Azure IoT Operations networking

Networking is a foundational aspect of deploying and managing distributed systems, especially in hybrid and multicloud environments. In Azure IoT Operations, secure networking enables reliable connectivity between on-premises resources, edge devices, and Azure services. Proper network configuration is essential for communication, security, and scalability of IoT Operations and Kubernetes clusters. This article describes key networking options for IoT Operations.

Azure Arc gateway

The Azure Arc gateway acts as a network proxy that lets you simplify network configuration requirements by reducing the number of Azure endpoints to allow through your firewall. By routing traffic through the gateway, you can simplify firewall rules and reduce the need for complex network changes. This approach is especially useful for securely connecting isolated or segmented environments to Azure Arc and Azure IoT Operations.

For more information, see Simplify network configuration requirements with Azure Arc gateway (preview).

Explicit proxy usage

Azure Firewall Explicit Proxy allows you to direct Azure Arc and IoT Operations traffic through a managed firewall, providing enhanced security and monitoring. This is useful for organizations that require all outbound traffic to be inspected or logged, and helps meet compliance requirements by controlling and auditing network flows to Azure.

For more information, see Access Azure services over Azure Firewall Explicit Proxy (Public Preview).

Layered networking sample

In industries like manufacturing, segmented networking architectures (such as the Purdue Network Architecture) are common. These architectures create layers that minimize or block lower-level segments from connecting to the internet. Azure IoT Operations supports secure management of devices in these layered networks using open, industry-recognized software, and Kubernetes-based configuration.

A layered networking guidance sample is available in the Azure IoT Operations samples repository. It demonstrates how to:

• Use Kubernetes-based configuration and networking primitives for layered environments
• Connect devices in isolated networks at scale to Azure Arc for application lifecycle management and remote configuration
• Enforce security and governance across network levels with URL/IP allowlists and connection auditing
• Ensure compatibility with all Azure IoT Operations services

Important

Azure IoT Layered Network Management (preview) will be retired. Use the layered networking guidance sample instead to implement layered network management in Azure IoT Operations.