Merge pull request #266174 from iriaosara/vpndoc

public preview doc for adding vpn with cassandra mi

Author: v-dirichards

articles/cosmos-db/cassandra/TOC.yml

@@ -520,7 +520,9 @@
         - name: Improve read performance with local disks
           href: ../../managed-instance-apache-cassandra/write-through-cache.md?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json
         - name: Run Jaeger with Azure Managed Instance for Apache Cassandra
-          href: ../../managed-instance-apache-cassandra/jaeger.md?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json          
+          href: ../../managed-instance-apache-cassandra/jaeger.md?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json
+        - name: Use VPN with Azure Managed Instance for Apache Cassandra
+          href: ../../managed-instance-apache-cassandra/use-vpn.md?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json         
         - name: Nodetool Commands
           href: ../../managed-instance-apache-cassandra/dba-commands.md?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json
     - name: Reference

articles/managed-instance-apache-cassandra/TOC.yml

@@ -65,6 +65,8 @@
       href: write-through-cache.md
     - name: Run Jaeger with Azure Managed Instance for Apache Cassandra
       href: jaeger.md
+    - name: Use VPN with Azure Managed Instance for Apache Cassandra
+      href: use-vpn.md
     - name: Nodetool commands
       href: dba-commands.md               
 - name: Reference

articles/managed-instance-apache-cassandra/use-vpn.md

@@ -0,0 +1,56 @@
+---
+title: Use VPN with Azure Managed Instance for Apache Cassandra
+description: Discover how to secure your cluster with vpn when you use Azure Managed Instance for Apache Cassandra.
+author: IriaOsara
+ms.author: iriaosara
+ms.service: managed-instance-apache-cassandra
+ms.topic: how-to
+ms.date: 02/08/2024
+ms.devlang: azurecli
+
+---
+# Use VPN with Azure Managed Instance for Apache Cassandra
+
+By using a VPN with your Azure Managed Instance for Apache Cassandra, you can securely connect our management service and your cluster without making it public. It lets you keep full control over the network where your cluster is located, and it lets you use your own security rules to manage access to your cluster.
+
+> [!IMPORTANT]
+> Using VPN with Azure Managed Instance for Apache Cassandra is in public preview.
+> This feature is provided without a service level agreement, and it's not recommended for production workloads.
+> For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
+
+## How to use VPN with Azure Managed Instance for Apache Cassandra
+
+1. Create a cluster of Cassandra Managed Instance using "VPN" as the value for the `--azure-connection-method` option:
+
+    ```bash
+    az managed-cassandra cluster create \
+    --cluster-name "vpn-test-cluster" \
+    --resource-group "vpn-test-rg" \
+    --location "eastus2" \
+    --azure-connection-method "VPN" \
+    --initial-cassandra-admin-password "password"
+    ```
+
+1. Use the following command to see the cluster properties. From the output, make a copy of the `privateLinkResourceId` ID:
+
+    ```bash
+    az managed-cassandra cluster show \
+    --resource-group "vpn-test-rg" \
+    --cluster-name "vpn-test-cluster"
+    ```
+
+1. On the portal, [create a private endpoint](../cosmos-db/how-to-configure-private-endpoints.md)
+    1. On the Resource tab, select "Connect to an Azure resource by resource ID or alias." as the connection method and `Microsoft.Network/privateLinkServices` as the resource type. Enter the `privateLinkResourceId` from step (2).
+    1. On the Virtual Network tab, select your virtual network's subnet and make sure to select the option for "Statically allocate IP address."
+    1. Validate and create.
+
+   > [!NOTE]
+   > At the moment, the connection between our management service and your private endpoint requires the Azure Managed Instance for Apache Cassandra team [email protected] to approve it.
+    
+1. Get the IP address of your private endpoint NIC.
+
+1. Create a new data center using the IP address from (5) as the `--private-endpoint-ip-address` parameter.
+
+
+## Next steps
+- Learn about [hybrid cluster configuration](configure-hybrid-cluster.md) in Azure Managed Instance for Apache Cassandra.