Eventhub Public IP access

rkum 81 Reputation points
2023-11-30T01:47:56.53+00:00

I m looking for best security practise to configure public access for eventhub and i have 2 options below

  1. Does configuring all networks in eventhub directly allows connections from internet directly to the eventhub.
  2. Is there a way to configure the inbound\outbound connections through the Azure firewall instead of directly accessing from internet.

Any security risk with the option 1 and if so what's the best way to achieve secure access to eventhubs within the network and external network(internet)

Azure Event Hubs
Azure Event Hubs
An Azure real-time data ingestion service.
637 questions
0 comments No comments
{count} votes

Accepted answer
  1. Luis Arias 6,796 Reputation points
    2023-11-30T13:04:43.08+00:00

    Hi rkum,

    Here you can find the network security mechaanism that you can use to protect Azure Event Hub traffic ( https://video2.skills-academy.com/en-us/azure/event-hubs/network-security )

    1. Azure event hub network built in firewall rules here you can setup your Public network acces as Selected networks and manually add Ips or networks IDs to the access list. (Inbound Access)

    Additional information: https://video2.skills-academy.com/en-us/azure/event-hubs/event-hubs-ip-filtering

    1. Bind event hubs to virtual networks This require two step process , first one create a virtual network and a service endpoint for EventHub there (https://video2.skills-academy.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview) and second step is bind the Event hub namespace to a network rule. (Keep the communication on Microsoft backbone)

    Additional information: https://video2.skills-academy.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview https://video2.skills-academy.com/en-us/azure/event-hubs/event-hubs-service-endpoints

    1. Create Private endpoint Here like the before option integrate directly to a vnet, her you can include a more complex network architecture and include Azure firewall if it's needed .

    Additional information: https://video2.skills-academy.com/en-us/azure/private-link/private-link-overview

    After configure these services you will have this path of communication secure: Azure Event Hub <--- Inbound --- Other services Let me know if this is helpfull and if you need additional assitance. Cheers, Luis

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.