Skip to content

Commit aa53cfd

Browse files
committed
Removed images and refined create experience.
1 parent c438b9d commit aa53cfd

File tree

1 file changed

+23
-32
lines changed

1 file changed

+23
-32
lines changed

articles/azure-cache-for-redis/managed-redis/managed-redis-private-link.md

Lines changed: 23 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -23,13 +23,14 @@ Azure Private Endpoint is a network interface that connects you privately and se
2323

2424
- Azure subscription - [create one for free](https://azure.microsoft.com/free/)
2525

26-
2726
## Create a private endpoint with a new Azure Managed Redis instance
2827

2928
In this section, you create a new Azure Managed Redis instance with a private endpoint.
3029

3130
### Create a virtual network for your new cache
3231

32+
To create a cache using the portal:
33+
3334
1. Sign in to the [Azure portal](https://portal.azure.com) and select **Create a resource**.
3435

3536
:::image type="content" source="media/managed-redis-private-link/1-create-resource.png" alt-text="Select Create a resource.":::
@@ -42,7 +43,7 @@ In this section, you create a new Azure Managed Redis instance with a private en
4243

4344
| Setting | Suggested value | Description |
4445
| ------------ | ------- | -------------------------------------------------- |
45-
| **Subscription** | Drop down and select your subscription. | The subscription under which to create this virtual network. |
46+
| **Subscription** | Drop down and select your subscription. | The subscription where you create this virtual network. |
4647
| **Resource group** | Drop down and select a resource group, or select **Create new** and enter a new resource group name. | Name for the resource group in which to create your virtual network and other resources. By putting all your app resources in one resource group, you can easily manage or delete them together. |
4748
| **Name** | Enter a virtual network name. | The name must: begin with a letter or number; end with a letter, number, or underscore; and contain only letters, numbers, underscores, periods, or hyphens. |
4849
| **Region** | Drop down and select a region. | Select a [region](https://azure.microsoft.com/regions/) near other services that use your virtual network. |
@@ -67,19 +68,11 @@ To create a cache instance, follow these steps:
6768

6869
1. Go back to the Azure portal homepage or open the sidebar menu, then select **Create a resource**.
6970

70-
1. On the **New** page, select **Databases** and then select **Azure Managed Redis**.
71-
72-
:::image type="content" source="media/managed-redis-private-link/2-select-cache.png" alt-text="Select Azure Cache for Redis.":::
71+
1. In the search box, type _Azure Cache for Redis_. Refine your search to Azure services only, and select **Azure Cache for Redis**.
7372

7473
1. On the **New Redis Cache** page, configure the settings for your new cache.
75-
76-
| Setting | Suggested value | Description |
77-
| ------------ | ------- | -------------------------------------------------- |
78-
| **DNS name** | Enter a globally unique name. | The cache name must be a string between 1 and 63 characters. The string must contain only numbers, letters, or hyphens. The name must start and end with a number or letter, and can't contain consecutive hyphens. Your cache instance's *host name* is *\<DNS name>.\<region>.redis.azure.net*. |
79-
| **Subscription** | Drop down and select your subscription. | The subscription under which to create this new Azure Managed Redis instance. |
80-
| **Resource group** | Drop down and select a resource group, or select **Create new** and enter a new resource group name. | Name for the resource group in which to create your cache and other resources. By putting all your app resources in one resource group, you can easily manage or delete them together. |
81-
| **Location** | Drop down and select a location. | Select a [region](https://azure.microsoft.com/regions/) near other services that use your cache. |
82-
| **Pricing tier** | Drop down and select a [Pricing tier](https://azure.microsoft.com/pricing/details/cache/). | The pricing tier determines the size, performance, and features that are available for the cache. For more information, see [Azure Managed Redis Overview](managed-redis-overview.md). |
74+
1. Select an Azure Managed Redis cache in **Cache SKU**.
75+
1. Select an appropriate option in **Cache size**.
8376

8477
1. Select the **Networking** tab or select the **Networking** button at the bottom of the page.
8578

@@ -107,7 +100,6 @@ To create a cache instance, follow these steps:
107100

108101
It takes a while for the cache to create. You can monitor progress on the Azure Managed Redis **Overview** page. When **Status** shows as **Running**, the cache is ready to use.
109102

110-
111103
## Create a private endpoint with an existing Azure Managed Redis instance
112104

113105
In this section, you add a private endpoint to an existing Azure Managed Redis instance.
@@ -126,7 +118,7 @@ To create a virtual network, follow these steps:
126118

127119
| Setting | Suggested value | Description |
128120
| ------------ | ------- | -------------------------------------------------- |
129-
| **Subscription** | Drop down and select your subscription. | The subscription under which to create this virtual network. |
121+
| **Subscription** | Drop down and select your subscription. | The subscription where you create this virtual network. |
130122
| **Resource group** | Drop down and select a resource group, or select **Create new** and enter a new resource group name. | Name for the resource group in which to create your virtual network and other resources. By putting all your app resources in one resource group, you can easily manage or delete them together. |
131123
| **Name** | Enter a virtual network name. | The name must: begin with a letter or number; end with a letter, number, or underscore; and contain only letters, numbers, underscores, periods, or hyphens. |
132124
| **Region** | Drop down and select a region. | Select a [region](https://azure.microsoft.com/regions/) near other services that use your virtual network. |
@@ -149,23 +141,23 @@ To create a virtual network, follow these steps:
149141

150142
To create a private endpoint, follow these steps:
151143

152-
1. In the Azure portal, search for **Azure Managed Redis**. Then, press enter or select it from the search suggestions.
144+
1. In the Azure portal, search for **Azure Cache for Redis**. Then, press enter or select it from the search suggestions for your cache.
153145

154-
:::image type="content" source="media/managed-redis-private-link/4-search-for-cache.png" alt-text="Search for Azure Managed Redis.":::
146+
<!-- :::image type="content" source="media/managed-redis-private-link/4-search-for-cache.png" alt-text="Search for Azure Managed Redis."::: -->
155147

156148
1. Select the cache instance you want to add a private endpoint to.
157149

158150
1. On the left side of the screen, select **Private Endpoint**.
159151

160152
1. Select the **Private Endpoint** button to create your private endpoint.
161153

162-
:::image type="content" source="media/managed-redis-private-link/5-add-private-endpoint.png" alt-text="Add private endpoint.":::
154+
<!-- :::image type="content" source="media/managed-redis-private-link/5-add-private-endpoint.png" alt-text="Add private endpoint."::: -->
163155

164156
1. On the **Create a private endpoint page**, configure the settings for your private endpoint.
165157

166158
| Setting | Suggested value | Description |
167159
| ------------ | ------- | -------------------------------------------------- |
168-
| **Subscription** | Drop down and select your subscription. | The subscription under which to create this private endpoint. |
160+
| **Subscription** | Drop down and select your subscription. | The subscription where you create this private endpoint. |
169161
| **Resource group** | Drop down and select a resource group, or select **Create new** and enter a new resource group name. | Name for the resource group in which to create your private endpoint and other resources. By putting all your app resources in one resource group, you can easily manage or delete them together. |
170162
| **Name** | Enter a private endpoint name. | The name must: begin with a letter or number; end with a letter, number, or underscore; and can contain only letters, numbers, underscores, periods, or hyphens. |
171163
| **Region** | Drop down and select a region. | Select a [region](https://azure.microsoft.com/regions/) near other services that use your private endpoint. |
@@ -197,7 +189,7 @@ To create a private endpoint, follow these steps:
197189
>
198190
## Create a private endpoint using Azure PowerShell
199191

200-
To create a private endpoint named *MyPrivateEndpoint* for an existing Azure Managed Redis instance, run the following PowerShell script. Replace the variable values with the details for your environment:
192+
To create a private endpoint named _MyPrivateEndpoint_ for an existing Azure Managed Redis instance, run the following PowerShell script. Replace the variable values with the details for your environment:
201193

202194
```azurepowershell-interactive
203195
@@ -245,7 +237,7 @@ Remove-AzPrivateEndpoint -Name $PrivateEndpointName -ResourceGroupName $Resource
245237

246238
## Create a private endpoint using Azure CLI
247239

248-
To create a private endpoint named *myPrivateEndpoint* for an existing Azure Managed Redis instance, run the following Azure CLI script. Replace the variable values with the details for your environment:
240+
To create a private endpoint named _myPrivateEndpoint_ for an existing Azure Managed Redis instance, run the following Azure CLI script. Replace the variable values with the details for your environment:
249241

250242
```azurecli-interactive
251243
# Resource group where the Azure Managed Redis and virtual network resources are located
@@ -313,21 +305,20 @@ az network private-endpoint delete --name MyPrivateEndpoint --resource-group MyR
313305
- [What features aren't supported with private endpoints?](#what-features-arent-supported-with-private-endpoints)
314306
- [How do I verify if my private endpoint is configured correctly?](#how-do-i-verify-if-my-private-endpoint-is-configured-correctly)
315307
- [How can I change my private endpoint to be disabled or enabled from public network access?](#how-can-i-change-my-private-endpoint-to-be-disabled-or-enabled-from-public-network-access)
316-
<!-- - [How can I migrate my VNet injected cache to a Private Link cache?](#how-can-i-migrate-my-vnet-injected-cache-to-a-private-link-cache) -->
317308
- [How can I have multiple endpoints in different virtual networks?](#how-can-i-have-multiple-endpoints-in-different-virtual-networks)
318309
- [What happens if I delete all the private endpoints on my cache?](#what-happens-if-i-delete-all-the-private-endpoints-on-my-cache)
319310
- [Are network security groups (NSG) enabled for private endpoints?](#are-network-security-groups-nsg-enabled-for-private-endpoints)
320311
- [My private endpoint instance isn't in my VNet, so how is it associated with my VNet?](#my-private-endpoint-instance-isnt-in-my-vnet-so-how-is-it-associated-with-my-vnet)
321312

322313
### How do I connect to my cache with private endpoint?
323314

324-
Your application should connect to `<cachename>.<region>.redis.azure.net` on port `10000`. A private DNS zone, named `*.privatelink.redis.azure.net`, is automatically created in your subscription. The private DNS zone is vital for establishing the TLS connection with the private endpoint. We recommend avoiding the use of `<cachename>.privatelink.redis.azure.net` in configuration for client connection.
315+
Your application should connect to `<cachename>.<region>.redis.azure.net` on port `10000`. A private DNS zone, named `*.privatelink.redis.azure.net`, is automatically created in your subscription. The private DNS zone is vital for establishing the TLS connection with the private endpoint. We recommend avoiding the use of `<cachename>.privatelink.redis.azure.net` in configuration for client connection.
325316

326317
For more information, see [Azure services DNS zone configuration](/azure/private-link/private-endpoint-dns).
327318

328319
### Why can't I connect to a private endpoint?
329320

330-
- Private endpoints can't be used with your cache instance if your cache is already a VNet injected cache.
321+
- Private endpoints can't be used with your cache instance if your cache is already a virtual network (VNet) injected cache.
331322

332323
- Azure Managed Redis caches are limited to 84 private links.
333324

@@ -337,43 +328,43 @@ For more information, see [Azure services DNS zone configuration](/azure/private
337328

338329
### What features aren't supported with private endpoints?
339330

340-
- There is no restriction for using private endpoint with Azure Managed Redis (Preview).
331+
- There's no restriction for using private endpoint with Azure Managed Redis (Preview).
341332

342333
### How do I verify if my private endpoint is configured correctly?
343334

344-
Go to **Overview** in the Resource menu on the portal. You see the **Host name** for your cache in the working pane. Run a command like `nslookup <hostname>` from within the VNet that is linked to the private endpoint to verify that the command resolves to the private IP address for the cache.
335+
Go to **Overview** in the Resource menu on the portal. You see the **Host name** for your cache in the working pane. To verify that the command resolves to the private IP address for the cache, run a command like `nslookup <hostname>` from within the VNet that is linked to the private endpoint.
345336

346337
:::image type="content" source="media/managed-redis-private-link/managed-redis-private-ip-address.png" alt-text="In the Azure portal, private endpoint D N S settings.":::
347338

348339
### How can I change my private endpoint to be disabled or enabled from public network access?
349340

350341
To change the value in the Azure portal, follow these steps:
351342

352-
1. In the Azure portal, search for **Azure Managed Redis**. Then, press enter or select it from the search suggestions.
343+
1. In the Azure portal, search for **Azure Managed Redis**. Then, press enter or select it from the search suggestions.
353344

354345
1. Select the cache instance you want to change the public network access value.
355346

356347
1. On the left side of the screen, select **Private Endpoint**.
357348

358-
1. Delete the private endpoint.
349+
1. Delete the private endpoint.
359350

360351
### How can I have multiple endpoints in different virtual networks?
361352

362-
To have multiple private endpoints in different virtual networks, the private DNS zone must be manually configured to the multiple virtual networks *before* creating the private endpoint. For more information, see [Azure Private Endpoint DNS configuration](/azure/private-link/private-endpoint-dns).
353+
To have multiple private endpoints in different virtual networks, the private DNS zone must be manually configured to the multiple virtual networks before creating the private endpoint. For more information, see [Azure Private Endpoint DNS configuration](/azure/private-link/private-endpoint-dns).
363354

364355
### What happens if I delete all the private endpoints on my cache?
365356

366-
Deleting all private endpoints on your Azure Managed Redis (preview) will make the service to have public network access.
357+
If you delete all private endpoints on your Azure Managed Redis (preview) cache, networking defaults to have public network access.
367358

368359
### Are network security groups (NSG) enabled for private endpoints?
369360

370-
No, they're disabled for private endpoints. While subnets containing the private endpoint can have NSG associated with it, the rules aren't effective on traffic processed by the private endpoint. You must have [network policies enforcement disabled](/azure/private-link/disable-private-endpoint-network-policy) to deploy private endpoints in a subnet. NSG is still enforced on other workloads hosted on the same subnet. Routes on any client subnet will be using an /32 prefix, changing the default routing behavior requires a similar UDR.
361+
No, they're disabled for private endpoints. While subnets containing the private endpoint can have NSG associated with it, the rules aren't effective on traffic processed by the private endpoint. You must have [network policies enforcement disabled](/azure/private-link/disable-private-endpoint-network-policy) to deploy private endpoints in a subnet. NSG is still enforced on other workloads hosted on the same subnet. Routes on any client subnet use a /32 prefix, changing the default routing behavior requires a similar UDR.
371362

372363
Control the traffic by using NSG rules for outbound traffic on source clients. Deploy individual routes with /32 prefix to override private endpoint routes. NSG Flow logs and monitoring information for outbound connections are still supported and can be used.
373364

374365
### My private endpoint instance isn't in my VNet, so how is it associated with my VNet?
375366

376-
It's only linked to your VNet. Because it's not in your VNet, NSG rules don't need to be modified for dependent endpoints.
367+
Your private endpoint is only linked to your VNet. Because it's not in your VNet, NSG rules don't need to be modified for dependent endpoints.
377368

378369
## Related content
379370

0 commit comments

Comments
 (0)