You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/batch/batch-pools-without-public-ip-addresses-classic-retirement-migration-guide.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,22 +10,22 @@ ms.date: 09/01/2022
10
10
11
11
# Migrate pools without public IP addresses (classic) in Batch
12
12
13
-
The Azure Batch feature pools without public IP addresses (classic) will retire on *March 31, 2023*. Learn how to migrate eligible pools to simplified compute node communication (preview) pools without public IP addresses. You must opt in to migrate your Batch pools.
13
+
The Azure Batch feature pools without public IP addresses (classic) will be retired on *March 31, 2023*. Learn how to migrate eligible pools to simplified compute node communication (preview) pools without public IP addresses. You must opt in to migrate your Batch pools.
14
14
15
15
## About the feature
16
16
17
17
By default, all the compute nodes in an Azure Batch virtual machine (VM) configuration pool are assigned a public IP address. The Batch service uses the IP address to schedule tasks and for communication with compute nodes, including outbound access to the internet. To restrict access to these nodes and reduce public discoverability of the nodes, we released the Batch feature [pools without public IP addresses (classic)](./batch-pool-no-public-ip-address.md). Currently, the feature is in preview.
18
18
19
19
## Feature end of support
20
20
21
-
In late 2021, we launched a simplified compute node communication model for Azure Batch. The new communication model improves security and simplifies the user experience. Batch pools no longer require inbound internet access and outbound access to Azure Storage. Batch pools now need only outbound access to the Batch service. As a result, on March 31, 2023, we will retire the Batch feature pools without public IP addresses (classic). The feature will be replaced in Batch with simplified compute node communication for pools without public IP addresses.
21
+
In late 2021, we launched a simplified compute node communication model for Azure Batch. The new communication model improves security and simplifies the user experience. Batch pools no longer require inbound internet access and outbound access to Azure Storage. Batch pools now need only outbound access to the Batch service. As a result, on March 31, 2023, we'll retire the Batch feature pools without public IP addresses (classic). The feature will be replaced in Batch with simplified compute node communication for pools without public IP addresses.
22
22
23
23
## Alternative: Use simplified node communication
24
24
25
25
The alternative to using a Batch pool without a public IP address (classic) requires using [simplified node communication](./simplified-node-communication-pool-no-public-ip.md). The option gives you enhanced security for your workload environments on network isolation and data exfiltration to Batch accounts. The key benefits include:
26
26
27
27
- You can create simplified node communication pools without public IP addresses.
28
-
- You can create a Batch private pool by using a new private endpoint (in the nodeManagement sub-resource) for an Azure Batch account.
28
+
- You can create a Batch private pool by using a new private endpoint (in the nodeManagement subresource) for an Azure Batch account.
29
29
- Use a simplified private link DNS zone for Batch account private endpoints. The private link changes from `privatelink.<region>.batch.azure.com` to `privatelink.batch.azure.com`.
30
30
- Use mutable public network access for Batch accounts.
31
31
- Get firewall support for Batch account public endpoints. You can configure IP address network rules to restrict public network access to your Batch account.
@@ -60,11 +60,11 @@ When the Batch feature pools without public IP addresses (classic) retires on Ma
60
60
61
61
- What differences will I see in billing?
62
62
63
-
Compared to Batch pools without public IP addresses (classic), the simplified compute node communication pools without public IPs support reduces cost because it doesn't create the following network resources with Batch pool deployments: load balancer, network security groups, and private link service. However, you'll see a cost associated with [Azure Private Link](https://azure.microsoft.com/pricing/details/private-link/) or other outbound network connectivity that your pools use for communication with the Batch service.
63
+
Compared to Batch pools without public IP addresses (classic), the simplified compute node communication pools without public IP addresses support reduces cost because it doesn't create the following network resources with Batch pool deployments: load balancer, network security groups, and private link service. However, you'll see a cost associated with [Azure Private Link](https://azure.microsoft.com/pricing/details/private-link/) or other outbound network connectivity that your pools use for communication with the Batch service.
64
64
65
65
- Will I see any changes in performance?
66
66
67
-
No known performance differences exist for simplified compute node communication pools without public IPs compared to Batch pools without public IP addresses (classic).
67
+
No known performance differences exist for simplified compute node communication pools without public IP addresses compared to Batch pools without public IP addresses (classic).
68
68
69
69
- How can I connect to my pool nodes for troubleshooting?
Copy file name to clipboardExpand all lines: articles/batch/batch-tls-101-migration-guide.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Migrate client code to TLS 1.2 in Azure Batch
3
-
description: Learn how to migrate client code to TLS 1.2 in Azure Batch to prepare for end of support for TLS 1.0 and TLS 1.1.
3
+
description: Learn how to migrate client code to TLS 1.2 in Azure Batch to plan for end of support for TLS 1.0 and TLS 1.1.
4
4
author: harperche
5
5
ms.author: harpercheng
6
6
ms.service: batch
@@ -14,13 +14,13 @@ To support security best practices and remain in compliance with industry standa
14
14
15
15
## End of support for TLS 1.0 and TLS 1.1 in Batch
16
16
17
-
TLS versions 1.0 and 1.1 are known to be susceptible to BEAST and POODLE attacks and to have other Common Vulnerabilities and Exposures (CVE) weaknesses. TLS 1.0 and 1.1 don't support the modern encryption methods and cipher suites that the Payment Card Industry (PCI) compliance standards recommends. Microsoft is participating in an industry-wide push toward the exclusive use of TLS version 1.2 or later.
17
+
TLS versions 1.0 and TLS 1.1 are known to be susceptible to BEAST and POODLE attacks and to have other Common Vulnerabilities and Exposures (CVE) weaknesses. TLS 1.0 and TLS 1.1 don't support the modern encryption methods and cipher suites that the Payment Card Industry (PCI) compliance standards recommends. Microsoft is participating in an industry-wide push toward the exclusive use of TLS version 1.2 or later.
18
18
19
-
Most customers have already migrated to TLS 1.2. Customers who continue to use TLS 1.0 or 1.1 can be identified via existing BatchOperation telemetry. If you're using TLS 1.0 or 1.1, to avoid disruption to your Batch workflows, you must adjust existing workflows to ensure that you're using TLS 1.2.
19
+
Most customers have already migrated to TLS 1.2. Customers who continue to use TLS 1.0 or TLS 1.1 can be identified via existing BatchOperation data. If you're using TLS 1.0 or TLS 1.1, to avoid disruption to your Batch workflows, update existing workflows to use TLS 1.2.
20
20
21
-
## Alternative: Migrate to TLS 1.2
21
+
## Alternative: Use TLS 1.2
22
22
23
-
To avoid disruption to your Batch workflows, you must update your client code to use TLS 1.2 before the TLS 1.0 and 1.1 retirement in Batch on March 31, 2023.
23
+
To avoid disruption to your Batch workflows, you must update your client code to use TLS 1.2 before the TLS 1.0 and TLS 1.1 retirement in Batch on March 31, 2023.
24
24
25
25
For specific development use cases, see the following information:
26
26
@@ -46,7 +46,7 @@ For more information, see [TLS best practices for the .NET Framework](/dotnet/fr
46
46
47
47
Upgrading to TLS 1.2 won't affect your application's performance.
48
48
49
-
- How do I know if I’m using TLS 1.0/1.1?
49
+
- How do I know if I’m using TLS 1.0 or TLS 1.1?
50
50
51
51
To determine the TLS version you're using, check the audit log for your Batch deployment.
0 commit comments