DEV Community

Sarah Lean 🏴󠁧󠁢
Sarah Lean 🏴󠁧󠁢

Posted on • Originally published at techielass.com

1

Check if network connectivity for Azure Connected Machine Agent is blocked - Azure Arc

Check if network connectivity for Azure Connected Machine Agent is blocked - Azure Arc

To onboard a server to Azure Arc and utilise its capabilities you need to install the Azure Connected Machine agent.

The Azure Connected Machine agent communicates from your non-Azure environment to Azure using several URLs. For more information on those URLs please refer to the official documentation.

If outbound connectivity from your environment is restricted by your firewall or proxy server, you need to ensure that the correct URLs are not blocked.

At the very minimum, the agent needs to be able to communicate with URLs such as:

  • *.guestconfiguration.azure.com (Extension management and guest configuration services)
  • *his.arc.azure.com (Metadata and Hybrid Identity Service)
  • login.microsoftonline.com (Microsoft Entra ID)
  • login.windows.net (Microsoft Entra ID)
  • pas.windows.net (Microsoft Entra ID)
  • management.azure.com (Azure Resource Manager)

To check if network connectivity for the Azure Connected Machine agent is blocked you can use the azcmagent CLI tool.

The azcmagent CLI is installed with the Azure Connected Machine agent and controls actions specific to the server where it's running.

One of the switches available with the azcmagent is check. This runs a series of network connectivity checks to see if the agent can successfully communicate with required network endpoints.

Check Azure Arc connectivity using public endpoints

To use the azcmagent CLI tool log onto a server that has the Azure Connected Machine agent installed on it.

Launch a command prompt or PowerShell terminal window.

Type in

azcmagent check --location “ukwest”

Enter fullscreen mode Exit fullscreen mode

The command outputs a table showing connectivity test results for each required endpoint. In this example, all URLs are reachable and are going directly to the URLs.

Check if network connectivity for Azure Connected Machine Agent is blocked - Azure Arc
Azcmagent check output

💡

If you are using a different Azure region, ensure you input the correct name for your region. If you are unsure of the region name you can run the command az account list-locations -o table from Azure CLI to get a list.

Check Azure Arc connectivity using private endpoints

If you are using private endpoints for connectivity you can use the following command to check:

azcmagent check --location "useast" --enable-pls-check

Enter fullscreen mode Exit fullscreen mode

💡

If you are using a different Azure region, ensure you input the correct name for your region. If you are unsure of the region name you can run the command az account list-locations -o table from Azure CLI to get a list.

Check Azure Arc connectivity using a proxy

If you are using a proxy to route traffic the command you would check network connectivity is the same as if you are using public endpoints.

azcmagent check –location “westeurope”

Enter fullscreen mode Exit fullscreen mode

Check if network connectivity for Azure Connected Machine Agent is blocked - Azure Arc
azcmagent output

In this example, you can see from the table the traffic is going through a proxy server and some of the URLs are unreachable.

Conclusion

In conclusion, ensuring seamless connectivity for the Azure Connected Machine agent is crucial for a successful onboarding process to Azure Arc.

This involves verifying the accessibility of specific URLs through either public or private endpoints, with additional considerations for environments employing proxy servers.

Utilizing the azcmagent CLI tool provides a straightforward means to conduct network connectivity checks, allowing users to address any potential restrictions or blockages, and ensuring a smooth integration of servers into the Azure Arc ecosystem.

Image of Timescale

🚀 pgai Vectorizer: SQLAlchemy and LiteLLM Make Vector Search Simple

We built pgai Vectorizer to simplify embedding management for AI applications—without needing a separate database or complex infrastructure. Since launch, developers have created over 3,000 vectorizers on Timescale Cloud, with many more self-hosted.

Read full post →

Top comments (0)

Image of Docusign

🛠️ Bring your solution into Docusign. Reach over 1.6M customers.

Docusign is now extensible. Overcome challenges with disconnected products and inaccessible data by bringing your solutions into Docusign and publishing to 1.6M customers in the App Center.

Learn more

👋 Kindness is contagious

Engage with a sea of insights in this enlightening article, highly esteemed within the encouraging DEV Community. Programmers of every skill level are invited to participate and enrich our shared knowledge.

A simple "thank you" can uplift someone's spirits. Express your appreciation in the comments section!

On DEV, sharing knowledge smooths our journey and strengthens our community bonds. Found this useful? A brief thank you to the author can mean a lot.

Okay