You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/api-management/breaking-changes/rp-source-ip-address-change-mar2023.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Resource Provider source IP address change (March 2023) | Microsoft Docs
3
-
description: Azure API Management is updating the source IP address of the resource provider in certain regions. If your service is hosted in a VNET, you may need to update network settings to continue managing your service.
3
+
description: Azure API Management is updating the source IP address of the resource provider in certain regions. If your service is hosted in a Microsoft Azure Virtual Network, you may need to update network settings to continue managing your service.
4
4
services: api-management
5
5
documentationcenter: ''
6
6
author: adrianhall
@@ -31,8 +31,8 @@ This change will have NO effect on the availability of your API Management servi
31
31
Your service is impacted by this change if:
32
32
33
33
* The API Management service is in one of the seven regions listed in the table above.
34
-
* The API Management service is running inside a virtual network (VNET).
35
-
* The VNET Network Security Group (NSG) or User-defined Routes (UDRs) are configured with explicit source IP addresses.
34
+
* The API Management service is running inside an Azure virtual network.
35
+
* The Network Security Group (NSG) or User-defined Routes (UDRs) for the virtual network are configured with explicit source IP addresses.
36
36
37
37
## What is the deadline for the change?
38
38
@@ -44,14 +44,14 @@ After 31 March 2023, if you prefer not to make changes to your IP addresses, you
44
44
45
45
Yes, you can.
46
46
47
-
API Management publishes a _service tag_ that you can use to configure the NSG for your VNET. The service tag includes information about the source IP addresses that API Management uses to manage your service. For more information on this topic, read [Configure NSG Rules] in the API Management documentation.
47
+
API Management publishes a _service tag_ that you can use to configure the NSG for your virtual network. The service tag includes information about the source IP addresses that API Management uses to manage your service. For more information on this topic, read [Configure NSG Rules] in the API Management documentation.
48
48
49
49
## What do I need to do?
50
50
51
-
Update the NSG security rules that allow the API Management resource provider to communicate with your API Management instance. For detailed instructions on how to manage a NSG, review [Create, change, or delete a network security group] in the Virtual Network documentation.
51
+
Update the NSG security rules that allow the API Management resource provider to communicate with your API Management instance. For detailed instructions on how to manage a NSG, review [Create, change, or delete a network security group] in the Azure Virtual Network documentation.
52
52
53
53
1. Go to the [Azure portal](https://portal.azure.com) to view your NSGs. Search for and select **Network security groups**.
54
-
2. Select the name of the NSG associated with the VNET hosting your API Management service.
54
+
2. Select the name of the NSG associated with the virtual network hosting your API Management service.
55
55
3. In the menu bar, choose **Inbound security rules**.
56
56
4. The inbound security rules should already have an entry that mentions a Source address matching the _Old IP Address_ from the table above. If it doesn't, you're not using explicit source IP address filtering, and can skip this update.
57
57
5. Select **Add**.
@@ -70,15 +70,15 @@ Update the NSG security rules that allow the API Management resource provider to
70
70
71
71
7. Select **OK**.
72
72
73
-
In addition, you may have to adjust the network routing for the VNET to accommodate the new control plane IP addresses. If you've configured a default route (`0.0.0.0/0`) forcing all traffic from the API Management subnet to flow through a firewall instead of directly to the Internet, then additional configuration is required.
73
+
In addition, you may have to adjust the network routing for the virtual network to accommodate the new control plane IP addresses. If you've configured a default route (`0.0.0.0/0`) forcing all traffic from the API Management subnet to flow through a firewall instead of directly to the Internet, then additional configuration is required.
74
74
75
75
If you configured user-defined routes (UDRs) for control plane IP addresses, the new IP addresses must be routed the same way. For more details on the changes necessary to handle network routing of management requests, review [Force tunneling traffic] documentation.
76
76
77
-
Finally, check for any other systems that may impact the communication from the API Management resource provider to your API Management service subnet. For more information about VNET configuration, review the [Virtual Network] documentation.
77
+
Finally, check for any other systems that may impact the communication from the API Management resource provider to your API Management service subnet. For more information about virtual network configuration, review the [Virtual Network] documentation.
0 commit comments