You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/hdinsight/load-balancer-migration-guidelines.md
+32-29Lines changed: 32 additions & 29 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,38 +14,39 @@ This transition is done in line with the announcement of retirement of Azure bas
14
14
15
15
## Impact on HDInsight clusters
16
16
17
-
### Long running clusters (when you don’t create and delete cluster daily for your use case)
17
+
### Long running clusters (when you don’t create and delete cluster frequently for your use case)
18
18
19
-
***Scenario 1:** Existing HDInsight clusters without custom virtual network. (No virtual network provided during cluster creation.)
19
+
***Scenario 1:** Existing HDInsight clusters without custom virtual network (No virtual network provided during cluster creation).
20
20
21
21
* No immediate disruption until Mar 31, 2025. However, we strongly recommend re-creating the cluster before Mar 31, 2025 to avoid potential disruption.
22
22
23
-
***Scenario 2:** Existing HDInsight clusters with custom virtual network.
23
+
***Scenario 2:** Existing HDInsight clusters with custom virtual network (Used your own VNet for cluster creation).
24
24
25
25
* No immediate disruption until Mar 31, 2025. However, we strongly recommend re-creating the cluster before Mar 31, 2025 to avoid potential disruption.
26
26
27
27
### New cluster creation
28
28
29
-
***Scenario 1:** HDInsight clusters without custom virtual network. (No virtual network provided during cluster creation)
29
+
***Scenario 1:** HDInsight clusters without custom virtual network (No virtual network selected during cluster creation).
30
30
31
31
* In this case, no impact. You can recreate the cluster directly.
32
32
33
-
***Scenario 2:** HDInsight clusters with custom virtual network. (Providing your own VNet during cluster creation)
33
+
***Scenario 2:** HDInsight clusters with custom virtual network (Using your own VNet during cluster creation).
34
34
35
35
* In this case, there are two options to create a cluster
36
36
37
37
**Approach 1:** Create the cluster with a new subnet
38
38
39
-
1. Choose the outbound connectivity for your cluster, and follow this document [Use Source Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections), and choose one method to provide outbound connectivity for the new cluster. The most recommended way is to attach a NAT gateway and a Network Security Group (NSG) to the subnet.
39
+
1. Choose the outbound connectivity for your cluster
40
+
41
+
Follow this document [Use Source Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections), and choose one method to provide outbound connectivity for the new cluster. The most recommended way is to attach a NAT gateway and a Network Security Group (NSG) to the subnet.
40
42
41
-
1.(Optional) Create a new NAT gateway and a new network security group (NSG).
43
+
1. Create a new NAT gateway and a new Network Security Group(NSG) or use the existing ones.
42
44
43
45
> [!NOTE]
44
-
> You can associate an existing NAT gateway and NSG or the newly created ones.
45
-
>
46
-
> Follow the docs [Quickstart: Create a NAT gateway - Azure portal](/azure/nat-gateway/quickstart-create-nat-gateway-portal), and [Create, change, or delete an Azure network security group](/azure/virtual-network/manage-network-security-group?tabs=network-security-group-portal#create-a-network-security-group) to create a new NAT gateway and a new network security group.
47
-
>
48
-
> You can refer to this document [Control network traffic in Azure HDInsight](./control-network-traffic.md#hdinsight-with-network-security-groups) to set up correct NSG rules.
46
+
> You can use an existing NAT gateway and NSG.
47
+
48
+
Follow the docs [Quickstart: Create a NAT gateway - Azure portal](/azure/nat-gateway/quickstart-create-nat-gateway-portal), and [Create, change, or delete an Azure network security group](/azure/virtual-network/manage-network-security-group?tabs=network-security-group-portal#create-a-network-security-group) to create a new NAT gateway and a new network security group.
49
+
You can refer to this document [Control network traffic in Azure HDInsight](./control-network-traffic.md#hdinsight-with-network-security-groups) to set up correct NSG rules.
49
50
50
51
1. Create a new subnet and associate the subnet with the NAT gateway and network security group.
51
52
@@ -58,23 +59,24 @@ This transition is done in line with the announcement of retirement of Azure bas
58
59
59
60
:::image type="content" source="./media/load-balancer-migration-guidelines/create-hdinsight-cluster.png" alt-text="Screenshot showing how to create a HDInsight cluster." border="true" lightbox="./media/load-balancer-migration-guidelines/create-hdinsight-cluster.png":::
60
61
61
-
**Approach 2: Use the existing subnet**
62
+
**Approach 2:** Create the cluster using the existing subnet
62
63
63
-
To upgrade your existing custom virtual network to integrate with Azure standard load balancer (which HDInsight clusters use by default now), see, [Use Source Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections) to provide outbound connectivity for the cluster.
64
+
Your existing virtual network may be incompatible with Azure Standard Load Balancer, to upgrade your existing custom virtual network to integrate with Azure standard load balancer (which HDInsight clusters use by default now), see, [Use Source Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections) to provide outbound connectivity for the cluster.
64
65
65
66
The most recommended way is to attach a network security group and a NAT gateway to the subnet. Since the existing subnet which has HDInsight clusters with Azure basic load balancers can't be associated with an NAT gateway due to incompatibility with basic load balancer, there are two scenarios:
66
67
67
-
#### Case 1: Existing subnet has no HDInsight clusters with Azure Basic load balancers
68
+
#### Case 1: Existing subnet has no HDInsight clusters with Azure Basic Load Balancers
68
69
69
70
Follow these steps:
70
71
71
-
1. Create a new NAT gateway and a new network security group or use the existing ones.
72
+
1. Create a new NAT gateway and a new Network Security Group(NSG) or use the existing ones.
72
73
73
74
> [!NOTE]
74
-
> You could associate an existing NAT gateway and NSG or the newly created ones.
75
-
> Follow this document [Quickstart: Create a NAT gateway - Azure portal](/azure/nat-gateway/quickstart-create-nat-gateway-portal), and [Create, change, or delete an Azure network security group](/azure/virtual-network/manage-network-security-group?tabs=network-security-group-portal#create-a-network-security-group) to create a new NAT gateway and a new network security group.
76
-
>
77
-
> You can refer to this document [Control network traffic in Azure HDInsight](./control-network-traffic.md#hdinsight-with-network-security-groups) to set up correct NSG rules.
75
+
> You could use an existing NAT gateway and NSG.
76
+
77
+
Follow this document [Quickstart: Create a NAT gateway - Azure portal](/azure/nat-gateway/quickstart-create-nat-gateway-portal), and [Create, change, or delete an Azure network security group](/azure/virtual-network/manage-network-security-group?tabs=network-security-group-portal#create-a-network-security-group) to create a new NAT gateway and a new network security group.
78
+
79
+
You can refer to this document [Control network traffic in Azure HDInsight](./control-network-traffic.md#hdinsight-with-network-security-groups) to set up correct NSG rules.
78
80
79
81
80
82
1. Associate the NAT gateway with your subnet along with a network security group.
@@ -92,21 +94,22 @@ This transition is done in line with the announcement of retirement of Azure bas
92
94
93
95
Consider one of these methods:
94
96
95
-
***Approach 1:** The most recommended way is to associate a NAT gateway to the subnet along with network security group.
97
+
***Method 1:** The most recommended way is to associate a NAT gateway to the subnet along with network security group.
96
98
97
-
According to [Azure NAT Gateway frequently asked questions](/azure/nat-gateway/faq#are-basic-sku-resources--basic-load-balancer-and-basic-public-ip-addresses--compatible-with-a-nat-gateway), the subnet with NAT gateway and Azure standard load balancer isn't compatible.
99
+
According to [Azure NAT Gateway frequently asked questions](/azure/nat-gateway/faq#are-basic-sku-resources--basic-load-balancer-and-basic-public-ip-addresses--compatible-with-a-nat-gateway), NAT gateway is incomaptible with Azure basic load balancer.
98
100
99
101
To associate with a NAT Gateway, perform the following steps.
100
102
101
103
1. Delete all the existing HDInsight clusters with Azure basic load balancers in this subnet.
102
104
103
-
1. Create a new NAT gateway and a new network security group or use the existing ones.
105
+
1. Create a new NAT gateway and a new Network Security Group(NSG) or use the existing ones.
104
106
105
107
> [!NOTE]
106
-
> You could associate an existing NAT gateway and NSG or use the newly created ones.
107
-
> Follow this document [Quickstart: Create a NAT gateway - Azure portal](/azure/nat-gateway/quickstart-create-nat-gateway-portal), and [Create, change, or delete an Azure network security group](/azure/virtual-network/manage-network-security-group?tabs=network-security-group-portal#create-a-network-security-group) to create a new NAT gateway and a new network security group.
108
-
>
109
-
> You can refer to this document [Control network traffic in Azure HDInsight](./control-network-traffic.md#hdinsight-with-network-security-groups) to set up correct NSG rules.
108
+
> You could use an existing NAT gateway and NSG.
109
+
110
+
Follow this document [Quickstart: Create a NAT gateway - Azure portal](/azure/nat-gateway/quickstart-create-nat-gateway-portal), and [Create, change, or delete an Azure network security group](/azure/virtual-network/manage-network-security-group?tabs=network-security-group-portal#create-a-network-security-group) to create a new NAT gateway and a new network security group.
111
+
112
+
You can refer to this document [Control network traffic in Azure HDInsight](./control-network-traffic.md#hdinsight-with-network-security-groups) to set up correct NSG rules.
110
113
111
114
1. Associate the subnet with the NAT gateway and network security group.
112
115
@@ -119,9 +122,9 @@ This transition is done in line with the announcement of retirement of Azure bas
***Approach 2:** Select option other than **Associate a NAT gateway to the subnet** provided in [Use Source Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections), and follow the instruction for the selected option.
125
+
***Method 2:** Select option other than **Associate a NAT gateway to the subnet** provided in [Use Source Network Address Translation (SNAT) for outbound connections](/azure/load-balancer/load-balancer-outbound-connections), and follow the instruction for the selected option.
123
126
124
-
***Approach 3:** Create a new subnet and then create the cluster with the new subnet.
127
+
***Method 3:** Create a new subnet and then create the cluster with the new subnet.
0 commit comments