{"id":60507,"date":"2020-12-14T12:46:18","date_gmt":"2020-12-14T20:46:18","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=60507"},"modified":"2020-12-14T12:46:18","modified_gmt":"2020-12-14T20:46:18","slug":"azure-devops-service-tag-released","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/azure-devops-service-tag-released\/","title":{"rendered":"Azure DevOps Service Tag Released"},"content":{"rendered":"<p>Azure DevOps Services now supports <a href=\"https:\/\/docs.microsoft.com\/azure\/virtual-network\/service-tags-overview\">Azure Service Tags<\/a>!<\/p>\n<p><strong>What problems did customers face without Service Tags?<\/strong><\/p>\n<p>In the past, IP addresses changed when new Azure DevOps systems were added or migrated. Then, customers were unaware of the IP changes and were required to update their on-prem firewalls or Azure NSGs manually.<\/p>\n<p><strong>What are Service Tags?<\/strong><\/p>\n<p>Service Tags are a convenient way for customers to manage their networking configuration to allow traffic from specific Azure services. Now that a service tag has been set up for Azure DevOps Services, customers can easily allow access by adding the tag name <strong><em>AzureDevOps<\/em><\/strong> to their NSGs or firewalls programmatically using Powershell and CLI. The portal will be supported at a later date. Customers may also use the service tag for <a href=\"https:\/\/docs.microsoft.com\/azure\/virtual-network\/service-tags-overview#service-tags-on-premises\">on-prem firewall<\/a> via a JSON file download. Azure Service Tags are supported for inbound connection only from Azure DevOps to customers\u2019 on-prem. Outbound connection from customers\u2019 networks to Azure DevOps is not supported. Customers are still required to allow the Azure Front Door (AFD) IPs provided in the <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/organizations\/security\/allow-list-ip-url?view=azure-devops#ip-addresses-and-range-restrictions\">doc<\/a> for outbound connections. The inbound connection applies to the following scenarios documented <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/organizations\/security\/allow-list-ip-url?view=azure-devops#ip-addresses-and-range-restrictions\">here<\/a>.<\/p>\n<ul>\n<li>Azure DevOps Services connecting to endpoints for <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/service-hooks\/overview?view=azure-devops#what-is-a-service-hook\">Service Hooks<\/a> <\/li>\n<li>Azure DevOps Services connecting to customer-controlled SQL Azure VMs for <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/migrate\/migration-import?view=azure-devops#azure-devops-services-ips\">Data Import<\/a><\/li>\n<li>Azure Pipelines connecting to on-prem source code repositories such as <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/pipelines\/repos\/github-enterprise?view=azure-devops\">GitHub Enterprise<\/a> or <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/pipelines\/repos\/on-premises-bitbucket?view=azure-devops\">BitBucket Server<\/a> <\/li>\n<li>Azure DevOps Services <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/organizations\/audit\/azure-devops-auditing?view=azure-devops&amp;tabs=preview-page\">Audit Streaming<\/a> connecting to on-prem or cloud-based Splunk<\/li>\n<\/li>\n<\/ul>\n<p>The Service Tag does not apply to <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/pipelines\/agents\/hosted?view=azure-devops&amp;tabs=yaml#agent-ip-ranges\">Microsoft Hosted Agents<\/a>. Customers are still required to allow the entire geography for the Microsoft Hosted Agents. If allowing the entire geography is a concern, we recommend using the <a href=\"https:\/\/docs.microsoft.com\/azure\/devops\/pipelines\/agents\/scale-set-agents?view=azure-devops\">Azure Virtual Machine Scale Set Agents<\/a>. The Scale Set Agents are a form of self-hosted agents that can be autoscaled to meet your demands.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Azure DevOps Services now supports Azure Service Tags! What problems did customers face without Service Tags? In the past, IP addresses changed when new Azure DevOps systems were added or migrated. Then, customers were unaware of the IP changes and were required to update their on-prem firewalls or Azure NSGs manually. What are Service Tags? [&hellip;]<\/p>\n","protected":false},"author":19793,"featured_media":45953,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-60507","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops"],"acf":[],"blog_post_summary":"<p>Azure DevOps Services now supports Azure Service Tags! What problems did customers face without Service Tags? In the past, IP addresses changed when new Azure DevOps systems were added or migrated. Then, customers were unaware of the IP changes and were required to update their on-prem firewalls or Azure NSGs manually. What are Service Tags? [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/60507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/19793"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=60507"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/60507\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/45953"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=60507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=60507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=60507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}