You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# What is Azure Cache for Redis with Azure Private Link?
14
15
15
-
In this article, you'll learn how to create a virtual network and an Azure Cache for Redis instance with a private endpoint using the Azure portal. You'll also learn how to add a private endpoint to an existing Azure Cache for Redis instance.
16
+
In this article, you learn how to create a virtual network and an Azure Cache for Redis instance with a private endpoint using the Azure portal. You also learn how to add a private endpoint to an existing Azure Cache for Redis instance.
16
17
17
18
Azure Private Endpoint is a network interface that connects you privately and securely to Azure Cache for Redis powered by Azure Private Link.
18
19
@@ -37,7 +38,7 @@ You can restrict public access to the private endpoint of your cache by disablin
37
38
38
39
## Create a private endpoint with a new Azure Cache for Redis instance
39
40
40
-
In this section, you'll create a new Azure Cache for Redis instance with a private endpoint.
41
+
In this section, you create a new Azure Cache for Redis instance with a private endpoint.
41
42
42
43
### Create a virtual network for your new cache
43
44
@@ -56,7 +57,7 @@ In this section, you'll create a new Azure Cache for Redis instance with a priva
56
57
|**Subscription**| Drop down and select your subscription. | The subscription under which to create this virtual network. |
57
58
|**Resource group**| Drop down and select a resource group, or select **Create new** and enter a new resource group name. | Name for the resource group in which to create your virtual network and other resources. By putting all your app resources in one resource group, you can easily manage or delete them together. |
58
59
|**Name**| Enter a virtual network name. | The name must: begin with a letter or number; end with a letter, number, or underscore; and contain only letters, numbers, underscores, periods, or hyphens. |
59
-
|**Region**| Drop down and select a region. | Select a [region](https://azure.microsoft.com/regions/) near other services that will use your virtual network. |
60
+
|**Region**| Drop down and select a region. | Select a [region](https://azure.microsoft.com/regions/) near other services that use your virtual network. |
60
61
61
62
5. Select the **IP Addresses** tab or select the **Next: IP Addresses** button at the bottom of the page.
62
63
@@ -74,13 +75,13 @@ In this section, you'll create a new Azure Cache for Redis instance with a priva
74
75
75
76
### Create an Azure Cache for Redis instance with a private endpoint
76
77
77
-
To create a cache instance, follow these steps.
78
+
To create a cache instance, follow these steps:
78
79
79
80
1. Go back to the Azure portal homepage or open the sidebar menu, then select **Create a resource**.
80
81
81
82
1. On the **New** page, select **Databases** and then select **Azure Cache for Redis**.
82
83
83
-
:::image type="content" source="media/cache-private-link/2-select-cache.png" alt-text="Select Azure Cache for Redis.":::
84
+
:::image type="content" source="media/cache-private-link/2-select-cache.png" alt-text="Select Azure Cache for Redis.":::
84
85
85
86
1. On the **New Redis Cache** page, configure the settings for your new cache.
86
87
@@ -98,7 +99,7 @@ To create a cache instance, follow these steps.
98
99
99
100
1. Select the **Add** button to create your private endpoint.
100
101
101
-
:::image type="content" source="media/cache-private-link/3-add-private-endpoint.png" alt-text="In networking, add a private endpoint.":::
102
+
:::image type="content" source="media/cache-private-link/3-add-private-endpoint.png" alt-text="In networking, add a private endpoint.":::
102
103
103
104
1. On the **Create a private endpoint** page, configure the settings for your private endpoint with the virtual network and subnet you created in the last section and select **OK**.
104
105
@@ -130,7 +131,7 @@ In this section, you'll add a private endpoint to an existing Azure Cache for Re
130
131
131
132
### Create a virtual network for your existing cache
132
133
133
-
To create a virtual network, follow these steps.
134
+
To create a virtual network, follow these steps:
134
135
135
136
1. Sign in to the [Azure portal](https://portal.azure.com) and select **Create a resource**.
136
137
@@ -163,7 +164,7 @@ To create a virtual network, follow these steps.
163
164
164
165
### Create a private endpoint
165
166
166
-
To create a private endpoint, follow these steps.
167
+
To create a private endpoint, follow these steps:
167
168
168
169
1. In the Azure portal, search for **Azure Cache for Redis**. Then, press enter or select it from the search suggestions.
169
170
@@ -191,9 +192,13 @@ To create a private endpoint, follow these steps.
191
192
1. In the **Resource** tab, select your subscription, choose the resource type as `Microsoft.Cache/Redis`, and then select the cache you want to connect the private endpoint to.
192
193
193
194
1. Select the **Next: Configuration** button at the bottom of the page.
195
+
194
196
1. Select the **Next: Virtual Network** button at the bottom of the page.
197
+
195
198
1. In the **Configuration** tab, select the virtual network and subnet you created in the previous section.
199
+
196
200
1. In the **Virtual Network** tab, select the virtual network and subnet you created in the previous section.
201
+
197
202
1. Select the **Next: Tags** button at the bottom of the page.
198
203
199
204
1. Optionally, in the **Tags** tab, enter the name and value if you wish to categorize the resource.
@@ -353,34 +358,36 @@ For more information, see [Azure services DNS zone configuration](../private-lin
353
358
354
359
### How do I verify if my private endpoint is configured correctly?
355
360
356
-
Go to **Overview** in the Resource menu on the portal. You see the **Host name** for your cache in the working pane. Run a command like `nslookup <hostname>` from within the VNet that is linked to the private endpoint to verify that the command resolves to the private IP address for the cache.
361
+
Go to **Overview** in the Resource menu on the portal. You see the **Host name** for your cache in the working pane. Run a command like `nslookup <hostname>` from within the VNet that is linked to the private endpoint to verify that the command resolves to the private IP address for the cache.
357
362
358
-
:::image type="content" source="media/cache-private-link/cache-private-ip-address.png" alt-text="In the Azure portal, private endpoint D N S settings.":::
363
+
:::image type="content" source="media/cache-private-link/cache-private-ip-address.png" alt-text="In the Azure portal, private endpoint D N S settings.":::
359
364
360
365
### How can I change my private endpoint to be disabled or enabled from public network access?
361
366
362
367
There's a `publicNetworkAccess` flag that is `Disabled` by default.
363
368
When set to `Enabled`, this flag is allows both public and private endpoint access to the cache. When set to `Disabled`, it allows only private endpoint access. You can set the value to `Disabled` or `Enabled` in the Azure portal or with a RESTful API PATCH request.
364
369
365
-
To change the value in the Azure portal, follow these steps.
366
-
367
-
1. In the Azure portal, search for **Azure Cache for Redis**. Then, press enter or select it from the search suggestions.
370
+
To change the value in the Azure portal, follow these steps:
368
371
369
-
1.Select the cache instance you want to change the public network access value.
372
+
1.In the Azure portal, search for **Azure Cache for Redis**. Then, press enter or select it from the search suggestions.
370
373
371
-
1.On the left side of the screen, select **Private Endpoint**.
374
+
1.Select the cache instance you want to change the public network access value.
372
375
373
-
1.Select the **Enable public network access** button.
376
+
1.On the left side of the screen, select **Private Endpoint**.
374
377
378
+
1. Select the **Enable public network access** button.
379
+
375
380
To change the value through a RESTful API PATCH request, see below and edit the value to reflect which flag you want for your cache.
For more information, see [Redis - Update] (/rest/api/redis/Redis/Update?tabs=HTTP).
384
391
385
392
### How can I migrate my VNet injected cache to a Private Link cache?
386
393
@@ -404,7 +411,7 @@ Control the traffic by using NSG rules for outbound traffic on source clients. D
404
411
405
412
It's only linked to your VNet. Because it's not in your VNet, NSG rules don't need to be modified for dependent endpoints.
406
413
407
-
## Next steps
414
+
## Related content
408
415
409
416
- To learn more about Azure Private Link, see the [Azure Private Link documentation](../private-link/private-link-overview.md).
410
417
- To compare various network isolation options for your cache, see [Azure Cache for Redis network isolation options documentation](cache-network-isolation.md).
0 commit comments