You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/site-recovery/hybrid-how-to-enable-replication-private-endpoints.md
+7-8Lines changed: 7 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -38,7 +38,7 @@ then create private endpoints in the bypass network. You can choose any form of
38
38
**Before you start, note the following:**
39
39
40
40
- Private links are supported in Site Recovery 9.35 and later.
41
-
- You can create private endpoints only for new Recovery Services vaults that don't have any items registered to them. So you must create private endpoints before any items are added to the vault. See [Azure Private Link pricing](https://azure.microsoft.com/pricing/details/private-link/) for pricing information.
41
+
- You can create private endpoints only for new Recovery Services vaults that don't have any items registered to them. Therefore, you must create private endpoints before any items are added to the vault. See [Azure Private Link pricing](https://azure.microsoft.com/pricing/details/private-link/) for pricing information.
42
42
- When you create a private endpoint for a vault, the vault is locked down. It can be accessed only from networks that have private endpoints.
43
43
- Azure Active Directory doesn't currently support private endpoints. So you need to allow outbound access from the secured Azure virtual network to IPs and fully qualified domain names that are required for Azure Active Directory to work in a region. As applicable, you can also use network security group tag "Azure Active Directory" and Azure Firewall tags to allow access to Azure Active Directory.
44
44
- Five IP addresses are required in the bypass network where you create your private endpoint. When you create a private endpoint for the vault, Site Recovery creates five private links for access to its microservices.
@@ -49,7 +49,7 @@ then create private endpoints in the bypass network. You can choose any form of
49
49
50
50
### URLs to be allowed
51
51
52
-
When using the private link with modernized experience for VMware VMs, public access is needed for a few resources. Below are all URLs to be included in the allowlist. If proxy-based configuration is used then make sure that the proxy resolves any CNAME records received while looking up the URLs.
52
+
When using the private link with modernized experience for VMware VMs, public access is needed for a few resources. Below are all URLs to be included in the allowlist. If proxy-based configuration is used, make sure that the proxy resolves any CNAME records received while looking up the URLs.
@@ -100,7 +100,7 @@ To protect the machines in the on-premises source network, you'll need one priva
100
100
101
101
1. In the [Azure portal](https://portal.azure.com), select **Create a resource**.
102
102
1. Search the Azure Marketplace for *Private link*.
103
-
1. Select **Private Link** from the search results, and in the Backup and Site Recovery page, click**Create**.
103
+
1. Select **Private Link** from the search results, and in the Backup and Site Recovery page, select**Create**.
104
104
105
105
:::image type="content" source="./media/hybrid-how-to-enable-replication-private-endpoints/marketplace.png" alt-text="Screenshot that shows searching the Azure portal for Private Link Center.":::
106
106
@@ -267,10 +267,9 @@ Create one private DNS zone to allow the Site Recovery provider (for Hyper-V mac
267
267
268
268
1. Continue to the **Review \+ create** tab to review and create the DNS zone.
269
269
270
-
1. Link the private DNS zone to your virtual network.
271
-
272
-
You now need to link the private DNS zone that you created to the bypass.
270
+
1. To link the private DNS zone to your virtual network, follow these steps:
273
271
272
+
274
273
1. Go to the private DNS zone that you created in the previous step and then go to **Virtual
275
274
network links** in the left pane. Select **Add**.
276
275
@@ -304,5 +303,5 @@ Create one private DNS zone to allow the Site Recovery provider (for Hyper-V mac
304
303
305
304
Now that you've enabled private endpoints for your virtual machine replication, see these other articles for additional and related information:
306
305
307
-
-[Deploy an on-premises configuration server](./vmware-azure-deploy-configuration-server.md)
308
-
-[Set up disaster recovery of on-premises Hyper-V VMs to Azure](./hyper-v-azure-tutorial.md)
306
+
-[Deploy an on-premises configuration server](./vmware-azure-deploy-configuration-server.md).
307
+
-[Set up disaster recovery of on-premises Hyper-V VMs to Azure](./hyper-v-azure-tutorial.md).
1. **Target type** - select the subscription and the resource group in which you want to create the Azure VMs after failover. Choose the deployment model that you want to use in Azure (classic or resource management).
175
+
1. **Target type** - select the subscription and the resource group in which you want to create the Azure VMs after failover.
184
176
1. **RPO threshold in mins** - specify the recovery point objective (RPO) limit. This value specifies how often data recovery points are created. An alert is generated if continuous replication exceeds this limit..
185
177
1. **Retention period (in days)** - specify how long (in days) the retention window is for each recovery point. Replicated VMs can be recovered to any point in a window. Up to 15 days retention is supported.
186
178
1. In **App-consistent snapshot frequency**, specify how often (in hours) recovery points containing application-consistent snapshots will be created.
0 commit comments