Skip to content

Commit 8f2a2cd

Browse files
Edits
1 parent c9b1a35 commit 8f2a2cd

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

articles/container-registry/container-registry-private-link.md

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -465,9 +465,18 @@ If you created all the Azure resources in the same resource group and no longer
465465
az group delete --name $RESOURCE_GROUP
466466
```
467467

468-
## Integrating with AKS
468+
## Integrating with a registry with private link enabled
469469

470-
Once the private link configuration to the ACR is successfully complete, the registry handles the pull requests through the data endpoints. You have to update the routing configuration for the client proxy and client firewall with the data endpoints to handle the pull requests successfully. A client proxy will provide central traffic control to the [outbound requests][outbound-connection]. To handle local traffic a client proxy is not required, you can add into `noProxy` section to bypass the proxy. Requests to token server over private endpoint connection doesn't require the data endpoint configuration.
470+
To pull content from a registry with private link enabled, clients must allow access to the registry REST endpoint, as well as all regional data endpoints." The client proxy or firewall must allow access to
471+
472+
REST endpoint: `.azurecr.io`
473+
Data endpoint(s): `..data.azurecr.io`
474+
475+
For a geo-replicated registry, customer needs to configure access to the data endpoint for each regional replica.
476+
477+
You have to update the routing configuration for the client proxy and client firewall with the data endpoints to handle the pull requests successfully. A client proxy will provide central traffic control to the [outbound requests][outbound-connection]. To handle local traffic a client proxy is not required, you can add into `noProxy` section to bypass the proxy. Learn more about [HTTP proxy doc](../aks/http-proxy.md) to integrate with AKS.
478+
479+
Requests to token server over private endpoint connection doesn't require the data endpoint configuration.
471480

472481
## Next steps
473482

0 commit comments

Comments
 (0)