You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/api-management/self-hosted-gateway-overview.md
+14-18Lines changed: 14 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -95,18 +95,20 @@ Self-hosted gateways require outbound TCP/IP connectivity to Azure on port 443.
95
95
96
96
To operate properly, each self-hosted gateway needs outbound connectivity on port 443 to the following endpoints associated with its cloud-based API Management instance:
97
97
98
-
| Description | Required for v1 | Required for v2 | Notes |
| Hostname of the configuration endpoint |`<apim-service-name>.management.azure-api.net`|`<apim-service-name>.configuration.azure-api.net`<sup>1</sup> | Custom hostnames are also supported and can be used instead of the default hostname. |
101
-
| Public IP address of the API Management instance | ✔️ | ✔️ | IP address of primary location is sufficient. |
102
-
| Public IP addresses of Azure Storage [service tag](../virtual-network/service-tags-overview.md)| ✔️ | Optional<sup>2</sup> | IP addresses must correspond to primary location of API Management instance. |
103
-
| Hostname of Azure Blob Storage account | ✔️ | Optional<sup>2</sup> | Account associated with instance (`<blob-storage-account-name>.blob.core.windows.net`) |
104
-
| Hostname of Azure Table Storage account | ✔️ | Optional<sup>2</sup> | Account associated with instance (`<table-storage-account-name>.table.core.windows.net`) |
105
-
| Endpoints for Azure Resource Manager | ✔️ | Optional<sup>3</sup> | Required endpoints are `management.azure.com`. |
106
-
| Endpoints for Microsoft Entra integration | ✔️ | Optional<sup>4</sup> | Required endpoints are `<region>.login.microsoft.com` and `login.microsoftonline.com`. |
107
-
| Endpoints for [Azure Application Insights integration](api-management-howto-app-insights.md)| Optional<sup>5</sup> | Optional<sup>5</sup> | Minimal required endpoints are:<ul><li>`rt.services.visualstudio.com:443`</li><li>`dc.services.visualstudio.com:443`</li><li>`{region}.livediagnostics.monitor.azure.com:443`</li></ul>Learn more in [Azure Monitor docs](/azure/azure-monitor/ip-addresses#outgoing-ports)|
108
-
| Endpoints for [Event Hubs integration](api-management-howto-log-event-hubs.md)| Optional<sup>5</sup> | Optional<sup>5</sup> | Learn more in [Azure Event Hubs docs](../event-hubs/network-security.md)|
109
-
| Endpoints for [external cache integration](api-management-howto-cache-external.md)| Optional<sup>5</sup> | Optional<sup>5</sup> | This requirement depends on the external cache that is being used |
98
+
99
+
| Endpoint | Required? | Notes |
100
+
|:------------|:---------------------|:------|
101
+
| Hostname of the configuration endpoint |`<apim-service-name>.configuration.azure-api.net`<sup>1</sup> | Custom hostnames are also supported and can be used instead of the default hostname. |
102
+
| Public IP address of the API Management instance | ✔️ | IP address of primary location is sufficient. |
103
+
| Public IP addresses of Azure Storage [service tag](../virtual-network/service-tags-overview.md)| Optional<sup>2</sup> | IP addresses must correspond to primary location of API Management instance. |
104
+
| Hostname of Azure Blob Storage account | Optional<sup>2</sup> | Account associated with instance (`<blob-storage-account-name>.blob.core.windows.net`) |
105
+
| Hostname of Azure Table Storage account | Optional<sup>2</sup> | Account associated with instance (`<table-storage-account-name>.table.core.windows.net`) |
106
+
| Endpoints for Azure Resource Manager | Optional<sup>3</sup> | Required endpoints are `management.azure.com`. |
107
+
| Endpoints for Microsoft Entra integration | Optional<sup>4</sup> | Required endpoints are `<region>.login.microsoft.com` and `login.microsoftonline.com`. |
108
+
| Endpoints for [Azure Application Insights integration](api-management-howto-app-insights.md)| Optional<sup>5</sup> | Minimal required endpoints are:<ul><li>`rt.services.visualstudio.com:443`</li><li>`dc.services.visualstudio.com:443`</li><li>`{region}.livediagnostics.monitor.azure.com:443`</li></ul>Learn more in [Azure Monitor docs](/azure/azure-monitor/ip-addresses#outgoing-ports)|
109
+
| Endpoints for [Event Hubs integration](api-management-howto-log-event-hubs.md)| Optional<sup>5</sup> | Learn more in [Azure Event Hubs docs](../event-hubs/network-security.md)|
110
+
| Endpoints for [external cache integration](api-management-howto-cache-external.md)| Optional<sup>5</sup> | This requirement depends on the external cache that is being used |
111
+
110
112
111
113
<sup>1</sup>For an API Management instance in an internal virtual network, see [Connectivity in an internal virtual network](#connectivity-in-internal-virtual-network).<br/>
112
114
<sup>2</sup>Only required in v2 when API inspector or quotas are used in policies.<br/>
@@ -167,9 +169,6 @@ The following functionality found in the managed gateways is **not available** i
167
169
168
170
### Transport Layer Security (TLS)
169
171
170
-
> [!IMPORTANT]
171
-
> This overview is only applicable to the self-hosted gateway v1 & v2.
172
-
173
172
#### Supported protocols
174
173
175
174
The self-hosted gateway provides support for TLS v1.2 by default.
@@ -178,9 +177,6 @@ Customers using custom domains can enable TLS v1.0 and/or v1.1 [in the control p
178
177
179
178
#### Available cipher suites
180
179
181
-
> [!IMPORTANT]
182
-
> This overview is only applicable to the self-hosted gateway v2.
183
-
184
180
The self-hosted gateway uses the following cipher suites for both client and server connections:
0 commit comments