Thanks for reaching here! Azure SignalR Service has a public endpoint that is accessible through the internet. You can create Private Endpoints for your Azure SignalR Service. Private Endpoint assigns a private IP address from your VNet to the Azure SignalR Service, and secures all traffic between your VNet and the Azure SignalR Service over a private link.
- You can also use Service tags and configure network security group rules to restrict inbound/outbound traffic to Azure SignalR Service.
- Azure SignalR Service instance has a pair of access keys called Primary and Secondary keys. They're used to authenticate SignalR clients when requests are made to the service
- You can use Service Tags for Azure SignalR Service when configuring Network Security Group. It allows you to define inbound/outbound network security rule for Azure SignalR Service endpoints without need to hardcode IP addresses.
- The Azure SignalR Service network access control provides access control for both public endpoint and private endpoints. When you're using serverless mode in Azure SignalR Service, you can create outbound private endpoint connections to an upstream service.
Check this Blog on: Securing Azure SignalR +Azure App Service - Part 2 credit: Jayendran Arumugam
See: https://learn.microsoft.com/en-us/azure/azure-signalr/ > how to guides> secure
Please let us know if further query or issue remains.