Nilai zona DNS privat Titik Akhir Privat Azure
Anda harus mengonfigurasi pengaturan DNS dengan benar sehingga alamat IP titik akhir privat menjelaskan nama domain yang sepenuhnya memenuhi syarat (FQDN) dari string koneksi.
Layanan Microsoft Azure yang sudah ada mungkin sudah memiliki konfigurasi DNS untuk titik akhir publik. Konfigurasi ini harus diambil alih agar tersambung menggunakan titik akhir privat Anda.
Antarmuka jaringan yang terkait dengan titik akhir privat berisi informasi untuk mengonfigurasi DNS Anda. Informasi antarmuka jaringan mencakup FQDN dan alamat IP privat untuk sumber daya tautan privat Anda.
Anda bisa menggunakan opsi berikut untuk mengonfigurasi pengaturan DNS Anda untuk titik akhir privat:
Gunakan file host (hanya disarankan bagi pengujian) . Anda dapat menggunakan file host di komputer virtual untuk mengambil alih DNS.
Gunakan zona DNS privat. Anda dapat menggunakan zona DNS privat untuk mengambil alih resolusi DNS untuk titik akhir privat. Zona DNS privat dapat ditautkan ke jaringan virtual Anda untuk mengatasi domain tertentu.
Gunakan Azure Private Resolver (opsional). Anda dapat menggunakan Azure Private Resolver untuk mengambil alih resolusi DNS untuk sumber daya tautan privat. Untuk informasi selengkapnya tentang Azure Private Resolver, lihat Apa itu Azure Private Resolver?.
Perhatian
Tidak disarankan untuk mengambil alih zona yang digunakan secara aktif untuk mengatasi titik akhir publik. Koneksi ke sumber daya tidak akan bisa diselesaikan dengan benar tanpa penerusan DNS ke DNS publik. Untuk menghindari masalah, buat nama domain yang berbeda atau ikuti nama yang disarankan untuk setiap layanan yang tercantum nanti di artikel ini.
Zona DNS Privat yang ada yang ditautkan ke satu layanan Azure tidak boleh dikaitkan dengan dua Titik Akhir Privat layanan Azure yang berbeda. Ini akan menyebabkan penghapusan catatan A awal dan mengakibatkan masalah penyelesaian saat mencoba mengakses layanan tersebut dari setiap Titik Akhir Privat masing-masing. Buat zona DNS untuk setiap Titik Akhir Privat dari layanan seperti. Jangan menempatkan rekaman untuk beberapa layanan di zona DNS yang sama.
Konfigurasi zona DNS layanan Azure
Azure membuat rekaman DNS nama kanonis (CNAME) di DNS publik. Data CNAME mengalihkan resolusi ke nama domain privat. Anda dapat mengambil alih resolusi dengan alamat IP privat titik akhir privat Anda.
URL koneksi untuk aplikasi yang ada tidak berubah. Permintaan DNS klien ke server DNS publik diselesaikan ke titik akhir privat Anda. Proses ini tidak memengaruhi aplikasi yang ada.
Penting
Berbagi File Azure harus dilepaskan kembali jika tersambung ke titik akhir publik.
Perhatian
Jaringan privat yang sudah menggunakan zona DNS privat untuk tipe tertentu, hanya bisa tersambung ke sumber daya publik jika mereka tidak memiliki koneksi titik akhir privat. Jika tidak, konfigurasi DNS terkait diperlukan di zona DNS privat untuk menyelesaikan urutan resolusi DNS. Konfigurasi DNS yang sesuai adalah catatan A yang dimasukkan secara manual yang menunjuk ke alamat IP publik sumber daya. Prosedur ini tidak disarankan karena alamat IP rekaman A tidak akan diperbarui secara otomatis jika alamat IP publik yang sesuai berubah.
Konfigurasi zona DNS privat titik akhir privat hanya akan dibuat secara otomatis jika Anda menggunakan skema penamaan yang direkomendasikan dalam tabel berikut.
Untuk layanan Azure, gunakan nama zona yang direkomendasikan seperti yang dijelaskan dalam tabel berikut:
Komersial
AI + Pembelajaran Mesin
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Pembelajaran Mesin (Microsoft.MachineLearningServices/workspaces) | amlworkspace | privatelink.api.azureml.ms privatelink.notebooks.azure.net |
api.azureml.ms notebooks.azure.net instances.azureml.ms aznbcontent.net inference.ml.azure.com |
| Layanan Azure AI (Microsoft.CognitiveServices/accounts) | akun | privatelink.cognitiveservices.azure.com privatelink.openai.azure.com |
cognitiveservices.azure.com openai.azure.com |
| Azure Bot Service (Microsoft.BotService/botServices) | Bot | privatelink.directline.botframework.com | directline.botframework.com |
| Azure Bot Service (Microsoft.BotService/botServices) | Token | privatelink.token.botframework.com | token.botframework.com |
Analitik
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Synapse Analytics (Microsoft.Synapse/workspaces) | Sql | privatelink.sql.azuresynapse.net | sql.azuresynapse.net |
| Azure Synapse Analytics (Microsoft.Synapse/workspaces) | SqlOnDemand | privatelink.sql.azuresynapse.net | sql.azuresynapse.net |
| Azure Synapse Analytics (Microsoft.Synapse/workspaces) | Dev | privatelink.dev.azuresynapse.net | dev.azuresynapse.net |
| Azure Synapse Studio (Microsoft.Synapse/privateLinkHubs) | Web | privatelink.azuresynapse.net | azuresynapse.net |
| Azure Event Hubs (Microsoft.EventHub/namespaces) | namespace | privatelink.servicebus.windows.net | servicebus.windows.net |
| Azure Bus Layanan (Microsoft.ServiceBus/namespaces) | namespace | privatelink.servicebus.windows.net | servicebus.windows.net |
| Azure Data Factory (Microsoft.DataFactory/factories) | dataFactory | privatelink.datafactory.azure.net | datafactory.azure.net |
| Azure Data Factory (Microsoft.DataFactory/factories) | portal | privatelink.adf.azure.com | adf.azure.com |
| Azure HDInsight (Microsoft.HDInsight/clusters) | headnode gateway |
privatelink.azurehdinsight.net | azurehdinsight.net |
| Azure Data Explorer (Microsoft.Kusto/Clusters) | klaster | privatelink. {regionName}.kusto.windows.net privatelink.queue.core.windows.net privatelink.table.core.windows.net privatelink.blob.core.windows.net |
{regionName}.kusto.windows.net blob.core.windows.net queue.core.windows.net table.core.windows.net |
| Microsoft Power BI (Microsoft.PowerBI/privateLinkServicesForPowerBI) | penyewa | privatelink.analysis.windows.net privatelink.pbidedicated.windows.net privatelink.tip1.powerquery.microsoft.com |
analysis.windows.net pbidedicated.windows.net tip1.powerquery.microsoft.com |
| Azure Databricks (Microsoft.Databricks/workspaces) | browser_authentication databricks_ui_api |
privatelink.azuredatabricks.net | azuredatabricks.net |
Compute
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Batch (Microsoft.Batch/batchAccounts) | batchAccount | privatelink.batch.azure.com | {regionName}.batch.azure.com |
| Azure Batch (Microsoft.Batch/batchAccounts) | nodeManagement | privatelink.batch.azure.com | {regionName}.service.batch.azure.com |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/workspaces) | global | privatelink-global.wvd.microsoft.com | wvd.microsoft.com |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/workspaces) | umpan | privatelink.wvd.microsoft.com | wvd.microsoft.com |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/hostpools) | koneksi | privatelink.wvd.microsoft.com | wvd.microsoft.com |
Kontainer
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Kubernetes Service - API Kubernetes (Microsoft.ContainerService/managedClusters) | manajemen | privatelink. {regionName}.azmk8s.io {subzone}.privatelink.{ regionName}.azmk8s.io |
{regionName}.azmk8s.io |
| Azure Container Registry (Microsoft.ContainerRegistry/registries) | registri | privatelink.azurecr.io {regionName}.data.privatelink.azurecr.io |
azurecr.io {regionName}.data.azurecr.io |
Database
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure SQL Database (Microsoft.Sql/servers) | sqlServer | privatelink.database.windows.net | database.windows.net |
| Azure SQL Managed Instance (Microsoft.Sql/managedInstances) | managedInstance | privatelink.{dnsPrefix}.database.windows.net | {instanceName}.{dnsPrefix}.database.windows.net |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Sql | privatelink.documents.azure.com | documents.azure.com |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | MongoDB | privatelink.mongo.cosmos.azure.com | mongo.cosmos.azure.com |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Cassandra | privatelink.cassandra.cosmos.azure.com | cassandra.cosmos.azure.com |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Gremlin | privatelink.gremlin.cosmos.azure.com | gremlin.cosmos.azure.com |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Tabel | privatelink.table.cosmos.azure.com | table.cosmos.azure.com |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Analitik | privatelink.analytics.cosmos.azure.com | analytics.cosmos.azure.com |
| Azure Cosmos DB (Microsoft.DBforPostgreSQL/serverGroupsv2) | koordinator | privatelink.postgres.cosmos.azure.com | postgres.cosmos.azure.com |
| Azure Database for PostgreSQL - Server tunggal (Microsoft.DBforPostgreSQL/servers) | postgresqlServer | privatelink.postgres.database.azure.com | postgres.database.azure.com |
| Azure Database for PostgreSQL - Server fleksibel (Microsoft.DBforPostgreSQL/flexibleServers) | postgresqlServer | privatelink.postgres.database.azure.com | postgres.database.azure.com |
| Azure Database for MySQL - Server Tunggal (Microsoft.DBforMySQL/servers) | mysqlServer | privatelink.mysql.database.azure.com | mysql.database.azure.com |
| Azure Database for MySQL - Server Fleksibel (Microsoft.DBforMySQL/flexibleServers) | mysqlServer | privatelink.mysql.database.azure.com | mysql.database.azure.com |
| Azure Database for MariaDB (Microsoft.DBforMariaDB/servers) | mariadbServer | privatelink.mariadb.database.azure.com | mariadb.database.azure.com |
| Azure Cache for Redis (Microsoft.Cache/Redis) | redisCache | privatelink.redis.cache.windows.net | redis.cache.windows.net |
| Azure Cache for Redis Enterprise (Microsoft.Cache/RedisEnterprise) | redisEnterprise | privatelink.redisenterprise.cache.azure.net | redisenterprise.cache.azure.net |
Hibrid + multicloud
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Arc (Microsoft.HybridCompute/privateLinkScopes) | hybridcompute | privatelink.his.arc.azure.com privatelink.dp.kubernetesconfiguration.azure.com privatelink.guestconfiguration.azure.com |
his.arc.azure.com dp.kubernetesconfiguration.azure.com guestconfiguration.azure.com |
Integrasi
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Bus Layanan (Microsoft.ServiceBus/namespaces) | namespace | privatelink.servicebus.windows.net | servicebus.windows.net |
| Azure Event Grid (Microsoft.EventGrid/topics) | topik | privatelink.eventgrid.azure.net | eventgrid.azure.net |
| Azure Event Grid (Microsoft.EventGrid/domains) | domain | privatelink.eventgrid.azure.net | eventgrid.azure.net |
| Azure Event Grid (Microsoft.EventGrid/namespaces) | topik | privatelink.eventgrid.azure.net | eventgrid.azure.net |
| Azure Event Grid (Microsoft.EventGrid/namespaces/topicSpace) | topicSpace | privatelink.ts.eventgrid.azure.net | eventgrid.azure.net |
| Azure Event Grid (Microsoft.EventGrid/partnerNamespaces) | partnernamespace | privatelink.eventgrid.azure.net | eventgrid.azure.net |
| API Management Azure (Microsoft.ApiManagement/service) | Gateway | privatelink.azure-api.net | azure-api.net |
| Azure Health Data Services (Microsoft.HealthcareApis/workspaces) | healthcareworkspace | privatelink.dicom.azurehealthcareapis.com privatelink.fhir.azurehealthcareapis.com privatelink.workspace.azurehealthcareapis.com |
dicom.azurehealthcareapis.com fhir.azurehealthcareapis.com workspace.azurehealthcareapis.com |
Internet of Things (IoT)
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure IoT Hub (Microsoft.Devices/IotHubs) | iotHub | privatelink.azure-devices.net privatelink.servicebus.windows.net1 |
azure-devices.net servicebus.windows.net |
| Azure IoT Hub Device Provisioning Service (Microsoft.Devices/ProvisioningServices) | iotDps | privatelink.azure-devices-provisioning.net | azure-devices-provisioning.net |
| Device Update for IoT Hubs (Microsoft.DeviceUpdate/accounts) | DeviceUpdate | privatelink.api.adu.microsoft.com | api.adu.microsoft.com |
| Azure IoT Central (Microsoft.IoTCentral/IoTApps) | iotApp | privatelink.azureiotcentral.com | azureiotcentral.com |
| Azure Digital Twins (Microsoft.DigitalTwins/digitalTwinsInstances) | API | privatelink.digitaltwins.azure.net | digitaltwins.azure.net |
Media
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Media Services (Microsoft.Media/mediaservices) | keydelivery liveevent streamingendpoint |
privatelink.media.azure.net | media.azure.net |
Manajemen dan Tata Kelola
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Automation (Microsoft.Automation/automationAccounts) | Webhook DSCAndHybridWorker |
privatelink.azure-automation.net | {regionCode}.azure-automation.net |
| Azure Backup (Microsoft.RecoveryServices/vaults) | AzureBackup | privatelink. {regionCode}.backup.windowsazure.com | {regionCode}.backup.windowsazure.com |
| Azure Site Recovery (Microsoft.RecoveryServices/vaults) | AzureSiteRecovery | privatelink.siterecovery.windowsazure.com | {regionCode}.siterecovery.windowsazure.com |
| Azure Monitor (Microsoft.Insights/privateLinkScopes) | AzureMonitor | privatelink.monitor.azure.com privatelink.oms.opinsights.azure.com privatelink.ods.opinsights.azure.com privatelink.agentsvc.azure-automation.net privatelink.blob.core.windows.net |
monitor.azure.com oms.opinsights.azure.com .ods.opinsights.azure.com agentsvc.azure-automation.net blob.core.windows.net services.visualstudio.com applicationinsights.azure.com |
| Microsoft Purview (Microsoft.Purview/accounts) | akun | privatelink.purview.azure.com | purview.azure.com |
| Microsoft Purview (Microsoft.Purview/accounts) | portal | privatelink.purviewstudio.azure.com | purviewstudio.azure.com |
| Azure Migrate (Microsoft.Migrate/migrateProjects) | Default | privatelink.prod.migration.windowsazure.com | prod.migration.windowsazure.com |
| Azure Migrate (Microsoft.Migrate/assessmentProjects) | Default | privatelink.prod.migration.windowsazure.com | prod.migration.windowsazure.com |
| Azure Resource Manager (Microsoft.Authorization/resourceManagementPrivateLinks) | PengelolaanSumberdaya | privatelink.azure.com | azure.com |
| Azure Managed Grafana (Microsoft.Dashboard/grafana) | grafana | privatelink.grafana.azure.com | grafana.azure.com |
Keamanan
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Key Vault (Microsoft.KeyVault/vaults) | vault | privatelink.vaultcore.azure.net | vault.azure.net vaultcore.azure.net |
| Azure Key Vault (Microsoft.KeyVault/managedHSMs) | managedhsm | privatelink.managedhsm.azure.net | managedhsm.azure.netmanagedhsm.azure.net |
| Azure App Configuration (Microsoft.AppConfiguration/configurationStores) | configurationStores | privatelink.azconfig.io | azconfig.io |
| Azure Attestation (Microsoft.Attestation/attestationProviders) | standar | privatelink.attest.azure.net | attest.azure.net |
Penyimpanan
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | blob_secondary blob |
privatelink.blob.core.windows.net | blob.core.windows.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | table_secondary tabel |
privatelink.table.core.windows.net | table.core.windows.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | queue_secondary antrean |
privatelink.queue.core.windows.net | queue.core.windows.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | file | privatelink.file.core.windows.net | file.core.windows.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | web_secondary web |
privatelink.web.core.windows.net | web.core.windows.net |
| Azure Data Lake File System Gen2 (Microsoft.Storage/storageAccounts) | dfs_secondary dfs |
privatelink.dfs.core.windows.net | dfs.core.windows.net |
| Azure File Sync (Microsoft.StorageSync/storageSyncServices) | Afs | privatelink.afs.azure.net | afs.azure.net |
| Azure Managed Disks (Microsoft.Compute/diskAccesses) | disks | privatelink.blob.core.windows.net | blob.core.windows.net |
Web
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Search (Microsoft.Search/searchServices) | searchService | privatelink.search.windows.net | search.windows.net |
| Azure Relay (Microsoft.Relay/namespaces) | namespace | privatelink.servicebus.windows.net | servicebus.windows.net |
| Azure Web Apps - Azure Function Apps (Microsoft.Web/sites) | sites | scm.privatelink.azurewebsites.net privatelink.azurewebsites.net |
scm.azurewebsites.net azurewebsites.net |
| SignalR (Microsoft.SignalRService/SignalR) | signalr | privatelink.service.signalr.net | service.signalr.net |
| Azure Static Web Apps (Microsoft.Web/staticSites) | staticSites | privatelink.azurestaticapps.net privatelink.{partitionId}.azurestaticapps.net |
azurestaticapps.net {partitionId}.azurestaticapps.net |
| Azure Event Hubs (Microsoft.EventHub/namespaces) | namespace | privatelink.servicebus.windows.net | servicebus.windows.net |
1Untuk digunakan dengan titik akhir Event Hub bawaan IoT Hub. Untuk mempelajari selengkapnya, lihat dukungan tautan privat untuk titik akhir bawaan IoT Hub
Catatan
Dalam teks di atas, {regionCode} mengacu pada kode wilayah (misalnya, eus untuk US Timur dan ne untuk Eropa Utara). Lihat daftar berikut untuk kode wilayah:
{regionName} mengacu pada nama wilayah lengkap (misalnya, eastus untuk US Timur dan northeurope untuk Eropa Utara). Untuk mengambil daftar wilayah Azure saat ini beserta nama dan nama tampilannya, gunakan az account list-locations -o table.
Pemerintahan
AI + Pembelajaran Mesin
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Layanan Azure AI (Microsoft.CognitiveServices/accounts) | akun | privatelink.cognitiveservices.azure.us | cognitiveservices.azure.us |
| Azure Pembelajaran Mesin (Microsoft.MachineLearningServices/workspaces) | amlworkspace | privatelink.api.ml.azure.us privatelink.notebooks.usgovcloudapi.net |
api.ml.azure.us notebooks.usgovcloudapi.net instances.azureml.us aznbcontent.net inference.ml.azure.us |
Analitik
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Event Hubs (Microsoft.EventHub/namespaces) | namespace | privatelink.servicebus.usgovcloudapi.net | servicebus.usgovcloudapi.net |
| Azure Synapse Analytics (Microsoft.Synapse/workspaces) | Sql | privatelink.sql.azuresynapse.usgovcloudapi.net | sql.azuresynapse.usgovcloudapi.net |
| Azure Synapse Analytics (Microsoft.Synapse/workspaces) | SqlOnDemand | privatelink.sql.azuresynapse.usgovcloudapi.net | {workspaceName}-ondemand.sql.azuresynapse.usgovcloudapi.net |
| Azure Synapse Analytics (Microsoft.Synapse/workspaces) | Dev | privatelink.dev.azuresynapse.usgovcloudapi.net | dev.azuresynapse.usgovcloudapi.net |
| Azure Synapse Studio (Microsoft.Synapse/privateLinkHubs) | Web | privatelink.azuresynapse.usgovcloudapi.net | azuresynapse.usgovcloudapi.net |
| Azure Data Factory (Microsoft.DataFactory/factories) | dataFactory | privatelink.datafactory.azure.us | datafactory.azure.us |
| Azure Data Factory (Microsoft.DataFactory/factories) | portal | privatelink.adf.azure.us | adf.azure.us |
| Azure HDInsight (Microsoft.HDInsight) | headnode gateway |
privatelink.azurehdinsight.us | azurehdinsight.us |
| Azure Databricks (Microsoft.Databricks/workspaces) | browser_authentication databricks_ui_api |
privatelink.databricks.azure.us | databricks.azure.us |
Compute
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Batch (Microsoft.Batch/batchAccounts) | batchAccount | privatelink.batch.usgovcloudapi.net | {regionName}.batch.usgovcloudapi.net |
| Azure Batch (Microsoft.Batch/batchAccounts) | nodeManagement | privatelink.batch.usgovcloudapi.net | {regionName}.service.batch.usgovcloudapi.net |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/workspaces) | global | privatelink-global.wvd.azure.us | wvd.azure.us |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/workspaces Microsoft.DesktopVirtualization/hostpools) |
memberi makan koneksi |
privatelink.wvd.azure.us | wvd.azure.us |
Kontainer
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Container Registry (Microsoft.ContainerRegistry/registries) | registri | privatelink.azurecr.us {regionName}.privatelink.azurecr.us |
azurecr.us {regionName}.azurecr.us |
Database
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure SQL Database (Microsoft.Sql/servers) | sqlServer | privatelink.database.usgovcloudapi.net | database.usgovcloudapi.net |
| Azure SQL Managed Instance (Microsoft.Sql/managedInstances) | managedInstance | privatelink.{dnsPrefix}.database.usgovcloudapi.net | {instanceName}.{dnsPrefix}.database.usgovcloudapi.net |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Sql | privatelink.documents.azure.us | documents.azure.us |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | MongoDB | privatelink.mongo.cosmos.azure.us | mongo.cosmos.azure.us |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Cassandra | privatelink.cassandra.cosmos.azure.us | cassandra.cosmos.azure.us |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Gremlin | privatelink.gremlin.cosmos.azure.us | gremlin.cosmos.azure.us |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Tabel | privatelink.table.cosmos.azure.us | table.cosmos.azure.us |
| Azure Database for PostgreSQL - Server tunggal (Microsoft.DBforPostgreSQL/servers) | postgresqlServer | privatelink.postgres.database.usgovcloudapi.net | postgres.database.usgovcloudapi.net |
| Azure Database for PostgreSQL - Server fleksibel (Microsoft.DBforPostgreSQL/flexibleServers) | postgresqlServer | privatelink.postgres.database.usgovcloudapi.net | postgres.database.usgovcloudapi.net |
| Azure Database for MySQL - Server Tunggal (Microsoft.DBforMySQL/servers) | mysqlServer | privatelink.mysql.database.usgovcloudapi.net | mysql.database.usgovcloudapi.net |
| Azure Database for MySQL - Server Fleksibel (Microsoft.DBforMySQL/flexibleServers) | mysqlServer | privatelink.mysql.database.usgovcloudapi.net | mysql.database.usgovcloudapi.net |
| Azure Database for MariaDB (Microsoft.DBforMariaDB/servers) | mariadbServer | privatelink.mariadb.database.usgovcloudapi.net | mariadb.database.usgovcloudapi.net |
| Azure Cache for Redis (Microsoft.Cache/Redis) | redisCache | privatelink.redis.cache.usgovcloudapi.net | redis.cache.usgovcloudapi.net |
Hibrid + multicloud
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|
Integrasi
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Bus Layanan (Microsoft.ServiceBus/namespaces) | namespace | privatelink.servicebus.usgovcloudapi.net | servicebus.usgovcloudapi.net |
| Azure Event Grid (Microsoft.EventGrid/topics) | topik | privatelink.eventgrid.azure.us | eventgrid.azure.us |
| Azure Event Grid (Microsoft.EventGrid/domains) | domain | privatelink.eventgrid.azure.us | eventgrid.azure.us |
| Azure Health Data Services (Microsoft.HealthcareApis/workspaces) | healthcareworkspace | privatelink.dicom.azurehealthcareapis.us privatelink.fhir.azurehealthcareapis.us privatelink.workspace.azurehealthcareapis.us |
dicom.azurehealthcareapis.us fhir.azurehealthcareapis.us workspace.azurehealthcareapis.us |
Internet of Things (IoT)
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure IoT Hub (Microsoft.Devices/IotHubs) | iotHub | privatelink.azure-devices.us privatelink.servicebus.windows.us1 |
azure-devices.us servicebus.usgovcloudapi.net |
| Azure IoT Hub Device Provisioning Service (Microsoft.Devices/ProvisioningServices) | iotDps | privatelink.azure-devices-provisioning.us | azure-devices-provisioning.us |
Media
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|
Manajemen dan Tata Kelola
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Automation / (Microsoft.Automation/automationAccounts) | Webhook DSCAndHybridWorker |
privatelink.azure-automation.us | azure-automation.us |
| Azure Backup (Microsoft.RecoveryServices/vaults) | AzureBackup | privatelink. {regionCode}.backup.windowsazure.us | {regionCode}.backup.windowsazure.us |
| Azure Site Recovery (Microsoft.RecoveryServices/vaults) | AzureSiteRecovery | privatelink.siterecovery.windowsazure.us | {regionCode}.siterecovery.windowsazure.us |
| Azure Monitor (Microsoft.Insights/privateLinkScopes) | AzureMonitor | privatelink.monitor.azure.us privatelink.adx.monitor.azure.us privatelink.oms.opinsights.azure.us privatelink.ods.opinsights.azure.us privatelink.agentsvc.azure-automation.us privatelink.blob.core.usgovcloudapi.net |
monitor.azure.us adx.monitor.azure.us oms.opinsights.azure.us ods.opinsights.azure.us agentsvc.azure-automation.us blob.core.usgovcloudapi.net |
| Microsoft Purview (Microsoft.Purview) | akun | privatelink.purview.azure.us | purview.azure.us |
| Microsoft Purview (Microsoft.Purview) | portal | privatelink.purviewstudio.azure.us | purviewstudio.azure.us purview.azure.com |
Keamanan
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Key Vault (Microsoft.KeyVault/vaults) | vault | privatelink.vaultcore.usgovcloudapi.net | vault.usgovcloudapi.net vaultcore.usgovcloudapi.net |
| Azure App Configuration (Microsoft.AppConfiguration/configurationStores) | configurationStores | privatelink.azconfig.azure.us | azconfig.azure.us |
Penyimpanan
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | blob_secondary blob |
privatelink.blob.core.usgovcloudapi.net | blob.core.usgovcloudapi.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | table_secondary tabel |
privatelink.table.core.usgovcloudapi.net | table.core.usgovcloudapi.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | queue_secondary antrean |
privatelink.queue.core.usgovcloudapi.net | queue.core.usgovcloudapi.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | file_secondary file |
privatelink.file.core.usgovcloudapi.net | file.core.usgovcloudapi.net |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | web_secondary web |
privatelink.web.core.usgovcloudapi.net | web.core.usgovcloudapi.net |
| Azure Data Lake File System Gen2 (Microsoft.Storage/storageAccounts) | dfs_secondary dfs |
privatelink.dfs.core.usgovcloudapi.net | dfs.core.usgovcloudapi.net |
Web
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Search (Microsoft.Search/searchServices) | searchService | privatelink.search.azure.us | search.azure.us |
| Azure Relay (Microsoft.Relay/namespaces) | namespace | privatelink.servicebus.usgovcloudapi.net | servicebus.usgovcloudapi.net |
| Azure Web Apps (Microsoft.Web/sites) | sites | scm.privatelink.azurewebsites.us privatelink.azurewebsites.us |
scm.azurewebsites.us azurewebsites.us |
| Azure Event Hubs (Microsoft.EventHub/namespaces) | namespace | privatelink.servicebus.usgovcloudapi.net | servicebus.usgovcloudapi.net |
Catatan
Dalam teks di atas, {regionCode} mengacu pada kode wilayah (misalnya, eus untuk US Timur dan ne untuk Eropa Utara). Lihat daftar berikut untuk kode wilayah:
{regionName} mengacu pada nama wilayah lengkap (misalnya, eastus untuk US Timur dan northeurope untuk Eropa Utara). Untuk mengambil daftar wilayah Azure saat ini beserta nama dan nama tampilannya, gunakan az account list-locations -o table.
Tiongkok
AI + Pembelajaran Mesin
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Pembelajaran Mesin (Microsoft.MachineLearningServices/workspaces) | amlworkspace | privatelink.api.ml.azure.cn privatelink.notebooks.chinacloudapi.cn |
api.ml.azure.cn notebooks.chinacloudapi.cn instances.azureml.cn aznbcontent.net inference.ml.azure.cn |
Analitik
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Data Factory (Microsoft.DataFactory/factories) | dataFactory | privatelink.datafactory.azure.cn | datafactory.azure.cn |
| Azure Data Factory (Microsoft.DataFactory/factories) | portal | privatelink.adf.azure.cn | adf.azure.cn |
| Azure HDInsight (Microsoft.HDInsight) | headnode gateway |
privatelink.azurehdinsight.cn | azurehdinsight.cn |
| Azure Data Explorer (Microsoft.Kusto/Clusters) | klaster | privatelink. {regionName}.kusto.windows.cn | {regionName}.kusto.windows.cn |
Compute
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Batch (Microsoft.Batch/batchAccounts) | batchAccount | privatelink.batch.chinacloudapi.cn | {region}.batch.chinacloudapi.cn |
| Azure Batch (Microsoft.Batch/batchAccounts) | nodeManagement | privatelink.batch.chinacloudapi.cn | {region}.service.batch.chinacloudapi.cn |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/workspaces) | global | privatelink-global.wvd.azure.cn | wvd.azure.cn |
| Azure Virtual Desktop (Microsoft.DesktopVirtualization/workspaces dan Microsoft.DesktopVirtualization/hostpools) | koneksi umpan |
privatelink.wvd.azure.cn | wvd.azure.cn |
Kontainer
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|
Database
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure SQL Database (Microsoft.Sql/servers) | sqlServer | privatelink.database.chinacloudapi.cn | database.chinacloudapi.cn |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Sql | privatelink.documents.azure.cn | documents.azure.cn |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | MongoDB | privatelink.mongo.cosmos.azure.cn | mongo.cosmos.azure.cn |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Cassandra | privatelink.cassandra.cosmos.azure.cn | cassandra.cosmos.azure.cn |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Gremlin | privatelink.gremlin.cosmos.azure.cn | gremlin.cosmos.azure.cn |
| Azure Cosmos DB (Microsoft.DocumentDB/databaseAccounts) | Tabel | privatelink.table.cosmos.azure.cn | table.cosmos.azure.cn |
| Azure Database for PostgreSQL - Server tunggal (Microsoft.DBforPostgreSQL/servers) | postgresqlServer | privatelink.postgres.database.chinacloudapi.cn | postgres.database.chinacloudapi.cn |
| Azure Database for PostgreSQL - Server fleksibel (Microsoft.DBforPostgreSQL/flexibleServers) | postgresqlServer | privatelink.postgres.database.chinacloudapi.cn | postgres.database.chinacloudapi.cn |
| Azure Database for MySQL - Server Tunggal (Microsoft.DBforMySQL/servers) | mysqlServer | privatelink.mysql.database.chinacloudapi.cn | mysql.database.chinacloudapi.cn |
| Azure Database for MySQL - Server Fleksibel (Microsoft.DBforMySQL/flexibleServers) | mysqlServer | privatelink.mysql.database.chinacloudapi.cn | mysql.database.chinacloudapi.cn |
| Azure Database for MariaDB (Microsoft.DBforMariaDB/servers) | mariadbServer | privatelink.mariadb.database.chinacloudapi.cn | mariadb.database.chinacloudapi.cn |
| Azure Cache for Redis (Microsoft.Cache/Redis) | redisCache | privatelink.redis.cache.chinacloudapi.cn | redis.cache.chinacloudapi.cn |
Hibrid + multicloud
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|
Integrasi
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Bus Layanan (Microsoft.ServiceBus/namespaces) | namespace | privatelink.servicebus.chinacloudapi.cn | servicebus.chinacloudapi.cn |
Internet of Things (IoT)
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure IoT Hub (Microsoft.Devices/IotHubs) | iotHub | privatelink.azure-devices.cn privatelink.servicebus.chinacloudapi.cn 1 |
azure-devices.cn servicebus.chinacloudapi.cn |
| Azure IoT Hub Device Provisioning Service (Microsoft.Devices/ProvisioningServices) | iotDps | privatelink.azure-devices-provisioning.cn | azure-devices-provisioning.cn |
Media
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|
Manajemen dan Tata Kelola
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Automation / (Microsoft.Automation/automationAccounts) | Webhook DSCAndHybridWorker |
privatelink.azure-automation.cn | azure-automation.cn |
Keamanan
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Key Vault (Microsoft.KeyVault/vaults) | vault | privatelink.vaultcore.azure.cn | vaultcore.azure.cn |
Penyimpanan
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | blob_secondary blob |
privatelink.blob.core.chinacloudapi.cn | blob.core.chinacloudapi.cn |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | table_secondary tabel |
privatelink.table.core.chinacloudapi.cn | table.core.chinacloudapi.cn |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | queue_secondary antrean |
privatelink.queue.core.chinacloudapi.cn | queue.core.chinacloudapi.cn |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | file_secondary file |
privatelink.file.core.chinacloudapi.cn | file.core.chinacloudapi.cn |
| Akun penyimpanan (Microsoft.Storage/storageAccounts) | web_secondary web |
privatelink.web.core.chinacloudapi.cn | web.core.chinacloudapi.cn |
| Azure Data Lake File System Gen2 (Microsoft.Storage/storageAccounts) | dfs_secondary dfs |
privatelink.dfs.core.chinacloudapi.cn | dfs.core.chinacloudapi.cn |
| Azure File Sync (Microsoft.StorageSync/storageSyncServices) | Afs | privatelink.afs.azure.cn | afs.azure.cn |
Web
| Jenis sumber daya tautan privat | Subsumber | Nama zona DNS Privat | Penerus zona DNS Publik |
|---|---|---|---|
| Azure Event Hubs (Microsoft.EventHub/namespaces) | namespace | privatelink.servicebus.chinacloudapi.cn | servicebus.chinacloudapi.cn |
| Azure Relay (Microsoft.Relay/namespaces) | namespace | privatelink.servicebus.chinacloudapi.cn | servicebus.chinacloudapi.cn |
| Azure Web Apps (Microsoft.Web/sites) | sites | privatelink.chinacloudsites.cn | chinacloudsites.cn |
| SignalR (Microsoft.SignalRService/SignalR) | signalR | privatelink.signalr.azure.cn | service.signalr.azure.cn |
1Untuk digunakan dengan titik akhir Event Hub bawaan IoT Hub. Untuk mempelajari selengkapnya, lihat dukungan tautan privat untuk titik akhir bawaan IoT Hub
Langkah selanjutnya
Untuk mempelajari selengkapnya tentang integrasi dan skenario DNS untuk Azure Private Link, lanjutkan ke artikel berikut ini: