and securely to Azure Managed Redis powered by Azure Private Link.
17
17
18
-
Azure Private Endpoint is a network interface that connects you privately and securely to Azure Managed Redis powered by Azure Private Link.
18
+
The process is accomplished in two steps:
19
+
20
+
1. First, create a virtual network to use with a cache.
21
+
22
+
1. Then, depending on whether you already have a cache:
23
+
1. Add the virtual network when you create a [new cache](#create-an-azure-managed-redis-instance-with-a-private-endpoint-connected-to-a-virtual-network-subnet).
24
+
1. Add the virtual network to your [existing cache](#create-an-azure-managed-redis-cache-connected-to-a-private-endpoint-using-azure-powershell).
19
25
20
26
>[!Important]
21
27
> Using private endpoint to connect to a Virtual Network is the recommended solution for securing your Azure Managed Redis resource at the networking layer.
@@ -24,21 +30,12 @@ Azure Private Endpoint is a network interface that connects you privately and se
24
30
25
31
- Azure subscription - [create one for free](https://azure.microsoft.com/free/)
26
32
27
-
## Create a new Azure Managed Redis cache with a private endpoint connection
28
-
29
-
In this section, you create a new Azure Managed Redis cache with a private endpoint.
33
+
## Create a virtual network with a subnet
30
34
31
-
1. The first step is to create a virtual network for your new cache.
32
-
1. Then, you create a new cache. During the create experience, add the subnet that you created to in the first step.
33
-
34
-
### Create a virtual network with a subnet
35
-
36
-
To create a cache using the portal:
35
+
The first step in the process is to create a virtual network using the portal. You then use this virtual network when you create a [new cache](#create-an-azure-managed-redis-instance-with-a-private-endpoint-connected-to-a-virtual-network-subnet) or with[existing cache](#create-an-azure-managed-redis-cache-connected-to-a-private-endpoint-using-azure-powershell).
37
36
38
37
1. Sign in to the [Azure portal](https://portal.azure.com) and select **Create a resource**.
39
38
40
-
:::image type="content" source="media/private-link/1-create-resource.png" alt-text="Select Create a resource.":::
41
-
42
39
1. On the **New** pane, select **Networking** and then select **Virtual network**.
43
40
44
41
1. Select **Add** to create a virtual network.
@@ -62,27 +59,25 @@ To create a cache using the portal:
62
59
63
60
1. Select the **Review + create** pane or select the **Review + create** button.
64
61
65
-
1. Verify that all the information is correct and select **Create** to create the virtual network.
62
+
1. Verify that all the information is correct, and select **Create** to create the virtual network.
66
63
67
-
###Create an Azure Managed Redis instance with a private endpoint connected to a Virtual Network Subnet
64
+
## Create an Azure Managed Redis instance with a private endpoint connected to a Virtual Network Subnet
68
65
69
-
To create a cache instance, follow these steps:
66
+
To create an Azure Managed Redis cache instance and add a private endpoint, follow these steps. You first must [create a virtual network](#create-a-virtual-network-with-a-subnet) to use with your cache.
70
67
71
-
1. Go back to the Azure portal home page or open the sidebar menu, then select **Create a resource**.
68
+
1. Go to the Azure portal home page, or open the sidebar menu, and select **Create a resource**.
72
69
73
70
1. In the search box, type _Azure Managed Redis_. Refine your search to Azure services only, and select **Azure Managed Redis**.
74
71
75
72
1. On the **New Azure Managed Redis** pane, configure the basic settings for your new cache.
76
73
77
-
1. Select the **Networking**pane or select the **Networking** at the bottom of the pane.
74
+
1. Select the **Networking**tab, or select the **Next: Networking** at the bottom of the working pane.
78
75
79
76
1. In the **Networking** pane, select **Private Endpoint** for the connectivity method.
80
77
81
-
1. Select the **Add**button to create your private endpoint.
78
+
1. Select the **Add private endpoint** to add your private endpoint.
82
79
83
-
:::image type="content" source="media/private-link/3-add-private-endpoint.png" alt-text="In networking, add a private endpoint.":::
84
-
85
-
1. On the **Create a private endpoint** pane, configure the settings for your private endpoint with the virtual network and subnet you created in the last section and select **OK**.
80
+
1. On the **Create private endpoint** pane, configure the settings for your private endpoint with the virtual network and subnet you created in the last section and select **Add**.
86
81
87
82
1. Proceed with other tabs to fill out the configuration settings as needed.
88
83
@@ -92,30 +87,25 @@ To create a cache instance, follow these steps:
92
87
93
88
It takes a while for the cache to create. You can monitor progress on the Azure Managed Redis **Overview** pane. When **Status** shows as **Running**, the cache is ready to use.
94
89
95
-
## Create a private endpoint for use with an existing Azure Managed Redis instance
90
+
## Add a private endpoint to an existing Azure Managed Redis instance
96
91
97
92
In this section, you add a private endpoint to an existing Azure Managed Redis instance.
98
93
99
94
1. The first step is to [create a virtual network](#create-a-virtual-network-with-a-subnet) for use with your existing cache.
100
-
1. Then, you open your cache in the portal and add the subnet that you created to in the first step.
101
-
102
-
### Create a virtual network with a subnet for your existing cache
103
-
104
-
To create a virtual network, follow these [steps](#create-a-virtual-network-with-a-subnet).
105
95
106
-
### Add a private endpoint to an existing Azure Managed Redis cache
96
+
1. Then, you open your cache in the portal and add the [subnet you created](#create-a-virtual-network-with-a-subnet) to in the first step.
107
97
108
-
To create a private endpoint, follow these steps:
98
+
After you create a private endpoint, follow these steps:
109
99
110
100
1. In the Azure portal, select the cache instance you want to add a private endpoint to.
111
101
112
-
1. Select **Private Endpoint** from the resource menu to create your private endpoint for your cache.
102
+
1. Select **Private Endpoint** from the resource menu under **Administration**to create your private endpoint for your cache.
113
103
114
-
1. On the **Create a private endpoint** pane, configure the settings for your private endpoint.
104
+
1. On the **Private endpoint** pane, select **+ Private Endpoint** to add the settings for your private endpoint.
|**Subscription**| Drop down and select your subscription. | The subscription where you create this private endpoint. |
108
+
|**Subscription**| Drop down and select your subscription. | The subscription where you created your virtual network. |
119
109
|**Resource group**| Drop down and select a resource group, or select **Create new** and enter a new resource group name. | Name for the resource group in which to create your private endpoint and other resources. By putting all your app resources in one resource group, you can easily manage or delete them together. |
120
110
|**Name**| Enter a private endpoint name. | The name must: begin with a letter or number; end with a letter, number, or underscore; and can contain only letters, numbers, underscores, periods, or hyphens. |
121
111
|**Network Interface Name**| Autogenerated based on the **Name**. | The name must: begin with a letter or number; end with a letter, number, or underscore; and can contain only letters, numbers, underscores, periods, or hyphens. |
@@ -129,7 +119,7 @@ To create a private endpoint, follow these steps:
129
119
130
120
1. Select the **Next: Virtual Network** button at the bottom of the pane.
131
121
132
-
1. In the **Virtual Network** pane, select the **Virtual Nnetwork** and **Subnet** you created in the previous section.
122
+
1. In the **Virtual Network** pane, select the **Virtual Network** and **Subnet** you created in the [previous section](#create-a-virtual-network-with-a-subnet).
133
123
134
124
<!-- We don't talk about DNS zones -->
135
125
@@ -143,11 +133,11 @@ To create a private endpoint, follow these steps:
143
133
144
134
> [!IMPORTANT]
145
135
>
146
-
> There is currently no `publicNetworkAccess` property for Azure Managed Redis resource.
147
-
> If there is a Private Endpoint connected to the Azure Managed Redis resource, it would only accept private traffic from the Virtual Network it's connected to.
136
+
> There's currently no `publicNetworkAccess` property for Azure Managed Redis resource.
137
+
> If sPrivate Endpoint is connected to the Azure Managed Redis cache, it only accepts private traffic from the connect Virtual Network.
148
138
> If you delete the Private Endpoint, the resource is automatically opened to public network access.
149
139
150
-
## Create an AMR connected to a private endpoint using Azure PowerShell
140
+
## Create an Azure Managed Redis cache connected to a private endpoint using Azure PowerShell
151
141
152
142
To create a private endpoint named _MyPrivateEndpoint_ for an existing Azure Managed Redis instance, run the following PowerShell script. Replace the variable values with the details for your environment:
153
143
@@ -195,7 +185,7 @@ To remove a private endpoint, use the following PowerShell command:
## Create an AMR connected to a private endpoint using Azure CLI
188
+
## Create an Azure Managed Redis cache connected to a private endpoint using Azure CLI
199
189
200
190
To create a private endpoint named _myPrivateEndpoint_ for an existing Azure Managed Redis instance, run the following Azure CLI script. Replace the variable values with the details for your environment:
201
191
@@ -257,12 +247,12 @@ To remove a private endpoint, use the following CLI command:
257
247
```azurecli-interactive
258
248
az network private-endpoint delete --name MyPrivateEndpoint --resource-group MyResourceGroup
259
249
```
250
+
260
251
## Azure Managed Redis Private Endpoint Private DNS zone value
261
252
Your application should connect to `<cachename>.<region>.redis.azure.net` on port `10000`. A private DNS zone, named `*.privatelink.redis.azure.net`, is automatically created in your subscription. The private DNS zone is vital for espanelishing the TLS connection with the private endpoint. We recommend avoiding the use of `<cachename>.privatelink.redis.azure.net` in configuration for client connection.
262
253
263
254
For more information, see [Azure services DNS zone configuration](/azure/private-link/private-endpoint-dns).
264
255
265
-
266
256
## FAQ
267
257
268
258
-[Why can't I connect to a private endpoint?](#why-cant-i-connect-to-a-private-endpoint)
@@ -292,8 +282,6 @@ For more information, see [Azure services DNS zone configuration](/azure/private
292
282
293
283
Go to **Overview** in the Resource menu on the portal. You see the **Host name** for your cache in the working pane. To verify that the command resolves to the private IP address for the cache, run a command like `nslookup <hostname>` from within the VNet that is linked to the private endpoint.
294
284
295
-
:::image type="content" source="media/private-link/managed-redis-private-ip-address.png" alt-text="In the Azure portal, private endpoint D N S settings.":::
296
-
297
285
### How can I change my private endpoint to be disabled or enabled from public network access?
298
286
299
287
To change the value in the Azure portal, follow these steps:
0 commit comments