Skip to content

Commit 50cb2ec

Browse files
Merge pull request #17077 from alkohli/plan23h2
Removed version 23H2 references
2 parents 01eedd2 + e3a7680 commit 50cb2ec

27 files changed

+68
-68
lines changed

azure-local/concepts/firewall-requirements.md

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: This topic provides guidance on firewall requirements for the Azure
44
author: alkohli
55
ms.author: alkohli
66
ms.topic: how-to
7-
ms.date: 01/02/2025
7+
ms.date: 02/14/2025
88
---
99

1010
# Firewall requirements for Azure Local
@@ -18,7 +18,7 @@ This article also describes how to optionally use a highly locked-down firewall
1818
If your network uses a proxy server for internet access, see [Configure proxy settings for Azure Local](../manage/configure-proxy-settings-23h2.md).
1919

2020
> [!IMPORTANT]
21-
> Azure Express Route and Azure Private Link are not supported for Azure Local, version 23H2 or any of its components as it is not possible to access the public endpoints required for Azure Local, version 23H2.
21+
> Azure Express Route and Azure Private Link are not supported for Azure Local or any of its components as it is not possible to access the public endpoints required for Azure Local.
2222
2323
## Firewall requirements for outbound endpoints
2424

@@ -37,33 +37,33 @@ As shown in the following diagram, Azure Local can access Azure using more than
3737

3838
:::image type="content" source="./media/firewall-requirements/firewalls-diagram.png" alt-text="Diagram shows Azure Local accessing service tag endpoints through Port 443 (HTTPS) of firewalls." lightbox="./media/firewall-requirements/firewalls-diagram.png":::
3939

40-
## Required firewall URLs for Azure Local, version 23H2 deployments
40+
## Required firewall URLs for Azure Local deployments
4141

42-
Starting with Azure Local, version 23H2, all the clusters automatically enables Azure Resource Bridge and AKS infrastructure and uses the Arc for Servers agent to connect to Azure control plane. Along with the list of HCI specific endpoints on the following table, the [Azure Resource Bridge on Azure Local](/azure/azure-arc/resource-bridge/network-requirements) endpoints, the [AKS on Azure Local](/azure/aks/hybrid/aks-hci-network-system-requirements#firewall-url-exceptions) endpoints and the [Azure Arc-enabled servers](/azure/azure-arc/servers/network-requirements) endpoints must be included in the allow list of your firewall.
42+
Azure Local instances automatically enables Azure Resource Bridge and AKS infrastructure and uses the Arc for Servers agent to connect to Azure control plane. Along with the list of HCI specific endpoints on the following table, the [Azure Resource Bridge on Azure Local](/azure/azure-arc/resource-bridge/network-requirements) endpoints, the [AKS on Azure Local](/azure/aks/hybrid/aks-hci-network-system-requirements#firewall-url-exceptions) endpoints and the [Azure Arc-enabled servers](/azure/azure-arc/servers/network-requirements) endpoints must be included in the allow list of your firewall.
4343

4444
For a consolidated list of endpoints for East US that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
45-
- [Required endpoints in East US for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/EastUSendpoints/eastus-hci-endpoints.md)
45+
- [Required endpoints in East US for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/EastUSendpoints/eastus-hci-endpoints.md)
4646

4747
For a consolidated list of endpoints for West Europe that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
48-
- [Required endpoints in West Europe for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/WestEuropeendpoints/westeurope-hci-endpoints.md)
48+
- [Required endpoints in West Europe for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/WestEuropeendpoints/westeurope-hci-endpoints.md)
4949

5050
For a consolidated list of endpoints for Australia East that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
51-
- [Required endpoints in Australia East for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/AustraliaEastendpoints/AustraliaEast-hci-endpoints.md)
51+
- [Required endpoints in Australia East for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/AustraliaEastendpoints/AustraliaEast-hci-endpoints.md)
5252

5353
For a consolidated list of endpoints for Canada Central that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
54-
- [Required endpoints in Canada Central for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/CanadaCentralEndpoints/canadacentral-hci-endpoints.md)
54+
- [Required endpoints in Canada Central for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/CanadaCentralEndpoints/canadacentral-hci-endpoints.md)
5555

5656
For a consolidated list of endpoints for India Central that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
57-
- [Required endpoints in India Central for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/IndiaCentralEndpoints/IndiaCentral-hci-endpoints.md)
57+
- [Required endpoints in India Central for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/IndiaCentralEndpoints/IndiaCentral-hci-endpoints.md)
5858

5959
For a consolidated list of endpoints for SouthEast Asia that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
60-
- [Required endpoints in SouthEast Asia for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/SouthEastAsiaEndpoints/southeastasia-hci-endpoints.md)
60+
- [Required endpoints in SouthEast Asia for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/SouthEastAsiaEndpoints/southeastasia-hci-endpoints.md)
6161

6262
For a consolidated list of endpoints for Japan East that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
63-
- [Required endpoints in Japan East for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/JapanEastEndpoints/japaneast-hci-endpoints.md)
63+
- [Required endpoints in Japan East for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/JapanEastEndpoints/japaneast-hci-endpoints.md)
6464

6565
For a consolidated list of endpoints for South Central US that includes Azure Local, Arc-enabled servers, ARB, and AKS, use:
66-
- [Required endpoints in South Central US for Azure Local, version 23H2](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/SouthCentralUSEndpoints/southcentralus-hci-endpoints.md)
66+
- [Required endpoints in South Central US for Azure Local](https://github.com/Azure/AzureStack-Tools/blob/master/HCI/SouthCentralUSEndpoints/southcentralus-hci-endpoints.md)
6767

6868
## Firewall requirements for additional Azure services
6969

@@ -82,7 +82,7 @@ Depending on additional Azure services you enable for Azure Local, you may need
8282

8383
## Firewall requirements for internal rules and ports
8484

85-
Ensure that the proper network ports are open between all nodes, both within a site and between sites for stretched instances (stretched instance functionality is only available in Azure Local, version 22H2.). You'll need appropriate firewall rules to allow ICMP, SMB (port 445, plus port 5445 for SMB Direct if using iWARP RDMA), and WS-MAN (port 5985) bi-directional traffic between all nodes in the cluster.
85+
Ensure that the proper network ports are open between all nodes, both within a site and between sites for stretched instances (stretched instance functionality is only available in Azure Stack HCI, version 22H2). You'll need appropriate firewall rules to allow ICMP, SMB (port 445, plus port 5445 for SMB Direct if using iWARP RDMA), and WS-MAN (port 5985) bi-directional traffic between all nodes in the cluster.
8686

8787
When using the **Creation wizard** in Windows Admin Center to create the cluster, the wizard automatically opens the appropriate firewall ports on each server in the cluster for Failover Clustering, Hyper-V, and Storage Replica. If you're using a different firewall on each machine, open the ports as described in the following sections:
8888

@@ -92,7 +92,7 @@ Ensure that the following firewall rules are configured in your on-premises fire
9292

9393
| Rule | Action | Source | Destination | Service | Ports |
9494
|:--|:--|:--|:--|:--|:--|
95-
| Allow inbound/outbound traffic to and from the Azure Local service on Azure Local instance machines | Allow | Instance nodes | Instance nodes | TCP | 30301 |
95+
| Allow inbound/outbound traffic to and from the Azure Local service on Azure Local machines | Allow | Instance nodes | Instance nodes | TCP | 30301 |
9696

9797
### Windows Admin Center
9898

@@ -197,5 +197,5 @@ This section shows how to configure Microsoft Defender firewall to allow IP addr
197197
198198
For more information, see also:
199199
200-
- The Windows Firewall and WinRM 2.0 ports section of [Installation and configuration for Windows Remote Management](/windows/win32/winrm/installation-and-configuration-for-windows-remote-management#windows-firewall-and-winrm-20-ports)
201-
- See [About Azure Local, version 23H2 deployment](../deploy/deployment-introduction.md)
200+
- The Windows Firewall and WinRM 2.0 ports section of [Installation and configuration for Windows Remote Management](/windows/win32/winrm/installation-and-configuration-for-windows-remote-management#windows-firewall-and-winrm-20-ports).
201+
- [About Azure Local deployment](../deploy/deployment-introduction.md).

azure-local/concepts/host-network-requirements.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Host network requirements for Azure Local
33
description: Learn the host network requirements for Azure Local
44
author: dcuomo
55
ms.topic: how-to
6-
ms.date: 10/17/2024
6+
ms.date: 02/14/2025
77
ms.author: dacuo
88
---
99

azure-local/concepts/physical-network-requirements.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Physical network requirements for Azure Local
33
description: Physical network requirements and considerations for Azure Local, including network switches.
44
author: jacobpedd
55
ms.topic: conceptual
6-
ms.date: 10/17/2024
6+
ms.date: 02/14/2025
77
ms.author: jgerend
88
ms.reviewer: JasonGerend
99
---

azure-local/concepts/security-features.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,10 @@ author: alkohli
55
ms.author: alkohli
66
ms.topic: conceptual
77
ms.service: azure-local
8-
ms.date: 12/11/2024
8+
ms.date: 02/14/2025
99
---
1010

11-
# Security features for Azure Local, version 23H2
11+
# Security features for Azure Local
1212

1313
[!INCLUDE [hci-applies-to-23h2](../includes/hci-applies-to-23h2.md)]
1414

@@ -36,7 +36,7 @@ For more information, see [Manage security defaults on Azure Local](../manage/ma
3636

3737
## Application Control
3838

39-
Application Control is a software-based security layer that reduces attack surface by enforcing an explicit list of software that is allowed to run. Application Control is enabled by default and limits the applications and code that you can run on the core platform. For more information, see [Manage Application Control for Azure Local, version 23H2](../manage/manage-wdac.md#manage-application-control-settings-with-powershell).
39+
Application Control is a software-based security layer that reduces attack surface by enforcing an explicit list of software that is allowed to run. Application Control is enabled by default and limits the applications and code that you can run on the core platform. For more information, see [Manage Application Control for Azure Local](../manage/manage-wdac.md#manage-application-control-settings-with-powershell).
4040

4141
Application Control provides two main operation modes, Enforcement mode and Audit mode. In Enforcement mode, untrusted code is blocked and events are recorded. In Audit mode, untrusted code is allowed to run and events are recorded. To learn more about Application Control-related events, see [List of Events](/windows/security/application-security/application-control/windows-defender-application-control/operations/event-id-explanations).
4242

@@ -140,7 +140,7 @@ For more information, see [Manage secrets rotation](../manage/manage-secrets-rot
140140

141141
## Syslog forwarding of security events
142142

143-
For customers and organizations that require their own local security information and event management (SIEM) system, Azure Local, version 23H2 includes an integrated mechanism that enables you to forward security-related events to a SIEM.
143+
For customers and organizations that require their own local security information and event management (SIEM) system, Azure Local includes an integrated mechanism that enables you to forward security-related events to a SIEM.
144144

145145
Azure Local has an integrated syslog forwarder that, once configured, generates syslog messages defined in RFC3164, with the payload in Common Event Format (CEF).
146146

azure-local/concepts/system-requirements-23h2.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,10 @@ ms.author: alkohli
66
ms.topic: how-to
77
ms.service: azure-local
88
ms.custom: references_regions
9-
ms.date: 01/02/2025
9+
ms.date: 02/14/2025
1010
---
1111

12-
# System requirements for Azure Local, version 23H2
12+
# System requirements for Azure Local
1313

1414
[!INCLUDE [applies-to](../includes/hci-applies-to-23h2.md)]
1515

@@ -96,14 +96,14 @@ To ensure adequate support and diagnosability for large memory Azure Local insta
9696

9797
In addition to Microsoft Azure Local updates, many OEMs also release regular updates for your Azure Local hardware, such as driver and firmware updates. To ensure that OEM package update notifications, reach your organization check with your OEM about their specific notification process.
9898

99-
Before deploying Azure Local, version 23H2, ensure that your hardware is up to date by:
99+
Before deploying Azure Local, ensure that your hardware is up to date by:
100100

101101
- Determining the current version of your Solution Builder Extension (SBE) package.
102102
- Finding the best method to download, install, and update your SBE package.
103103

104104
### OEM information
105105

106-
This section contains OEM contact information and links to OEM Azure Local, version 23H2 reference material.
106+
This section contains OEM contact information and links to OEM Azure Local reference material.
107107

108108
| Azure Local Solution provider | Solution platform | How to configure BIOS settings | How to update firmware | How to update drivers | How to update the system after it's running |
109109
|-----------------------|--------------------|--------------------------------|------------------------|-----------------------|-----------------------------------------------|
@@ -117,11 +117,11 @@ For a comprehensive list of all OEM contact information, download the [Azure Loc
117117

118118
### BIOS setting
119119

120-
Check with your OEM regarding the necessary generic BIOS settings for Azure Local, version 23H2. These settings may include hardware virtualization, TPM enabled, and secure core.
120+
Check with your OEM regarding the necessary generic BIOS settings for Azure Local. These settings may include hardware virtualization, TPM enabled, and secure core.
121121

122122
## Driver
123123

124-
Check with your OEM regarding the necessary drivers that need to be installed for Azure Local, version 23H2. Additionally, your OEM can provide you with their preferred installation steps.
124+
Check with your OEM regarding the necessary drivers that need to be installed for Azure Local. Additionally, your OEM can provide you with their preferred installation steps.
125125

126126
### Driver installation steps
127127

@@ -230,11 +230,11 @@ You should always follow the OEM's recommended installation steps. If the OEM's
230230
231231
## Firmware
232232
233-
Check with your OEM regarding the necessary firmware that needs to be installed for Azure Local, version 23H2. Additionally, your OEM can provide you with their preferred installation steps.
233+
Check with your OEM regarding the necessary firmware that needs to be installed for Azure Local. Additionally, your OEM can provide you with their preferred installation steps.
234234
235235
## Drivers and firmware via the Windows Admin Center extension
236236
237-
You should always follow the OEM's recommended installation steps. With Azure Local, version 23H2, Windows Admin Center plugins can be used to install drivers and firmware. For a comprehensive list of all OEM contact information, download the [Azure Local OEM Contact](https://github.com/Azure/AzureStack-Tools/raw/master/HCI/azure-stack-hci-oem-contact-and-material.xlsx) spreadsheet.
237+
You should always follow the OEM's recommended installation steps. With Azure Local, Windows Admin Center plugins can be used to install drivers and firmware. For a comprehensive list of all OEM contact information, download the [Azure Local OEM Contact](https://github.com/Azure/AzureStack-Tools/raw/master/HCI/azure-stack-hci-oem-contact-and-material.xlsx) spreadsheet.
238238
239239
<!--|OEM | Download link |
240240
|-------|------------------------------------------------------------------|

azure-local/concepts/system-requirements-small-23h2.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.custom: references_regions
99
ms.date: 02/06/2025
1010
---
1111

12-
# System requirements for small form factor deployments of Azure Local, version 23H2 (preview)
12+
# System requirements for small form factor deployments of Azure Local (Preview)
1313

1414
::: moniker range=">=azloc-2411"
1515

azure-local/manage/azure-arc-vm-management-prerequisites.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ For Arc VM images to be used on Azure Local, make sure to satisfy the following
4444

4545
## Firewall requirements
4646

47-
Make sure the requirements as listed in [Required firewall URLs for Azure Local deployments](../concepts/firewall-requirements.md#required-firewall-urls-for-azure-local-version-23h2-deployments) are satisfied to allow communication between the Arc VMs running on Azure Local and Azure Arc.
47+
Make sure the requirements as listed in [Required firewall URLs for Azure Local deployments](../concepts/firewall-requirements.md#required-firewall-urls-for-azure-local-deployments) are satisfied to allow communication between the Arc VMs running on Azure Local and Azure Arc.
4848

4949
## Azure Command-Line Interface (CLI) requirements
5050

azure-local/manage/use-environment-checker.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ ms.service: azure-local
88
ms.date: 12/27/2024
99
---
1010

11-
# Evaluate the deployment readiness of your environment for Azure Local, version 23H2
11+
# Evaluate the deployment readiness of your environment for Azure Local
1212

1313
[!INCLUDE [hci-applies-to-23h2](../includes/hci-applies-to-23h2.md)]
1414

azure-local/plan/choose-network-pattern.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ ms.topic: overview
55
author: alkohli
66
ms.author: alkohli
77
ms.service: azure-local
8-
ms.date: 10/17/2024
8+
ms.date: 02/14/2025
99
---
1010

1111
# Azure Local network deployment patterns
@@ -49,4 +49,4 @@ Use the following table to directly go to a pattern and its content.
4949

5050
## Next steps
5151

52-
- [Download Azure Local](../deploy/download-software.md)
52+
- [Download Azure Local](../deploy/download-software.md).

0 commit comments

Comments
 (0)