You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/hdinsight/hdinsight-private-link.md
+21-7Lines changed: 21 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ ms.service: hdinsight
5
5
ms.topic: conceptual
6
6
ms.author: piyushgupta
7
7
author: piyush-gupta1999
8
-
ms.date: 08/30/2022
8
+
ms.date: 02/02/2023
9
9
---
10
10
11
11
# Enable Private Link on an HDInsight cluster
@@ -116,6 +116,13 @@ To create the private endpoints:
116
116
| Virtual network | hdi-privlink-client-vnet |
117
117
| Subnet | default |
118
118
119
+
:::image type="content" source="media/hdinsight-private-link/basic-tab-private-endpoint.png" alt-text="Diagram of the Private Link basic tab.":::
120
+
:::image type="content" source="media/hdinsight-private-link/resource-tab-private-endpoint.png" alt-text="Diagram of the Private Link resource tab":::
121
+
:::image type="content" source="media/hdinsight-private-link/virtual-network-tab-private-endpoint.png" alt-text="Diagram of the Private Link virtual network tab.":::
122
+
:::image type="content" source="media/hdinsight-private-link/dns-tab-private-endpoint.png" alt-text="Diagram of the Private Link dns end point tab.":::
123
+
:::image type="content" source="media/hdinsight-private-link/tag-tab-private-endpoint.png" alt-text="Diagram of the Private Link tag tab.":::
124
+
:::image type="content" source="media/hdinsight-private-link/review-tab-private-endpoint.png" alt-text="Diagram of the Private Link review-tab.":::
125
+
119
126
4. Repeat the process to create another private endpoint for SSH access using the following configurations:
120
127
121
128
| Config | Value |
@@ -129,14 +136,13 @@ To create the private endpoints:
129
136
> [!IMPORTANT]
130
137
> If you're using KafkaRestProxy HDInsight cluster, then follow this extra steps to [Enable Private Endpoints](./enable-private-link-on-kafka-rest-proxy-hdi-cluster.md#create-private-endpoints).
131
138
>
132
-
133
-
139
+
134
140
Once the private endpoints are created, you’re done with this phase of the setup. If you didn’t make a note of the private IP addresses assigned to the endpoints, follow the steps below:
135
141
136
142
1. Open the client VNET in the Azure portal.
137
-
2. Click the 'Overview' tab.
138
-
3. You should see both the Ambari and ssh Network interfaces listed and their private IP Addresses.
139
-
4. Make a note of these IP addresses because they are required to connect to the cluster and properly configure DNS.
143
+
1. Click the 'Overview' tab.
144
+
1. You should see both the Ambari and ssh Network interfaces listed and their private IP Addresses.
145
+
1. Make a note of these IP addresses because they are required to connect to the cluster and properly configure DNS.
140
146
141
147
## <aname="ConfigureDNS"></a>Step 6: Configure DNS to connect over private endpoints
142
148
@@ -159,6 +165,8 @@ To configure DNS resolution through a Private DNS zone:
159
165
| ------ | ----- |
160
166
| Name | privatelink.azurehdinsight.net |
161
167
168
+
:::image type="content" source="media/hdinsight-private-link/private-dns-zone.png" alt-text="Diagram of the Private dns zone.":::
169
+
162
170
2. Add a Record set to the Private DNS zone for Ambari.
163
171
164
172
| Config | Value |
@@ -168,7 +176,9 @@ To configure DNS resolution through a Private DNS zone:
168
176
| TTL | 1 |
169
177
| TTL unit | Hours |
170
178
| IP Address | Private IP of private endpoint for Ambari access |
171
-
179
+
180
+
:::image type="content" source="media/hdinsight-private-link/private-dns-zone-add-record.png" alt-text="Diagram of private dns zone add record.":::
181
+
172
182
3. Add a Record set to the Private DNS zone for SSH.
173
183
174
184
| Config | Value |
@@ -178,6 +188,8 @@ To configure DNS resolution through a Private DNS zone:
178
188
| TTL | 1 |
179
189
| TTL unit | Hours |
180
190
| IP Address | Private IP of private endpoint for SSH access |
191
+
192
+
:::image type="content" source="media/hdinsight-private-link/private-dns-zone-add-ssh-record.png" alt-text="Diagram of private link dns zone add ssh record.":::
181
193
182
194
> [!IMPORTANT]
183
195
> If you are using KafkaRestProxy HDInsight cluster, then follow this extra steps to [Configure DNS to connect over private endpoint](./enable-private-link-on-kafka-rest-proxy-hdi-cluster.md#configure-dns-to-connect-over-private-endpoints).
@@ -189,6 +201,8 @@ To configure DNS resolution through a Private DNS zone:
189
201
1. Click the 'Add' button.
190
202
1. Fill in the details: Link name, Subscription, and Virtual Network
191
203
1. Click **Save**.
204
+
205
+
:::image type="content" source="media/hdinsight-private-link/virtual-network-link.png" alt-text="Diagram of virtual-network-link.":::
0 commit comments