{"id":1557,"date":"2019-03-18T00:00:00","date_gmt":"2019-03-18T07:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/azure-container-registry-virtual-network-and-firewall-rules-preview-support"},"modified":"2025-06-18T13:55:43","modified_gmt":"2025-06-18T20:55:43","slug":"azure-container-registry-virtual-network-and-firewall-rules-preview-support","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-container-registry-virtual-network-and-firewall-rules-preview-support\/","title":{"rendered":"Azure Container Registry virtual network and Firewall rules preview support"},"content":{"rendered":"\n

While Azure Container Registry (ACR) supports user and headless-service account authentication<\/a>, customers have expressed their requirements for limiting public endpoint access. Customers can now limit registry access within an Azure Virtual Network (VNet), as well as whitelist IP addresses and ranges for on-premises services.<\/p>\n\n\n\n

VNet and Firewall rules are supported with virtual machines (VM) and Azure Kubernetes Services (AKS).<\/p>\n\n\n\n

Choosing between private and PaaS registries<\/h2>\n\n\n\n

As customers move into production, their security teams have a checklist they apply to production workloads, one of which is limiting all public endpoints. Without VNet support, customers had to choose between standalone products, or OSS projects they could run and manage themselves. This puts a larger burden on the customers to manage the storage, security, scalability, and reliability a production registry requires.<\/p>\n\n\n\n

With VNet and Firewall rules, customers can achieve their security requirements, while benefiting from integrated security, secured at rest, geo-redundant<\/a>, and geo-replicated<\/a> PaaS Container Registry. Thus, freeing up their resources to focus on the unique business problems they face.<\/p>\n\n\n\n

Azure Container Registry PaaS, enabling registry products<\/h2>\n\n\n\n

The newest VNet and Firewall rule capabilities of ACR are just the latest set of capabilities in container lifecycle management. ACR provides core primitives that other registry or CI\/CD products may build upon. Our goal with ACR isn\u2019t to compete with our partners, rather enable them with core cloud capabilities, allow them to focus on the higher level, unique capabilities each offer.<\/p>\n\n\n\n

Getting started<\/h2>\n\n\n\n

Using the Azure CLI, or the Azure portal, customers can follow our documentation for configuring VNet and Firewall rules<\/a>.<\/p>\n\n\n\n

VNet and Firewall rules preview pricing<\/h3>\n\n\n\n

During preview, VNet and Firewall rules will be included in the Azure Container Registry\u2019s Premium Tier.<\/p>\n\n\n\n

Preview and general availability dates<\/h3>\n\n\n\n

As of March 18, 2019, VNet and Firewall rules are available for public preview in all 25 public cloud regions. General availability (GA) will be based on a curve of usage and feedback.<\/p>\n\n\n\n

More information<\/h2>\n\n\n\n