Skip to content

Commit e1cb6ae

Browse files
author
Thomas Weiss
committed
Integrated Liphi's comments
1 parent 82042e0 commit e1cb6ae

File tree

1 file changed

+4
-16
lines changed

1 file changed

+4
-16
lines changed

articles/cosmos-db/how-to-configure-private-endpoints.md

Lines changed: 4 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ You can connect to an Azure Cosmos account configured with Private Link by using
1919
This article describes the steps to create a private endpoint. It assumes that you're using the automatic approval method.
2020

2121
> [!NOTE]
22-
> Private endpoint support is currently generally available for gateway connection mode only. For direct mode, it is available as a preview feature.
22+
> Private endpoint support is currently generally available in supported regions for gateway connection mode only. For direct mode, it is available as a preview feature.
2323
2424
## Create a private endpoint by using the Azure portal
2525

@@ -550,21 +550,9 @@ Adding or removing regions to an Azure Cosmos account requires you to add or rem
550550

551551
For example, imagine that you deploy an Azure Cosmos account in three regions: "West US," "Central US," and "West Europe." When you create a private endpoint for your account, four private IPs are reserved in the subnet. There's one IP for each of the three regions, and there's one IP for the global/region-agnostic endpoint.
552552

553-
Later, you might add a new region (for example, "East US") to the Azure Cosmos account. By default, the new region is not accessible from the existing private endpoint. The Azure Cosmos account administrator should refresh the private endpoint connection before accessing it from the new region.
553+
Later, you might add a new region (for example, "East US") to the Azure Cosmos account. After adding the new region, you need to add a corresponding DNS record to either your private DNS zone or your custom DNS.
554554

555-
When you run the ` Get-AzPrivateEndpoint -Name <your private endpoint name> -ResourceGroupName <your resource group name>` command, the output of the command contains the `actionsRequired` parameter. This parameter is set to `Recreate`. This value indicates that the private endpoint should be refreshed. Next, the Azure Cosmos account administrator runs the `Set-AzPrivateEndpoint` command to trigger the private endpoint refresh.
556-
557-
```powershell
558-
$pe = Get-AzPrivateEndpoint -Name <your private endpoint name> -ResourceGroupName <your resource group name>
559-
560-
Set-AzPrivateEndpoint -PrivateEndpoint $pe
561-
```
562-
563-
A new private IP is automatically reserved in the subnet under this private endpoint. The value for `actionsRequired` becomes `None`. If you don't have any private DNZ zone integration (in other words, if you're using a custom private DNS zone), you have to configure your private DNS zone to add a new DNS record for the private IP that corresponds to the new region.
564-
565-
You can use the same steps when you remove a region. The private IP of the removed region is automatically reclaimed, and the `actionsRequired` flag becomes `None`. If you don't have any private DNZ zone integration, you must configure your private DNS zone to remove the DNS record for the removed region.
566-
567-
DNS records in the private DNS zone are not removed automatically when a private endpoint is deleted or a region from the Azure Cosmos account is removed. You must manually remove the DNS records.
555+
You can use the same steps when you remove a region. After removing the region, you need to remove the corresponding DNS record from either your private DNS zone or your custom DNS.
568556

569557
## Current limitations
570558

@@ -577,7 +565,7 @@ The following limitations apply when you're using Private Link with an Azure Cos
577565
578566
* When you're using Private Link with an Azure Cosmos account by using a direct mode connection, you can use only the TCP protocol. The HTTP protocol is not yet supported.
579567

580-
* Private endpoint support is currently generally available for gateway connection mode only. For direct mode, it is available as a preview feature.
568+
* Private endpoint support is currently generally available in supported regions for gateway connection mode only. For direct mode, it is available as a preview feature.
581569

582570
* When you're using Azure Cosmos DB's API for MongoDB accounts, a private endpoint is supported for accounts on server version 3.6 only (that is, accounts using the endpoint in the format `*.mongo.cosmos.azure.com`). Private Link is not supported for accounts on server version 3.2 (that is, accounts using the endpoint in the format `*.documents.azure.com`). To use Private Link, you should migrate old accounts to the new version.
583571

0 commit comments

Comments
 (0)