Azure Service Bus - Frequently asked questions (FAQ)

Azure Service Bus is an asynchronous messaging cloud platform that enables you to send data between decoupled systems. Azure offers this feature as a service, which means that you don't need to host your own hardware to use it.

A namespace provides a scoping container for addressing Service Bus resources within your application. Creating a namespace is necessary to use Service Bus and is one of the first steps in getting started.

A Service Bus queue is an entity in which messages are stored. Queues are useful when you have multiple applications, or multiple parts of a distributed application that need to communicate with each other. The queue is similar to a distribution center in that multiple products (messages) are received and then sent from that location.

A topic can be visualized as a queue and when using multiple subscriptions, it becomes a richer messaging model; essentially a one-to-many communication tool. This publish/subscribe model (or pub/sub) enables an application that sends a message to a topic with multiple subscriptions to have that message received by multiple applications.

A conventional queue or topic is handled by a single message broker and stored in one messaging store. A partitioned queue, or topic is handled by multiple message brokers and stored in multiple messaging stores. This feature means that the overall throughput of a partitioned queue or topic is no longer limited by the performance of a single message broker or messaging store. Also, a temporary outage of a messaging store doesn't render a partitioned queue or topic unavailable.

Ordering isn't ensured when using partitioned entities. In the event that a partition is unavailable, you can still send and receive messages from the other partitions.

Azure Service Bus standard tier utilizes Azure SQL Database for its backend storage layer. For all regions in Azure operated by 21Vianet, the database backup is hosted in a different region (usually the Azure paired region).

Azure Service Bus premium tier stores metadata and data in regions that you select. When geo-disaster recovery is set up for an Azure Service Bus premium namespace, the metadata is copied over to the secondary region that you select.

You can use the following protocols with Azure Service Bus to send and receive messages:

• Advanced Message Queuing Protocol 1.0 (AMQP)
• Hypertext Transfer Protocol 1.1 with TLS (HTTPS)

See the following table for the outbound TCP ports you need to open to use these protocols to communicate with Azure Service Bus:

The HTTPS port is generally required for outbound communication also when AMQP is used over port 5671, because several management operations performed by the client SDKs and the acquisition of tokens from Microsoft Entra ID (when used) run over HTTPS.

The official Azure SDKs generally use the AMQP protocol for sending and receiving messages from Service Bus.

The AMQP-over-WebSockets protocol option runs over port TCP 443 just like the HTTP/REST API, but is otherwise functionally identical with plain AMQP. This option has higher initial connection latency because of extra handshake roundtrips and slightly more overhead as tradeoff for sharing the HTTPS port. If this mode is selected, TCP port 443 is sufficient for communication. The following options allow selecting the AMQP WebSockets mode.

Yes. It does. See the following articles:

• Use JMS 2.0 API with Azure Service Bus Premium
• JMS developer guide

To find the right IP addresses to add to allowlist for your connections, follow these steps:

1. Run the following command from a command prompt:

   nslookup <YourNamespaceName>.servicebus.chinacloudapi.cn
   

2. Note down the IP address returned in Non-authoritative answer.

If you use the zone redundancy for your namespace, you need to do a few extra steps:

1. First, you run nslookup on the namespace.

   nslookup <yournamespace>.servicebus.chinacloudapi.cn
   

2. Note down the name in the non-authoritative answer section, which is in one of the following formats:

   <name>-s1.chinacloudapp.cn
   <name>-s2.chinacloudapp.cn
   <name>-s3.chinacloudapp.cn
   

3. Run nslookup for each one with suffixes s1, s2, and s3 to get the IP addresses of all three instances running in three availability zones,

   Note

   The IP address returned by the nslookup command isn't a static IP address. It remains constant until the underlying deployment is deleted or moved to a different cluster, however using IN addresses is not recommended or supported, and you will need to keep track of changes to the IP addresses.

We don't log the IP addresses of clients sending or receiving messages to/from your namespace. Regenerate keys so that all existing clients will fail to authenticate and review Azure role-based access control (Azure RBAC)) settings to ensure that only allowed users or applications have access to the namespace.

If you're using a premium namespace, use IP filtering, virtual network service endpoints, and private endpoints to limit access to the namespace.

See Best practices for performance improvements using Service Bus - this article describes how to optimize performance when exchanging messages.

The following properties of a queue and topic are immutable. Consider this limitation when you create your entities, as these properties can't be modified without creating a new replacement entity.

• Partitioning
• Sessions
• Duplicate detection
• Express entity

Pricing

This section answers some frequently asked questions about the Service Bus pricing structure.

The Service Bus pricing and billing article explains the billing meters in Service Bus. For specific information about Service Bus pricing options, see Service Bus pricing details.

You can also visit the Azure Support FAQs for general Azure pricing information.

For complete information about Service Bus pricing, see Service Bus pricing details. In addition to the prices noted, you are charged for associated data transfers for egress outside of the data center in which your application is provisioned.

Any data transfer within a given Azure region is provided at no charge, as well as any inbound data transfer. Data transfer outside a region is subject to egress charges, which can be found here.

No. Service Bus doesn't charge for storage. However, there's a quota limiting the maximum amount of data that can be persisted per queue/topic. See the next FAQ.

Azure Service Bus recently upgraded the billing components. Because of this change, if you have a Service Bus Standard namespace, you might see line items for the resource /subscriptions/<azure_subscription_id>/resourceGroups/$system/providers/Microsoft.ServiceBus/namespaces/$system under resource group $system.

These charges represent the base charge per Azure subscription that has provisioned a Service Bus Standard namespace.

It's important to note that these charges aren't new, that is, they existed in the previous billing model too. The only change is that they're now listed under $system. It's done because of constraints in the new billing system that groups subscription level charges, not tied to a specific resource, under the $system resource ID.

Quotas

For a list of Service Bus limits and quotas, see the Service Bus quotas overview.

Service Bus messaging services (queues and topics/subscriptions) allow application to send messages of size up to 256 KB (standard tier) or 100 MB (premium tier). If you're dealing with messages of size greater than the allowed size, use the claim check pattern described in this blog post.

When you delete a namespace from a subscription, wait for 4 hours before recreating it with the same name in another subscription. Otherwise, you might receive the following error message: Namespace already exists.

For a list of possible Service Bus exceptions, see Exceptions overview.

Shared Access Signatures are an authentication mechanism based on SHA-256 secure hashes or URIs. For information about how to generate your own signatures in Node.js, PHP, Java, Python, and C#, see the Shared Access Signatures article.

You can move a namespace from one Azure subscription to another, using either the Azure portal or PowerShell commands. To execute the operation, the namespace must already be active. The user executing the commands must be an administrator on both the source and target subscriptions.

To use the Azure portal to migrate Service Bus namespaces to another subscription, follow the directions here.

The following sequence of PowerShell commands moves a namespace from one Azure subscription to another. To execute this operation, the namespace must already be active, and the user running the PowerShell commands must be an administrator on both the source and target subscriptions.

# Create a new resource group in target subscription
Select-AzSubscription -SubscriptionId 'ffffffff-ffff-ffff-ffff-ffffffffffff'
New-AzResourceGroup -Name 'targetRG' -Location 'China East'

# Move namespace from source subscription to target subscription
Select-AzSubscription -SubscriptionId 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa'
$res = Find-AzResource -ResourceNameContains mynamespace -ResourceType 'Microsoft.ServiceBus/namespaces'
Move-AzResource -DestinationResourceGroupName 'targetRG' -DestinationSubscriptionId 'ffffffff-ffff-ffff-ffff-ffffffffffff' -ResourceId $res.ResourceId

Is it possible to disable TLS 1.0 or 1.1 on Service Bus namespaces?

Yes, you can disable TLS 1.0 or 1.1 on Service Bus namespaces by setting the minimum TLS version. For more information, see Enforce a minimum required version of Transport Layer Security (TLS) for requests to a Service Bus namespace.

Next steps

To learn more about Service Bus, see the following articles:

• Introducing Azure Service Bus Premium (blog post)
• Service Bus overview
• Get started with Service Bus queues