Skip to content

Commit 6a33b79

Browse files
authored
Merge pull request #110492 from Blackmist/aci-vnet
add support for aci in vnet
2 parents e1b90e0 + f582730 commit 6a33b79

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

articles/machine-learning/how-to-enable-virtual-network.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -482,6 +482,21 @@ The contents of the `body.json` file referenced by the command are similar to th
482482
483483
For more information on using the internal load balancer with AKS, see [Use internal load balancer with Azure Kubernetes Service](/azure/aks/internal-lb).
484484
485+
## Use Azure Container Instances (ACI)
486+
487+
Azure Container Instances are dynamically created when deploying a model. To enable Azure Machine Learning to create ACI inside the virtual network, you must enable __subnet delegation__ for the subnet used by the deployment.
488+
489+
To use ACI in a virtual network to your workspace, use the following steps:
490+
491+
1. To enable subnet delegation on your virtual network, use the information in the [Add or remove a subnet delegation](../virtual-network/manage-subnet-delegation.md) article. You can enable delegation when creating a virtual network, or add it to an existing network.
492+
493+
> [!IMPORTANT]
494+
> When enabling delegation, use `Microsoft.ContainerInstance/containerGroups` as the __Delegate subnet to service__ value.
495+
496+
2. Deploy the model using [AciWebservice.deploy_configuration()](https://docs.microsoft.com/python/api/azureml-core/azureml.core.webservice.aci.aciwebservice?view=azure-ml-py#deploy-configuration-cpu-cores-none--memory-gb-none--tags-none--properties-none--description-none--location-none--auth-enabled-none--ssl-enabled-none--enable-app-insights-none--ssl-cert-pem-file-none--ssl-key-pem-file-none--ssl-cname-none--dns-name-label-none--primary-key-none--secondary-key-none--collect-model-data-none--cmk-vault-base-url-none--cmk-key-name-none--cmk-key-version-none--vnet-name-none--subnet-name-none-), use the `vnet_name` and `subnet_name` parameters. Set these parameters to the virtual network name and subnet where you enabled delegation.
497+
498+
499+
485500
## Use Azure Firewall
486501
487502
When using Azure Firewall, you must configure a network rule to allow traffic to and from the following addresses:

0 commit comments

Comments
 (0)