Azure Proactive Resiliency Library v2
Tools Glossary GitHub GitHub Issues Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

namespaces

Summary

RecommendationImpactCategoryAutomation AvailableIn Azure Advisor
Enable Availability Zones for Service Bus namespacesHighHigh AvailabilityNoNo
Enable auto-scale for production workloads on Service Bus namespacesHighHigh AvailabilityNoNo
Configure the minimum TLS version for Service Bus namespaces to TLS v1.2 or higherHighService Upgrade and RetirementYesNo

Details


Enable Availability Zones for Service Bus namespaces

Impact:  High Category:  High Availability

APRL GUID:  20057905-262c-49fe-a9be-49f423afb359

Description:

Availability zones are now enabled by default on new namespaces where possible. Existing namespaces are being migrated to availability zones where possible. The property zoneRedundant might still show as false, even when availability zones has been enabled.

Potential Benefits:

Enhances fault tolerance and uptime
Learn More:
Service Bus and reliability
Azure Service Bus Geo-disaster recovery
Insulate Azure Service Bus applications against outages and disasters

ARG Query:

Click the Azure Resource Graph tab to view the query

// cannot-be-validated-with-arg


Enable auto-scale for production workloads on Service Bus namespaces

Impact:  High Category:  High Availability

APRL GUID:  d810e3a8-600f-4be1-895b-1a93e61d37fd

Description:

Use Service Bus with auto-scale for high availability. The Premium SKU supports auto-scale, ensuring that the resources are automatically scaled based on the load.

Potential Benefits:

Ensures high availability and performance
Learn More:
Service Bus auto-scaling

ARG Query:

Click the Azure Resource Graph tab to view the query

// cannot-be-validated-with-arg


Configure the minimum TLS version for Service Bus namespaces to TLS v1.2 or higher

Impact:  High Category:  Service Upgrade and Retirement

APRL GUID:  f075a1bd-de9e-4819-9a1d-1ac41037a74f

Description:

As of 31 October 2024, TLS 1.0 and TLS 1.1 will no longer be supported on Azure including Service Bus to enhance security and provide best-in-class encryption for your data. Change the minimum TLS version for your Service Bus namespace to TLS v1.2 or higher.

Potential Benefits:

Avoids service disruption
Learn More:
Azure support for TLS 1.0 and TLS 1.1 will end by 31 October 2024
Configure the minimum TLS version for a Service Bus namespace

ARG Query:

Click the Azure Resource Graph tab to view the query

// Azure Resource Graph Query
// Provides a list of Service Bus Namespace resources that have the lower minimum TLS version.
resources
| where type =~ "Microsoft.ServiceBus/namespaces"
| where properties.minimumTlsVersion in ("1.0", "1.1")
| project
    recommendationId = "f075a1bd-de9e-4819-9a1d-1ac41037a74f",
    name,
    id,
    tags,
    param1 = strcat("minimumTlsVersion: ", properties.minimumTlsVersion)