✔️ Applies to: Azure Blob Storage, Azure Data Lake Storage
✖️ Doesn't apply to: Azure Files (Microsoft.Storage or Microsoft.FileShares)
This article describes how you can configure the network routing preference and route-specific endpoints for your storage account.
The network routing preference specifies how network traffic is routed to your account from clients over the internet. Route-specific endpoints are new endpoints that Azure Storage creates for your storage account. These endpoints route traffic over a desired path without changing your default routing preference. To learn more, see Network routing preference for Azure Storage.
For Azure Files, see Configure routing preference. Storage accounts that contain Azure file shares use the same setting, but the Azure Files article describes considerations for Azure Files. If your storage account contains or will contain Azure file shares, don't change the routing preference to Internet routing. The default option, Microsoft routing, works with all Azure Files configurations.
By default, the routing preference for the public endpoint of the storage account is set to Microsoft global network. You can choose between the Microsoft global network and Internet routing as the default routing preference for the public endpoint of your storage account. To learn more about the difference between these two types of routing, see Network routing preference for Azure Storage.
To change your routing preference to Internet routing:
Sign in to the Azure portal.
Go to your storage account in the portal.
Under Security + networking, select Networking.
In the Network routing tab, set the Routing preference to Internet routing.
Select Save.
Sign in to your Azure subscription with the Connect-AzAccount command and follow the on-screen directions to authenticate.
Connect-AzAccount
If your identity is associated with more than one subscription, set your active subscription to the subscription of the storage account that hosts your static website.
$context = Get-AzSubscription -SubscriptionId <subscription-id>
Set-AzContext $context
Replace the <subscription-id> placeholder value with the ID of your subscription.
To change your routing preference to Internet routing, use the Set-AzStorageAccount command and set the --routing-choice parameter to InternetRouting.
Set-AzStorageAccount -ResourceGroupName <resource-group-name> `
-AccountName <storage-account-name> `
-RoutingChoice InternetRouting
Replace the <resource-group-name> placeholder value with the name of the resource group that contains the storage account.
Replace the <storage-account-name> placeholder value with the name of your storage account.
Sign in to your Azure subscription.
To launch Azure Cloud Shell, sign in to the Azure portal.
To sign in to your local installation of the CLI, run the az login command:
az login
If your identity is associated with more than one subscription, set your active subscription to the subscription of the storage account that hosts your static website.
az account set --subscription <subscription-id>
Replace the <subscription-id> placeholder value with the ID of your subscription.
To change your routing preference to Internet routing, use the az storage account update command and set the --routing-choice parameter to InternetRouting.
az storage account update --name <storage-account-name> --routing-choice InternetRouting
Replace the <storage-account-name> placeholder value with the name of your storage account.
You can also configure a route-specific endpoint. For example, you can set the routing preference for the default endpoint to Internet routing, and then publish a route-specific endpoint that enables traffic between clients on the internet and your storage account to be routed via the Microsoft global network.
This preference affects only the route-specific endpoint. This preference doesn't affect your default routing preference.
Go to your storage account in the portal.
Under Security + networking, select Networking.
In the Network routing tab, under Publish route-specific endpoints, choose the routing preference for your route-specific endpoint, and then select Save.
The following image shows the Microsoft network routing option selected.
To configure a route-specific endpoint, use the Set-AzStorageAccount command.
To create a route-specific endpoint that uses the Microsoft network routing preference, set the -PublishMicrosoftEndpoint parameter to true.
To create a route-specific endpoint that uses the Internet routing preference, set the -PublishInternetEndpoint parameter to true.
The following example creates a route-specific endpoint that uses the Microsoft network routing preference.
Set-AzStorageAccount -ResourceGroupName <resource-group-name> `
-AccountName <storage-account-name> `
-PublishMicrosoftEndpoint $true
Replace the <resource-group-name> placeholder value with the name of the resource group that contains the storage account.
Replace the <storage-account-name> placeholder value with the name of your storage account.
To configure a route-specific endpoint, use the az storage account update command.
To create a route-specific endpoint that uses the Microsoft network routing preference, set the --publish-microsoft-endpoints parameter to true.
To create a route-specific endpoint that uses the Internet routing preference, set the --publish-internet-endpoints parameter to true.
The following example creates a route-specific endpoint that uses the Microsoft network routing preference.
az storage account update --name <storage-account-name> --publish-microsoft-endpoints true
Replace the <storage-account-name> placeholder value with the name of your storage account.
Find the endpoint name for a route-specific endpoint
If you configured a route-specific endpoint, you can find the endpoint in the properties of your storage account.
Under Settings, select Endpoints.
The Microsoft network routing endpoint is shown for each service that supports routing preferences. The following image shows an example.
To print the endpoints to the console, use the PrimaryEndpoints property of the storage account object.
Get-AzStorageAccount -ResourceGroupName <resource-group-name> -Name <storage-account-name>
write-Output $StorageAccount.PrimaryEndpoints
Replace the <resource-group-name> placeholder value with the name of the resource group that contains the storage account.
Replace the <storage-account-name> placeholder value with the name of your storage account.
To print the endpoints to the console, use the az storage account show command.
az storage account show -g <resource-group-name> -n <storage-account-name>
Replace the <resource-group-name> placeholder value with the name of the resource group that contains the storage account.
Replace the <storage-account-name> placeholder value with the name of your storage account.
See also
