简体繁体 English

要列入白名单的 Azure 容器注册表 IP 范围是多少？

[英]What is the Azure Container Registry IP range to whitelist?

原文 2020-09-03 22:48:21 3 1 azure/ azure-container-registry

I have an Azure App Service which uses an Azure container registry (SKU: Basic).我有一个 Azure 应用服务，它使用 Azure 容器注册表（SKU：基本）。 I would like to put in networking restrictions under SCM portion.我想在 SCM 部分下设置网络限制。

Where can I find the Azure Container Registry IP range to whitelist?在哪里可以找到要列入白名单的 Azure 容器注册表 IP 范围？

1 个解决方案

If your organization has policies to allow access only to specific IP addresses or address ranges, download Azure IP Ranges and Service Tags – Public Cloud如果您的组织制定了仅允许访问特定 IP 地址或地址范围的策略，请下载Azure IP 范围和服务标签 – 公共云

To find the ACR REST Endpoint IP ranges, search for “AzureContainerRegistry“ in the JSON file.要查找 ACR REST 端点 IP 范围，请在 JSON 文件中搜索“AzureContainerRegistry”。 Also, you can filter for Specific Regions.此外，您可以过滤特定区域。

Note笔记

IP address ranges for Azure services can change, and updates are published weekly. Azure 服务的 IP 地址范围可能会更改，并且每周都会发布更新。 Download the JSON file regularly, and make necessary updates in your access rules.定期下载 JSON 文件，并在访问规则中进行必要的更新。 If your scenario involves configuring network security group rules in an Azure virtual network or you use Azure Firewall, use the AzureContainerRegistry service tag instead.如果您的方案涉及在 Azure 虚拟网络中配置网络安全组规则，或者您使用 Azure 防火墙，请改用AzureContainerRegistry服务标记。

For more details, you could refer to configure rules to access an Azure container registry behind a firewall .有关更多详细信息，您可以参考配置规则以访问防火墙后面的 Azure 容器注册表。