Skip to content

Add inbound/outbound rule for Azure #1009

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cYKatherine wants to merge 5 commits into
base: main
Choose a base branch
from
+12 −0
Open

Add inbound/outbound rule for Azure #1009

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
66feae6
Add inbound/outbound rule for Azure
cYKatherine Apr 15, 2026
275d974
Apply suggestion from @genwhittTTD
cYKatherine Apr 15, 2026
95c9963
Apply suggestion from @genwhittTTD
cYKatherine Apr 15, 2026
8f5f380
Change title level
cYKatherine Apr 15, 2026
b27b46f
Change healthcheck to health check
cYKatherine Apr 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions docs/guides/operator-guide-azure-enclave.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,6 +171,18 @@ Follow these steps:
az deployment group create --name vault --resource-group {RESOURCE_GROUP_NAME} --parameters vault.parameters.json --template-file vault.json
```

### Network Security Group Policy

:::note
To avoid passing certificates associated with your domain into the enclave, only inbound HTTP is allowed. Inbound HTTPS is not allowed. This also avoids the extra cost of another secure layer in a network that's already private and internal to your organization.
:::
The following table provides information about supported protocols.
| Port Number | Direction | Protocol | Description |
| ----------- | --------- | -------- | ------ |
| 80 | Inbound | HTTP | Serves all UID2 APIs, including the health check endpoint `/ops/healthcheck`.<br/>When everything is up and running, the endpoint returns HTTP 200 with a response body of `OK`. For details, see [Running the Health Check](#running-the-health-check). |
| 9080 | Inbound | HTTP | Serves Prometheus metrics (`/metrics`). For details, see [Scraping Metrics](#scraping-metrics). |
| 443 | Outbound | HTTPS | Calls the UID2 Core Service and Azure Blob Storage, to download files for opt-out data and key store. |

### Set Up the VPC Network

The next step is to set up the VPC network.
Expand Down
Loading