Skip to content

Commit a71cd22

Browse files
committed
Pull commits for update to IoT Edge
1 parent e4028b2 commit a71cd22

1 file changed

Lines changed: 8 additions & 7 deletions

File tree

articles/iot-edge/using-private-link.md

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Use Azure Private Link and Private Endpoints to secure Azure IoT traffic
33
description: Learn how to use IoT Edge while completely isolating your network from the internet traffic using various Azure services such as Azure ExpressRoute, Private Link, and DNS Private Resolver
44
author: sethmanheim
55
ms.author: sethm
6-
ms.date: 07/22/2025
6+
ms.date: 01/29/2026
77
ms.topic: concept-article
88
ms.service: azure-iot-edge
99
services: iot-edge
@@ -32,18 +32,18 @@ Azure Private Link lets you use Azure PaaS services and Azure-hosted customer-ow
3232

3333
Azure DNS Private Resolver lets you query Azure DNS private zones from an on-premises environment and the other way around without deploying VM-based DNS servers. Azure DNS Private Resolver makes it easier to manage both private and public IPs. The DNS forwarding ruleset feature in Azure DNS Private Resolver helps an IoT admin easily configure rules and manage which address an endpoint should resolve. To learn more about Azure DNS Private Resolver, see [What is Azure DNS Private Resolver?](../dns/dns-private-resolver-overview.md).
3434

35-
### Configuring IoT Edge endpoints when using Private Link
35+
### Configure IoT Edge endpoints when using Private Link
3636

37-
When Private Link is enabled, IoT Edge must be configured to use the **private endpoint FQDNs**, not the public service hostnames. If public hostnames are used, IoT Edge modules will fail to connect after public network access is disabled.
37+
When Private Link is enabled, IoT Edge must be configured to use the **private endpoint FQDNs**, not the public service hostnames. If public hostnames are used, IoT Edge modules fail to connect after public network access is disabled.
3838

3939
#### Which hostname should be used?
4040

4141
| Azure service | Public FQDN | Private Link FQDN | What IoT Edge should use |
4242
|---------------|-------------|-------------------|---------------------------|
43-
| IoT Hub | `<hubname>.azure-devices.net` | `<hubname>.privatelink.azure-devices.net` | **Use Private Link FQDN** |
44-
| DPS | `global.azure-devices-provisioning.net` | `global.privatelink.azure-devices-provisioning.net` | **Use Private Link FQDN** |
45-
| Azure Container Registry (ACR) | `<registry>.azurecr.io` | `<registry>.privatelink.azurecr.io` | **Use Private Link FQDN** |
46-
| Storage (Blob) | `<account>.blob.core.windows.net` | `<account>.privatelink.blob.core.windows.net` | **Use Private Link FQDN** |
43+
| IoT Hub | `<hubname>.azure-devices.net` | `<hubname>.privatelink.azure-devices.net` | Use Private Link FQDN |
44+
| DPS | `global.azure-devices-provisioning.net` | `global.privatelink.azure-devices-provisioning.net` | Use Private Link FQDN |
45+
| Azure Container Registry (ACR) | `<registry>.azurecr.io` | `<registry>.privatelink.azurecr.io` | Use Private Link FQDN |
46+
| Storage (Blob) | `<account>.blob.core.windows.net` | `<account>.privatelink.blob.core.windows.net` | Use Private Link FQDN |
4747

4848
#### Example IoT Edge `config.yaml`
4949

@@ -56,6 +56,7 @@ provisioning:
5656
agent:
5757
env:
5858
IOTEDGE_IOTHUBHOSTNAME: "<hubname>.privatelink.azure-devices.net"
59+
```
5960
6061
#### DNS requirement
6162

0 commit comments

Comments
 (0)