如何将工作区用于自定义 DNS 服务器How to use your workspace with a custom DNS server

将 Azure 机器学习和虚拟网络一起使用时,有几种方法可用于处理 DNS 名称解析When using Azure Machine Learning with a virtual network, there are several ways to handle DNS name resolution. 默认情况下,Azure 会自动处理工作区和专用终结点的名称解析。By default, Azure automatically handles name resolution for your workspace and private endpoint. 如果改为使用自己的自定义 DNS server_,需要手动为工作区创建 DNS 条目。If you instead use your own custom DNS server _, you must manually create DNS entries for the workspace.

重要

本文仅介绍如何查找这些条目的完全限定域名 (FQDN) 和 IP 地址,但不包括有关如何配置这些内容的 DNS 记录的信息。This article only covers how to find the fully qualified domain name (FQDN) and IP addresses for these entries it does NOT provide information on configuring the DNS records for these items. 请参阅 DNS 文档获取如何添加记录的信息。Consult the documentation for your DNS software for information on how to add records.

先决条件Prerequisites

正在使用的 FQDNFQDNs in use

以下列表包含工作区使用的完全限定域名 (FQDN):The following list contains the fully qualified domain names (FQDN) used by your workspace:

  • <workspace-GUID>.workspace.<region>.api.azureml.ms

  • <workspace-GUID>.workspace.<region>.experiments.azureml.net

  • <workspace-GUID>.workspace.<region>.modelmanagement.azureml.net

  • <workspace-GUID>.workspace.<region>.aether.ms

  • ml-<workspace-name>-<region>-<workspace-guid>.notebooks.azure.ml

  • 如果创建计算实例,还需要使用工作区专用终结点的专用 IP 来添加 <instance-name>.<region>.instances.azureml.ms 的条目。If you create a compute instance, you must also add an entry for <instance-name>.<region>.instances.azureml.ms with the private IP of the workspace private endpoint.

    备注

    只能从虚拟网络内访问计算实例。Compute instances can be accessed only from within the virtual network.

这些 FQDN 正在所有其他区域中使用These FQDNs are in use in all other regions

以下列表包含工作区使用的完全限定域名 (FQDN):The following list contains the fully qualified domain names (FQDN) used by your workspace:

  • <workspace-GUID>.workspace.<region>.cert.api.azureml.ms

  • <workspace-GUID>.workspace.<region>.api.azureml.ms

  • ml-<workspace-name>-<region>-<workspace-guid>.notebooks.azure.net

  • <instance-name>.<region>.instances.azureml.ms

    备注

    只能从虚拟网络内访问计算实例。Compute instances can be accessed only from within the virtual network.

查找 IP 地址Find the IP addresses

若要在 VNet 中查找 FQDN 的内部 IP 地址,请使用以下方法之一:To find the internal IP addresses for the FQDNs in the VNet, use one of the following methods:

备注

根据你的配置,完全限定的域名和 IP 地址会有所不同。The fully qualified domain names and IP addresses will be different based on your configuration. 例如,域名中的 GUID 值将特定于你的工作区。For example, the GUID value in the domain name will be specific to your workspace.

az network private-endpoint show --endpoint-name <endpoint> --resource-group <resource-group> --query 'customDnsConfigs[*].{FQDN: fqdn, IPAddress: ipAddresses[0]}' --output table

所有方法返回的信息是相同的;资源的 FQDN 和专用 IP 地址的列表。The information returned from all methods is the same; a list of the FQDN and private IP address for the resources.

FQDNFQDN IP 地址IP Address
fb7e20a0-8891-458b-b969-55ddb3382f51.workspace.eastus.api.azureml.ms 10.1.0.5
ml-myworkspace-eastus-fb7e20a0-8891-458b-b969-55ddb3382f51.notebooks.azure.net 10.1.0.6

重要

工作区需要的某些 FQDN 未显示在专用终结点显示的列表中。Some FQDNs are not shown in listed by the private endpoint, but are required by the workspace. 下表列出了这些 FQDN,还需要将其添加到 DNS 服务器和/或 Azure 专用 DNS 区域:These FQDNs are listed in the following table, and must also be added to your DNS server and/or an Azure Private DNS Zone:

  • <workspace-GUID>.workspace.<region>.experiments.azureml.net
  • <workspace-GUID>.workspace.<region>.modelmanagement.azureml.net
  • <workspace-GUID>.workspace.<region>.aether.ms
  • 如果你有一个计算实例,请使用 <instance-name>.<region>.instances.azureml.ms,其中 <instance-name> 是计算实例的名称。If you have a compute instance, use <instance-name>.<region>.instances.azureml.ms, where <instance-name> is the name of your compute instance. 请使用工作区专用终结点的专用 IP 地址。Please use private IP address of workspace private endpoint. 请注意,只能从虚拟网络内访问计算实例。Please note compute instance can be accessed only from within the virtual network.

对于所有这些 IP 地址,请使用与从之前步骤中返回的 *.api.azureml.ms 项相同的地址。For all of these IP address, use the same address as the *.api.azureml.ms entries returned from the previous steps.