Set up IP tags on a Service Fabric managed cluster (SFMC)

An IP tag represents a group of IP address prefixes from a given Azure service. Microsoft manages the address prefixes encompassed by the IP tag and automatically updates the service tag as addresses change, minimizing the complexity of frequent updates to network security rules. You can use IP tags to define network access controls on network security groups, Azure Firewall, and user-defined routes. By adding IP tags, an SFMC cluster has an added layer of security.

Note

The IPTag property only applies to the public IPv4 and IPv6 addresses of the default cluster load balancer.

Limitations

You shouldn't implement IP tags on existing clusters.

Prerequisites

Ensure that you provisioned IPTags beforehand.

Modify your ARM template

When creating a new Service Fabric managed cluster, you need to add to the ARM template with the following property:

{
  "type": "Microsoft.ServiceFabric/managedClusters",
  "apiVersion": "2021-07-01-preview",
  "properties": {
    "ipTags": [
      {
        "ipTagType": "string",
        "tag": "string"
      }
    ]
  }
}

Then, deploy your SFMC cluster as normal.

Next steps

• To see more about Service Fabric managed cluster network settings, see Configure network settings for Service Fabric managed clusters.
• To learn about using public IP prefixes in managed clusters, see Use a Public IP address prefix in a Service Fabric managed cluster.