Skip to content

Commit d09c979

Browse files
committed
initial changes, pending todos
1 parent 18b506e commit d09c979

File tree

1 file changed

+51
-22
lines changed

1 file changed

+51
-22
lines changed

articles/app-service/app-service-hybrid-connections.md

Lines changed: 51 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to create and use hybrid connections in Azure App Service
44
author: madsd
55
ms.assetid: 66774bde-13f5-45d0-9a70-4e9536a4f619
66
ms.topic: article
7-
ms.date: 04/29/2025
7+
ms.date: 05/02/2025
88
ms.author: madsd
99
ms.custom: "UpdateFrequency3, fasttrack-edit"
1010
#customer intent: As an app developer, I want to understand the usage of Hybrid Connections to provide access to apps in Azure App Service.
@@ -115,26 +115,49 @@ In addition to there being an App Service plan SKU requirement, there's an extra
115115

116116
## Hybrid Connection Manager
117117

118-
> [!NOTE]
119-
> The new version of the Hybrid Connection Manager is in public preview and supports both Windows and Linux. To download and learn more about the new version, see [Announcing the Public Preview of the New Hybrid Connection Manager](https://techcommunity.microsoft.com/blog/appsonazureblog/announcing-the-public-preview-of-the-new-hybrid-connection-manager-hcm/4401657).
120-
>
118+
The Hybrid Connections feature requires a relay agent in the network that hosts your Hybrid Connection endpoint. That relay agent is called the Hybrid Connection Manager (HCM). To download the HCM, follow the instructions for your client.
121119

122-
The Hybrid Connections feature requires a relay agent in the network that hosts your Hybrid Connection endpoint. That relay agent is called the Hybrid Connection Manager (HCM). To download the HCM:
120+
This tool runs on both Windows and Linux. On Windows, the HCM requires Windows Server 2012 and later. The HCM runs as a service and connects outbound to Azure Relay on port 443.
121+
122+
To install the HCM on Windows, download the MSI package and follow the installation instructions.
123123

124124
> [!div class="nextstepaction"]
125-
> [Download the Hybrid Connection Manager](https://download.microsoft.com/download/0/e/4/0e48d57b-c563-4877-8acb-cb740c7c6a78/HybridConnectionManager-0.7.9.msi)
125+
> [Windows download](https://aka.ms/appservice/hcm/windows)
126+
127+
To install the HCM on Linux, from your terminal running as administrator:
128+
129+
```bash
130+
sudo apt update
131+
sudo apt install tar gzip build-essential
132+
wget "https://download.microsoft.com/download/HybridConnectionManager-Linux-preview.tar.gz"
133+
tar -xf HybridConnectionManager-Linux-preview.tar.gz
134+
cd HybridConnectionManager/
135+
sudo chmod 755 setup.sh
136+
sudo ./setup.sh
137+
```
138+
139+
To support the Hybrid Connections it's configured with, HCM requires:
140+
141+
- TCP access to Azure over port 443.
142+
- TCP access to the Hybrid Connection endpoint.
143+
- The ability to do DNS look-ups on the endpoint host and the Service Bus namespace. In other words, the hostname in the Azure relay connection should be resolvable from the machine that hosts the HCM.
144+
145+
> [!NOTE]
146+
> Azure Relay relies on Web Sockets for connectivity. This capability is only available on Windows Server 2012 or later. Because of this fact, HCM isn't supported on systems earlier than Windows Server 2012.
147+
>
126148
127-
This tool runs on Windows Server 2012 and later. The HCM runs as a service and connects outbound to Azure Relay on port 443.
149+
### Getting started with the Hybrid Connection Manager GUI
128150

129-
After you install HCM, you can run *HybridConnectionManagerUi.exe* to use the UI for the tool. This file is in the Hybrid Connection Manager installation directory. In Windows 10 and later, you can also search for *Hybrid Connection Manager UI* in your search box.
151+
After you install the HCM, on Windows, search for *Hybrid Connection Manager GUI* in your search box.
130152

153+
<!-- TODO: update this section -->
131154
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-hcm.png" alt-text="Screenshot of Hybrid Connection Manager.":::
132155

133-
When you start the HCM UI, the first thing you see is a table that lists all the Hybrid Connections that are configured with this instance of the HCM. If you want to make any changes, first authenticate with Azure.
156+
When you start the HCM GUI, the first thing you see is a table that lists all the Hybrid Connections that are configured with this instance of the HCM. If you want to make any changes, first authenticate with Azure.
134157

135158
To add one or more Hybrid Connections to your HCM:
136159

137-
1. Start the HCM UI.
160+
1. Start the HCM GUI.
138161
1. Select **Add a new Hybrid Connection**.
139162

140163
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-hcm-add.png" alt-text="Screenshot of Configure New Hybrid Connections.":::
@@ -151,29 +174,34 @@ You can now see the Hybrid Connections you added. You can also select the config
151174

152175
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-hcm-details.png" alt-text="Screenshot of Hybrid Connection Details.":::
153176

154-
To support the Hybrid Connections it's configured with, HCM requires:
177+
### Getting started with the Hybrid Connection Manager CLI
155178

156-
- TCP access to Azure over port 443.
157-
- TCP access to the Hybrid Connection endpoint.
158-
- The ability to do DNS look-ups on the endpoint host and the Service Bus namespace. In other words, the hostname in the Azure relay connection should be resolvable from the machine that hosts the HCM.
179+
On Windows, you can use the HCM CLI by searching for and opening *Hybrid Connection Manager CLI*. On Linux, once installed, you can run `hcm help` to confirm the HCM is installed and to see the available commands.
159180

160-
> [!NOTE]
161-
> Azure Relay relies on Web Sockets for connectivity. This capability is only available on Windows Server 2012 or later. Because of this fact, HCM isn't supported on systems earlier than Windows Server 2012.
162-
>
181+
To use the interactive mode with the HCM CLI, which allows you to view your Azure subscription and Hybrid Connection details, you need to install and login to the Azure CLI. For installation instructions, see [How to install the Azure CLI][install-azure-cli] and select the appropriate option for your client. Once installed, run `az login` and follow the prompts to complete your login.
182+
183+
<!-- TODO: getting started with cli pics and instructions -->
163184

164185
### Redundancy
165186

166187
Each HCM can support multiple Hybrid Connections. Multiple HCMs can support any Hybrid Connection. The default behavior is to route traffic across the configured HCMs for any given endpoint. If you want high availability on your Hybrid Connections from your network, run multiple HCMs on separate machines. The load distribution algorithm used by the Relay service to distribute traffic to the HCMs is random assignment.
167188

168189
### Manually add a Hybrid Connection
169190

170-
To enable someone outside your subscription to host an HCM instance for a given Hybrid Connection, share the gateway connection string for the Hybrid Connection with them. You can see the gateway connection string in the Hybrid Connection properties in the [Azure portal]. To use that string, select **Enter Manually** in the HCM, and paste in the gateway connection string.
191+
To enable someone outside your subscription to host an HCM instance for a given Hybrid Connection, share the gateway connection string for the Hybrid Connection with them. You can see the gateway connection string in the Hybrid Connection properties in the [Azure portal].
192+
193+
To use that string in the HCM GUI, select **+ New** and **Use Connection String** and paste in the gateway connection string.
171194

195+
<!-- TODO:update photo -->
172196
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-manual.png" alt-text="Screenshot of the dialog box where you manually add a Hybrid Connection.":::
173197

198+
To use that string in the HCM CLI, run `hcm add` with either the connection string, or the Hybrid Connection resource details.
199+
200+
<!-- TODO:add photos -->
201+
174202
### Upgrade
175203

176-
There are periodic updates to the Hybrid Connection Manager to fix issues or provide improvements. When upgrades are released, a dialog box appears in the HCM UI. Applying the upgrade applies the changes and restarts the HCM.
204+
There are periodic updates to the Hybrid Connection Manager to fix issues or provide improvements. When upgrades are released, a dialog box appears in the HCM GUI and the HCM CLI command responses. Applying the upgrade applies the changes and restarts the HCM.
177205

178206
## Adding a Hybrid Connection to your app programmatically
179207

@@ -234,7 +262,7 @@ The status of **Connected** means that at least one HCM is configured with that
234262
- Do you have a firewall between your HCM host and Azure? If so, you need to allow outbound access to both the Service Bus endpoint URL *AND* the Service Bus gateways that service your Hybrid Connection.
235263

236264
- You can find the Service Bus endpoint URL in the Hybrid Connection Manager UI.
237-
265+
<!-- TODO: update image -->
238266
:::image type="content" source="media/app-service-hybrid-connections/hybrid-connections-service-bus-endpoint.png" alt-text="Screenshot of Hybrid Connection Service Bus endpoint.":::
239267

240268
- The Service Bus gateways are the resources that accept the request into the Hybrid Connection and pass it through the Azure Relay. You need to allowlist all of the gateways. The gateways are in the format: `G#-prod-[stamp]-sb.servicebus.windows.net` and `GV#-prod-[stamp]-sb.servicebus.windows.net`. The number sign, `#`, is a number between 0 and 127 and `stamp` is the name of the instance within your Azure data center where your Service Bus endpoint exists.
@@ -252,14 +280,14 @@ The status of **Connected** means that at least one HCM is configured with that
252280
G1-prod-sn3-010-sb.servicebus.windows.net
253281
G2-prod-sn3-010-sb.servicebus.windows.net
254282
G3-prod-sn3-010-sb.servicebus.windows.net
255-
...
283+
...
256284
G126-prod-sn3-010-sb.servicebus.windows.net
257285
G127-prod-sn3-010-sb.servicebus.windows.net
258286
GV0-prod-sn3-010-sb.servicebus.windows.net
259287
GV1-prod-sn3-010-sb.servicebus.windows.net
260288
GV2-prod-sn3-010-sb.servicebus.windows.net
261289
GV3-prod-sn3-010-sb.servicebus.windows.net
262-
...
290+
...
263291
GV126-prod-sn3-010-sb.servicebus.windows.net
264292
GV127-prod-sn3-010-sb.servicebus.windows.net
265293

@@ -278,3 +306,4 @@ If you have a command-line client for your endpoint, you can test connectivity f
278306
[HCService]: /azure/service-bus-relay/relay-hybrid-connections-protocol/
279307
[Azure portal]: https://portal.azure.com/
280308
[sbpricing]: https://azure.microsoft.com/pricing/details/service-bus/
309+
[install-azure-cli]: /cli/azure/install-azure-cli/

0 commit comments

Comments
 (0)