You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/batch/batch-account-create-portal.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -54,7 +54,7 @@ Once the account has been created, select the account to access its settings and
54
54
> [!NOTE]
55
55
> The name of the Batch account is its ID and can't be changed. If you need to change the name of a Batch account, you'll need to delete the account and create a new one with the intended name.
56
56
57
-
:::image type="content" source="media/batch-account-create-portal/batch_blade.png" alt-text="Screenshot of the Batch account page in the Azure portal.":::
57
+
:::image type="content" source="media/batch-account-create-portal/batch-blade.png" alt-text="Screenshot of the Batch account page in the Azure portal.":::
58
58
59
59
When you develop an application with the [Batch APIs](batch-apis-tools.md#azure-accounts-for-batch-development), you need an account URL and key to access your Batch resources. (Batch also supports Azure Active Directory authentication.) To view the Batch account access information, select **Keys**.
Copy file name to clipboardExpand all lines: articles/batch/batch-pool-no-public-ip-address.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,7 @@ ms.custom: references_regions
16
16
17
17
When you create an Azure Batch pool, you can provision the virtual machine configuration pool without a public IP address. This article explains how to set up a Batch pool without public IP addresses.
18
18
19
-
## Why use a pool without public IP Addresses?
19
+
## Why use a pool without public IP addresses?
20
20
21
21
By default, all the compute nodes in an Azure Batch virtual machine configuration pool are assigned a public IP address. This address is used by the Batch service to schedule tasks and for communication with compute nodes, including outbound access to the internet.
:::image type="content" source="media/private-connectivity/private-endpoint-connections.png" alt-text="Screenshot of private endpoint connections.":::
38
38
3. In the **Basics** pane, enter or select the subscription, resource group, private endpoint resource name and region details, then select **Next: Resource**.
39
-
:::image type="content" source="media/private-connectivity/create-private-endpoint-basics.png" alt-text="Create a private endpoint - Basics pane":::
39
+
:::image type="content" source="media/private-connectivity/create-private-endpoint-basics.png" alt-text="Screenshot of creating a private endpoint - Basics pane.":::
40
40
4. In the **Resource** pane, set the **Resource type** to **Microsoft.Batch/batchAccounts**. Select the Batch account you want to access, select the target sub-resource, then select **Next: Configuration**.
41
-
:::image type="content" source="media/private-connectivity/create-private-endpoint.png" alt-text="Create a private endpoint - Resource pane":::
41
+
:::image type="content" source="media/private-connectivity/create-private-endpoint.png" alt-text="Screenshot of creating a private endpoint - Resource pane.":::
42
42
5. In the **Configuration** pane, enter or select this information:
43
43
- For **Virtual network**, select your virtual network.
44
44
- For **Subnet**, select your subnet.
@@ -105,7 +105,7 @@ For details on costs related to private endpoints, see [Azure Private Link prici
105
105
106
106
## Current limitations and best practices
107
107
108
-
When creating private endpoint with your Batch account, keep in mind the following:
108
+
When creating a private endpoint with your Batch account, keep in mind the following:
109
109
110
110
- Private endpoint resources with the sub-resource **batchAccount** must be created in the same subscription as the Batch account.
111
111
- Resource movement is not supported for private endpoints with Batch accounts.
Copy file name to clipboardExpand all lines: articles/batch/public-network-access.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ ms.date: 05/26/2022
9
9
10
10
By default, [Azure Batch accounts](accounts.md) have public endpoints and are publicly accessible. This article shows how to configure your Batch account to allow access from only specific public IP addresses or IP address ranges.
11
11
12
-
IP network rules are configured on the public endpoints. IP network rules do not apply to private endpoints configured with [Private Link](private-connectivity.md).
12
+
IP network rules are configured on the public endpoints. IP network rules don't apply to private endpoints configured with [Private Link](private-connectivity.md).
13
13
14
14
Each endpoint supports a maximum of 200 IP network rules.
15
15
@@ -22,7 +22,7 @@ Batch accounts have two public endpoints:
22
22
23
23
You can check both endpoints in account properties when you query the Batch account with [Batch Management REST API](/rest/api/batchmanagement/batch-account/get). You can also check them in the overview for your Batch account in the Azure portal:
:::image type="content" source="media/public-access/batch-account-endpoints.png" alt-text="Screenshot of Batch account endpoints.":::
26
26
27
27
You can configure public network access to Batch account endpoints with the following options:
28
28
@@ -36,7 +36,7 @@ You can configure public network access to Batch account endpoints with the foll
36
36
1. Under **Settings**, select **Networking**.
37
37
1. On the **Public access** tab, select to allow public access from **Selected networks**.
38
38
1. Under access for each endpoint, enter a public IP address or address range in CIDR notation one by one.
39
-
:::image type="content" source="media/public-access/configure-public-access.png" alt-text="Configure public access with Batch account":::
39
+
:::image type="content" source="media/public-access/configure-public-access.png" alt-text="Screenshot of public access with Batch account.":::
40
40
1. Select **Save**.
41
41
42
42
> [!NOTE]
@@ -47,7 +47,7 @@ You can configure public network access to Batch account endpoints with the foll
47
47
48
48
## Disable public network access
49
49
50
-
Optionally, disable public public network access to Batch account endpoints. Disabling the public network access overrides all IP network rules configurations. For example, you might want to disable public access to a Batch account secured in a virtual network using [Private Link](private-connectivity.md).
50
+
Optionally, disable public network access to Batch account endpoints. Disabling the public network access overrides all IP network rules configurations. For example, you might want to disable public access to a Batch account secured in a virtual network using [Private Link](private-connectivity.md).
51
51
52
52
1. In the portal, navigate to your Batch account and select **Settings > Networking**.
53
53
1. On the **Public access** tab, select **Disabled**.
Copy file name to clipboardExpand all lines: articles/batch/simplified-compute-node-communication.md
+10-9Lines changed: 10 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,8 +1,9 @@
1
1
---
2
2
title: Use simplified compute node communication
3
-
description: Learn how the Azure Batch service is simplifying the way Batch pool infrastructure is managed and how to opt in or out of the .
3
+
description: Learn how the Azure Batch service is simplifying the way Batch pool infrastructure is managed and how to opt in or out of the feature.
4
4
ms.topic: how-to
5
-
ms.date: 10/21/2021
5
+
ms.date: 06/02/2022
6
+
ms.custom: references_regions
6
7
---
7
8
8
9
# Use simplified compute node communication
@@ -15,7 +16,7 @@ This document describes forthcoming changes with how the Azure Batch service com
15
16
> Support for simplified compute node communication in Azure Batch is currently in public preview. This preview version is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
16
17
> For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
17
18
18
-
Opting in is not required at this time. However, in the future, using simplified compute node communication will be required for all Batch accounts. At that time, an official retirement notice will be provided, with an opportunity to migrate your Batch pools before that happens.
19
+
Opting in isn't required at this time. However, in the future, using simplified compute node communication will be required for all Batch accounts. At that time, an official retirement notice will be provided, with an opportunity to migrate your Batch pools before that happens.
19
20
20
21
## Supported regions
21
22
@@ -58,11 +59,11 @@ Simplified compute node communication helps reduce security risks by removing th
58
59
59
60
The new model also provides more fine-grained data exfiltration control, since outbound communication to Storage.*region* is no longer required. You can explicitly lock down outbound communication to Azure Storage if required for your workflow (such as AppPackage storage accounts, other storage accounts for resource files or output files, or other similar scenarios).
60
61
61
-
Even if your workloads are not currently impacted by the changes (as described in the next section), you may still want to [opt in to use simplified compute node communication](#opt-your-batch-account-in-or-out-of-simplified-compute-node-communication) now. This will ensure your Batch workloads are ready for any future improvements enabled by this model.
62
+
Even if your workloads aren't currently impacted by the changes (as described in the next section), you may still want to [opt in to use simplified compute node communication](#opt-your-batch-account-in-or-out-of-simplified-compute-node-communication) now. This will ensure your Batch workloads are ready for any future improvements enabled by this model.
62
63
63
64
## Scope of impact
64
65
65
-
In many cases, this new communication model will not directly affect your Batch workloads. However, simplified compute node communication will have an impact for the following cases:
66
+
In many cases, this new communication model won't directly affect your Batch workloads. However, simplified compute node communication will have an impact for the following cases:
66
67
67
68
- Users who specify a Virtual Network as part of creating a Batch pool and do one or both of the following:
68
69
- Explicitly disable outbound network traffic rules that are incompatible with simplified compute node communication.
@@ -73,15 +74,15 @@ If either of these cases applies to you, and you would like to opt in to the pre
73
74
74
75
### Required network configuration changes
75
76
76
-
For impacted users, the following set of steps are required to migrate to the new communication model:
77
+
For impacted users, the following set of steps is required to migrate to the new communication model:
77
78
78
79
1. Ensure your networking configuration as applicable to Batch pools (NSGs, UDRs, firewalls, etc.) includes a union of the models (that is, the network rules prior to simplified compute node communication and after). At a minimum, these rules would be:
79
80
- Inbound:
80
81
- Destination ports 29876, 29877 over TCP from BatchNodeManagement.*region*
81
82
- Outbound:
82
83
- Destination port 443 over TCP to Storage.*region*
83
84
- Destination port 443 over TCP to BatchNodeManagement.*region*
84
-
1. If you have any additional inbound or outbound scenarios required by your workflow, you will need to ensure that your rules reflect these requirements.
85
+
1. If you have any additional inbound or outbound scenarios required by your workflow, you'll need to ensure that your rules reflect these requirements.
85
86
1.[Opt in to simplified compute node communication](#opt-your-batch-account-in-or-out-of-simplified-compute-node-communication) as described below.
86
87
1. Use one of the following options to update your workloads to use the new communication model. Whichever method you use, keep in mind that pools without public IP addresses are unaffected and can't currently use simplified compute node communication. Please see the [Current limitations](#current-limitations) section.
87
88
1. Create new pools and validate that the new pools are working correctly. Migrate your workload to the new pools and delete any earlier pools.
@@ -119,11 +120,11 @@ Use the following options when creating your request.
119
120
1. For **Problem type**, select **Batch Accounts**.
120
121
1. For **Problem subtype**, select **Other issues with Batch Accounts**.
121
122
1. Select **Next**, then select **Next** again to go to the **Additional details** page.
122
-
1. In **Additional details**, you can optionally specify that you want to enable all of the Batch accounts in your subscription, or across multiple subscription. If you do so, be sure to include the subscription IDs here.
123
+
1. In **Additional details**, you can optionally specify that you want to enable all of the Batch accounts in your subscription, or across multiple subscriptions. If you do so, be sure to include the subscription IDs here.
123
124
1. Make any other required selections on the page, then select **Next**.
124
125
1. Review your request details, then select **Create** to submit your support request.
125
126
126
-
After your request has been submitted, you will be notified once the account has been opted in (or out).
127
+
After your request has been submitted, you'll be notified once the account has been opted in (or out).
Copy file name to clipboardExpand all lines: articles/batch/simplified-node-communication-pool-no-public-ip.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ ms.custom: references_regions
18
18
19
19
When you create an Azure Batch pool, you can provision the virtual machine (VM) configuration pool without a public IP address. This article explains how to set up a Batch pool without public IP addresses.
20
20
21
-
## Why use a pool without public IP Addresses?
21
+
## Why use a pool without public IP addresses?
22
22
23
23
By default, all the compute nodes in an Azure Batch VM configuration pool are assigned a public IP address. This address is used by the Batch service to support outbound access to the internet, as well inbound access to compute nodes from the internet.
0 commit comments