You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/app-service-hybrid-connections.md
+51-22Lines changed: 51 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Learn how to create and use hybrid connections in Azure App Service
4
4
author: madsd
5
5
ms.assetid: 66774bde-13f5-45d0-9a70-4e9536a4f619
6
6
ms.topic: article
7
-
ms.date: 04/29/2025
7
+
ms.date: 05/02/2025
8
8
ms.author: madsd
9
9
ms.custom: "UpdateFrequency3, fasttrack-edit"
10
10
#customer intent: As an app developer, I want to understand the usage of Hybrid Connections to provide access to apps in Azure App Service.
@@ -115,26 +115,49 @@ In addition to there being an App Service plan SKU requirement, there's an extra
115
115
116
116
## Hybrid Connection Manager
117
117
118
-
> [!NOTE]
119
-
> The new version of the Hybrid Connection Manager is in public preview and supports both Windows and Linux. To download and learn more about the new version, see [Announcing the Public Preview of the New Hybrid Connection Manager](https://techcommunity.microsoft.com/blog/appsonazureblog/announcing-the-public-preview-of-the-new-hybrid-connection-manager-hcm/4401657).
120
-
>
118
+
The Hybrid Connections feature requires a relay agent in the network that hosts your Hybrid Connection endpoint. That relay agent is called the Hybrid Connection Manager (HCM). To download the HCM, follow the instructions for your client.
121
119
122
-
The Hybrid Connections feature requires a relay agent in the network that hosts your Hybrid Connection endpoint. That relay agent is called the Hybrid Connection Manager (HCM). To download the HCM:
120
+
This tool runs on both Windows and Linux. On Windows, the HCM requires Windows Server 2012 and later. The HCM runs as a service and connects outbound to Azure Relay on port 443.
121
+
122
+
To install the HCM on Windows, download the MSI package and follow the installation instructions.
123
123
124
124
> [!div class="nextstepaction"]
125
-
> [Download the Hybrid Connection Manager](https://download.microsoft.com/download/0/e/4/0e48d57b-c563-4877-8acb-cb740c7c6a78/HybridConnectionManager-0.7.9.msi)
tar -xf HybridConnectionManager-Linux-preview.tar.gz
134
+
cd HybridConnectionManager/
135
+
sudo chmod 755 setup.sh
136
+
sudo ./setup.sh
137
+
```
138
+
139
+
To support the Hybrid Connections it's configured with, HCM requires:
140
+
141
+
- TCP access to Azure over port 443.
142
+
- TCP access to the Hybrid Connection endpoint.
143
+
- The ability to do DNS look-ups on the endpoint host and the Service Bus namespace. In other words, the hostname in the Azure relay connection should be resolvable from the machine that hosts the HCM.
144
+
145
+
> [!NOTE]
146
+
> Azure Relay relies on Web Sockets for connectivity. This capability is only available on Windows Server 2012 or later. Because of this fact, HCM isn't supported on systems earlier than Windows Server 2012.
147
+
>
126
148
127
-
This tool runs on Windows Server 2012 and later. The HCM runs as a service and connects outbound to Azure Relay on port 443.
149
+
### Getting started with the Hybrid Connection Manager GUI
128
150
129
-
After you install HCM, you can run *HybridConnectionManagerUi.exe* to use the UI for the tool. This file is in the Hybrid Connection Manager installation directory. In Windows 10 and later, you can also search for *Hybrid Connection Manager UI* in your search box.
151
+
After you install the HCM, on Windows, search for *Hybrid Connection Manager GUI* in your search box.
130
152
153
+
<!-- TODO: update this section -->
131
154
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-hcm.png" alt-text="Screenshot of Hybrid Connection Manager.":::
132
155
133
-
When you start the HCM UI, the first thing you see is a table that lists all the Hybrid Connections that are configured with this instance of the HCM. If you want to make any changes, first authenticate with Azure.
156
+
When you start the HCM GUI, the first thing you see is a table that lists all the Hybrid Connections that are configured with this instance of the HCM. If you want to make any changes, first authenticate with Azure.
134
157
135
158
To add one or more Hybrid Connections to your HCM:
136
159
137
-
1. Start the HCM UI.
160
+
1. Start the HCM GUI.
138
161
1. Select **Add a new Hybrid Connection**.
139
162
140
163
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-hcm-add.png" alt-text="Screenshot of Configure New Hybrid Connections.":::
@@ -151,29 +174,34 @@ You can now see the Hybrid Connections you added. You can also select the config
151
174
152
175
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-hcm-details.png" alt-text="Screenshot of Hybrid Connection Details.":::
153
176
154
-
To support the Hybrid Connections it's configured with, HCM requires:
177
+
### Getting started with the Hybrid Connection Manager CLI
155
178
156
-
- TCP access to Azure over port 443.
157
-
- TCP access to the Hybrid Connection endpoint.
158
-
- The ability to do DNS look-ups on the endpoint host and the Service Bus namespace. In other words, the hostname in the Azure relay connection should be resolvable from the machine that hosts the HCM.
179
+
On Windows, you can use the HCM CLI by searching for and opening *Hybrid Connection Manager CLI*. On Linux, once installed, you can run `hcm help` to confirm the HCM is installed and to see the available commands.
159
180
160
-
> [!NOTE]
161
-
> Azure Relay relies on Web Sockets for connectivity. This capability is only available on Windows Server 2012 or later. Because of this fact, HCM isn't supported on systems earlier than Windows Server 2012.
162
-
>
181
+
To use the interactive mode with the HCM CLI, which allows you to view your Azure subscription and Hybrid Connection details, you need to install and login to the Azure CLI. For installation instructions, see [How to install the Azure CLI][install-azure-cli] and select the appropriate option for your client. Once installed, run `az login` and follow the prompts to complete your login.
182
+
183
+
<!-- TODO: getting started with cli pics and instructions -->
163
184
164
185
### Redundancy
165
186
166
187
Each HCM can support multiple Hybrid Connections. Multiple HCMs can support any Hybrid Connection. The default behavior is to route traffic across the configured HCMs for any given endpoint. If you want high availability on your Hybrid Connections from your network, run multiple HCMs on separate machines. The load distribution algorithm used by the Relay service to distribute traffic to the HCMs is random assignment.
167
188
168
189
### Manually add a Hybrid Connection
169
190
170
-
To enable someone outside your subscription to host an HCM instance for a given Hybrid Connection, share the gateway connection string for the Hybrid Connection with them. You can see the gateway connection string in the Hybrid Connection properties in the [Azure portal]. To use that string, select **Enter Manually** in the HCM, and paste in the gateway connection string.
191
+
To enable someone outside your subscription to host an HCM instance for a given Hybrid Connection, share the gateway connection string for the Hybrid Connection with them. You can see the gateway connection string in the Hybrid Connection properties in the [Azure portal].
192
+
193
+
To use that string in the HCM GUI, select **+ New** and **Use Connection String** and paste in the gateway connection string.
171
194
195
+
<!-- TODO:update photo -->
172
196
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-manual.png" alt-text="Screenshot of the dialog box where you manually add a Hybrid Connection.":::
173
197
198
+
To use that string in the HCM CLI, run `hcm add` with either the connection string, or the Hybrid Connection resource details.
199
+
200
+
<!-- TODO:add photos -->
201
+
174
202
### Upgrade
175
203
176
-
There are periodic updates to the Hybrid Connection Manager to fix issues or provide improvements. When upgrades are released, a dialog box appears in the HCM UI. Applying the upgrade applies the changes and restarts the HCM.
204
+
There are periodic updates to the Hybrid Connection Manager to fix issues or provide improvements. When upgrades are released, a dialog box appears in the HCM GUI and the HCM CLI command responses. Applying the upgrade applies the changes and restarts the HCM.
177
205
178
206
## Adding a Hybrid Connection to your app programmatically
179
207
@@ -234,7 +262,7 @@ The status of **Connected** means that at least one HCM is configured with that
234
262
- Do you have a firewall between your HCM host and Azure? If so, you need to allow outbound access to both the Service Bus endpoint URL *AND* the Service Bus gateways that service your Hybrid Connection.
235
263
236
264
- You can find the Service Bus endpoint URL in the Hybrid Connection Manager UI.
237
-
265
+
<!-- TODO: update image -->
238
266
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-service-bus-endpoint.png" alt-text="Screenshot of Hybrid Connection Service Bus endpoint.":::
239
267
240
268
- The Service Bus gateways are the resources that accept the request into the Hybrid Connection and pass it through the Azure Relay. You need to allowlist all of the gateways. The gateways are in the format: `G#-prod-[stamp]-sb.servicebus.windows.net` and `GV#-prod-[stamp]-sb.servicebus.windows.net`. The number sign, `#`, is a number between 0 and 127 and `stamp` is the name of the instance within your Azure data center where your Service Bus endpoint exists.
@@ -252,14 +280,14 @@ The status of **Connected** means that at least one HCM is configured with that
252
280
G1-prod-sn3-010-sb.servicebus.windows.net
253
281
G2-prod-sn3-010-sb.servicebus.windows.net
254
282
G3-prod-sn3-010-sb.servicebus.windows.net
255
-
...
283
+
...
256
284
G126-prod-sn3-010-sb.servicebus.windows.net
257
285
G127-prod-sn3-010-sb.servicebus.windows.net
258
286
GV0-prod-sn3-010-sb.servicebus.windows.net
259
287
GV1-prod-sn3-010-sb.servicebus.windows.net
260
288
GV2-prod-sn3-010-sb.servicebus.windows.net
261
289
GV3-prod-sn3-010-sb.servicebus.windows.net
262
-
...
290
+
...
263
291
GV126-prod-sn3-010-sb.servicebus.windows.net
264
292
GV127-prod-sn3-010-sb.servicebus.windows.net
265
293
@@ -278,3 +306,4 @@ If you have a command-line client for your endpoint, you can test connectivity f
0 commit comments