Skip to content

Commit 78c27db

Browse files
Merge pull request #217668 from alfpark/batch-fixups
Remove opt-in text for Batch npip and scnc
2 parents 48d2fe1 + 6f5fa11 commit 78c27db

File tree

1 file changed

+15
-9
lines changed

1 file changed

+15
-9
lines changed

articles/batch/simplified-node-communication-pool-no-public-ip.md

Lines changed: 15 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Create a simplified node communication pool without public IP addresses (preview)
33
description: Learn how to create an Azure Batch simplified node communication pool without public IP addresses.
44
ms.topic: how-to
5-
ms.date: 05/26/2022
5+
ms.date: 11/08/2022
66
ms.custom: references_regions
77
---
88

@@ -41,11 +41,17 @@ To restrict access to these nodes and reduce the discoverability of these nodes
4141

4242
- If you plan to use a [private endpoint with Batch accounts](private-connectivity.md), you must disable private endpoint network policies. Run the following Azure CLI command:
4343

44-
`az network vnet subnet update --vnet-name <vnetname> -n <subnetname> --resource-group <resourcegroup> --disable-private-endpoint-network-policies`
44+
```azurecli-interactive
45+
az network vnet subnet update \
46+
--vnet-name <vnetname> \
47+
-n <subnetname> \
48+
--resource-group <resourcegroup> \
49+
--disable-private-endpoint-network-policies
50+
```
4551

4652
- Enable outbound access for Batch node management. A pool with no public IP addresses doesn't have internet outbound access enabled by default. To allow compute nodes to access the Batch node management service (see [Use simplified compute node communication](simplified-compute-node-communication.md)) either:
4753

48-
- Use [**nodeManagement**](private-connectivity.md) private endpoint with Batch accounts, which provides private access to Batch node management service from the virtual network. This is the preferred method.
54+
- Use [**nodeManagement**](private-connectivity.md) private endpoint with Batch accounts, which provides private access to Batch node management service from the virtual network. This solution is the preferred method.
4955

5056
- Alternatively, provide your own internet outbound access support (see [Outbound access to the internet](#outbound-access-to-the-internet)).
5157

@@ -66,7 +72,7 @@ To restrict access to these nodes and reduce the discoverability of these nodes
6672
1. In the **Pools** window, select **Add**.
6773
1. On the **Add Pool** window, select the option you intend to use from the **Image Type** dropdown.
6874
1. Select the correct **Publisher/Offer/Sku** of your image.
69-
1. Specify the remaining required settings, including the **Node size**, **Target dedicated nodes**, and **Target Spot/low-priority nodes**, as well as any desired optional settings.
75+
1. Specify the remaining required settings, including the **Node size**, **Target dedicated nodes**, and **Target Spot/low-priority nodes**, and any desired optional settings.
7076
1. Select a virtual network and subnet you wish to use. This virtual network must be in the same location as the pool you're creating.
7177
1. In **IP address provisioning type**, select **NoPublicIPAddresses**.
7278

@@ -138,13 +144,13 @@ If you're familiar with using ARM templates, select the **Deploy to Azure** butt
138144
[![Deploy to Azure](../media/template-deployments/deploy-to-azure.svg)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2Fazure-quickstart-templates%2Fmaster%2Fquickstarts%2Fmicrosoft.batch%2Fbatch-pool-no-public-ip%2Fazuredeploy.json)
139145

140146
> [!NOTE]
141-
> If the private endpoint deployment failed due to invalid groupId "nodeManagement", please check if the region is in the supported list, and you've already opted in with [Simplified compute node communication](simplified-compute-node-communication.md). Choose the right region and opt in your Batch account, then retry the deployment.
147+
> If the private endpoint deployment failed due to invalid groupId "nodeManagement", please check if the region is in the supported list, and your pool is using [Simplified compute node communication](simplified-compute-node-communication.md). Choose the right region, specify `simplified` node communiction mode for the pool, and then retry the deployment.
142148
143149
## Outbound access to the internet
144150

145-
In a pool without public IP addresses, your virtual machines won't be able to access the public internet unless you configure your network setup appropriately, such as by using [virtual network NAT](../virtual-network/nat-gateway/nat-overview.md). Note that NAT only allows outbound access to the internet from the virtual machines in the virtual network. Batch-created compute nodes won't be publicly accessible, since they don't have public IP addresses associated.
151+
In a pool without public IP addresses, your virtual machines won't be able to access the public internet unless you configure your network setup appropriately, such as by using [virtual network NAT](../virtual-network/nat-gateway/nat-overview.md). NAT only allows outbound access to the internet from the virtual machines in the virtual network. Batch-created compute nodes won't be publicly accessible, since they don't have public IP addresses associated.
146152

147-
Another way to provide outbound connectivity is to use a user-defined route (UDR). This lets you route traffic to a proxy machine that has public internet access, for example [Azure Firewall](../firewall/overview.md).
153+
Another way to provide outbound connectivity is to use a user-defined route (UDR). This method lets you route traffic to a proxy machine that has public internet access, for example [Azure Firewall](../firewall/overview.md).
148154

149155
> [!IMPORTANT]
150156
> There is no extra network resource (load balancer, network security group) created for simplified node communication pools without public IP addresses. Since the compute nodes in the pool are not bound to any load balancer, Azure may provide [Default Outbound Access](../virtual-network/ip-services/default-outbound-access.md). However, Default Outbound Access is not suitable for production workloads, so it is strongly recommended to bring your own Internet outbound access.
@@ -188,10 +194,10 @@ You can follow the guide [Connect to compute nodes](error-handling.md#connect-to
188194

189195
## Migration from previous preview version of No Public IP pools
190196

191-
For existing pools that use the [previous preview version of Azure Batch No Public IP pool](batch-pool-no-public-ip-address.md), it's only possible to migrate pools created in a [virtual network](batch-virtual-network.md). To migrate the pool, follow the [opt-in process for simplified node communication](simplified-compute-node-communication.md):
197+
For existing pools that use the [previous preview version of Azure Batch No Public IP pool](batch-pool-no-public-ip-address.md), it's only possible to migrate pools created in a [virtual network](batch-virtual-network.md).
192198

193-
1. Opt in to use simplified node communication.
194199
1. Create a [private endpoint for Batch node management](private-connectivity.md) in the virtual network.
200+
1. Update the pool's node communication mode to [simplified](simplified-compute-node-communication.md).
195201
1. Scale down the pool to zero nodes.
196202
1. Scale out the pool again. The pool is then automatically migrated to the new version of the preview.
197203

0 commit comments

Comments
 (0)