You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/batch/simplified-node-communication-pool-no-public-ip.md
+15-9Lines changed: 15 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: Create a simplified node communication pool without public IP addresses (preview)
3
3
description: Learn how to create an Azure Batch simplified node communication pool without public IP addresses.
4
4
ms.topic: how-to
5
-
ms.date: 05/26/2022
5
+
ms.date: 11/08/2022
6
6
ms.custom: references_regions
7
7
---
8
8
@@ -41,11 +41,17 @@ To restrict access to these nodes and reduce the discoverability of these nodes
41
41
42
42
- If you plan to use a [private endpoint with Batch accounts](private-connectivity.md), you must disable private endpoint network policies. Run the following Azure CLI command:
- Enable outbound access for Batch node management. A pool with no public IP addresses doesn't have internet outbound access enabled by default. To allow compute nodes to access the Batch node management service (see [Use simplified compute node communication](simplified-compute-node-communication.md)) either:
47
53
48
-
- Use [**nodeManagement**](private-connectivity.md) private endpoint with Batch accounts, which provides private access to Batch node management service from the virtual network. This is the preferred method.
54
+
- Use [**nodeManagement**](private-connectivity.md) private endpoint with Batch accounts, which provides private access to Batch node management service from the virtual network. This solution is the preferred method.
49
55
50
56
- Alternatively, provide your own internet outbound access support (see [Outbound access to the internet](#outbound-access-to-the-internet)).
51
57
@@ -66,7 +72,7 @@ To restrict access to these nodes and reduce the discoverability of these nodes
66
72
1. In the **Pools** window, select **Add**.
67
73
1. On the **Add Pool** window, select the option you intend to use from the **Image Type** dropdown.
68
74
1. Select the correct **Publisher/Offer/Sku** of your image.
69
-
1. Specify the remaining required settings, including the **Node size**, **Target dedicated nodes**, and **Target Spot/low-priority nodes**, as well as any desired optional settings.
75
+
1. Specify the remaining required settings, including the **Node size**, **Target dedicated nodes**, and **Target Spot/low-priority nodes**, and any desired optional settings.
70
76
1. Select a virtual network and subnet you wish to use. This virtual network must be in the same location as the pool you're creating.
71
77
1. In **IP address provisioning type**, select **NoPublicIPAddresses**.
72
78
@@ -138,13 +144,13 @@ If you're familiar with using ARM templates, select the **Deploy to Azure** butt
138
144
[](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2Fazure-quickstart-templates%2Fmaster%2Fquickstarts%2Fmicrosoft.batch%2Fbatch-pool-no-public-ip%2Fazuredeploy.json)
139
145
140
146
> [!NOTE]
141
-
> If the private endpoint deployment failed due to invalid groupId "nodeManagement", please check if the region is in the supported list, and you've already opted in with [Simplified compute node communication](simplified-compute-node-communication.md). Choose the right region and opt in your Batch account, then retry the deployment.
147
+
> If the private endpoint deployment failed due to invalid groupId "nodeManagement", please check if the region is in the supported list, and your pool is using [Simplified compute node communication](simplified-compute-node-communication.md). Choose the right region, specify `simplified` node communiction mode for the pool, and then retry the deployment.
142
148
143
149
## Outbound access to the internet
144
150
145
-
In a pool without public IP addresses, your virtual machines won't be able to access the public internet unless you configure your network setup appropriately, such as by using [virtual network NAT](../virtual-network/nat-gateway/nat-overview.md). Note that NAT only allows outbound access to the internet from the virtual machines in the virtual network. Batch-created compute nodes won't be publicly accessible, since they don't have public IP addresses associated.
151
+
In a pool without public IP addresses, your virtual machines won't be able to access the public internet unless you configure your network setup appropriately, such as by using [virtual network NAT](../virtual-network/nat-gateway/nat-overview.md). NAT only allows outbound access to the internet from the virtual machines in the virtual network. Batch-created compute nodes won't be publicly accessible, since they don't have public IP addresses associated.
146
152
147
-
Another way to provide outbound connectivity is to use a user-defined route (UDR). This lets you route traffic to a proxy machine that has public internet access, for example [Azure Firewall](../firewall/overview.md).
153
+
Another way to provide outbound connectivity is to use a user-defined route (UDR). This method lets you route traffic to a proxy machine that has public internet access, for example [Azure Firewall](../firewall/overview.md).
148
154
149
155
> [!IMPORTANT]
150
156
> There is no extra network resource (load balancer, network security group) created for simplified node communication pools without public IP addresses. Since the compute nodes in the pool are not bound to any load balancer, Azure may provide [Default Outbound Access](../virtual-network/ip-services/default-outbound-access.md). However, Default Outbound Access is not suitable for production workloads, so it is strongly recommended to bring your own Internet outbound access.
@@ -188,10 +194,10 @@ You can follow the guide [Connect to compute nodes](error-handling.md#connect-to
188
194
189
195
## Migration from previous preview version of No Public IP pools
190
196
191
-
For existing pools that use the [previous preview version of Azure Batch No Public IP pool](batch-pool-no-public-ip-address.md), it's only possible to migrate pools created in a [virtual network](batch-virtual-network.md). To migrate the pool, follow the [opt-in process for simplified node communication](simplified-compute-node-communication.md):
197
+
For existing pools that use the [previous preview version of Azure Batch No Public IP pool](batch-pool-no-public-ip-address.md), it's only possible to migrate pools created in a [virtual network](batch-virtual-network.md).
192
198
193
-
1. Opt in to use simplified node communication.
194
199
1. Create a [private endpoint for Batch node management](private-connectivity.md) in the virtual network.
200
+
1. Update the pool's node communication mode to [simplified](simplified-compute-node-communication.md).
195
201
1. Scale down the pool to zero nodes.
196
202
1. Scale out the pool again. The pool is then automatically migrated to the new version of the preview.
0 commit comments