Back to Details

azure-bastion

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Bastion Skill

Azure Bastion Skill

This skill provides expert guidance for Azure Bastion. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.
本Skill为Azure Bastion提供专业指导，涵盖故障排除、最佳实践、决策制定、架构与设计模式、安全性、配置以及集成与编码模式。它结合了本地快速参考内容与远程文档获取功能。

How to Use This Skill

如何使用本Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent 重要提示: 使用下方的分类索引查找相关章节。对于带有行范围的分类（例如
L35-L120
），使用
read_file
读取指定行；对于带有文件链接的分类（例如
[security.md](security.md)
），使用
read_file
读取链接的参考文件
Agent 重要提示: 如果
metadata.generated_at
的时间超过3个月，建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，建议用户安装该工具：安装指南
本Skill需要网络访问权限来获取文档内容：
  • 首选方式：使用
    mcp_microsoftdocs:microsoft_docs_fetch
    ，并携带查询字符串
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备选方式：使用
    fetch_webpage
    ，并携带查询字符串
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL35-L39Diagnosing and resolving common Azure Bastion problems, including connection failures, RDP/SSH issues, network/configuration missteps, and steps to collect logs for support.
Best PracticesL40-L44Guidance on reducing Azure Bastion costs through sizing, scaling, and usage patterns while maintaining secure remote access and compliance best practices.
Decision MakingL45-L51Guidance on choosing and upgrading Bastion SKU tiers and using IP-based Bastion connections across VNets, subscriptions, and environments.
Architecture & Design PatternsL52-L58Architectural options and patterns for Azure Bastion: hub/spoke and peered VNets, private-only deployments, network/topology design, and deployment guidance for secure remote access.
SecurityL59-L65Configuring secure Azure Bastion access: Entra ID authentication, required NSG rules, and hardening best practices to lock down Bastion hosts and connections.
ConfigurationL66-L77Configuring Azure Bastion settings, scaling, IP-based and Kerberos access, monitoring/metrics, session management/recording, native client use, and shareable links.
Integrations & Coding PatternsL78-L85How to use Azure Bastion with AKS private clusters, VM scale sets, and native Windows/Linux clients, including SSH/RDP connectivity patterns and file transfer via Bastion native clients.
分类行范围描述
故障排除L35-L39诊断并解决Azure Bastion的常见问题，包括连接失败、RDP/SSH问题、网络/配置错误，以及收集支持所需日志的步骤。
最佳实践L40-L44指导如何通过规格选择、扩展和使用模式降低Azure Bastion成本，同时保持安全远程访问与合规最佳实践。
决策制定L45-L51指导如何选择和升级Bastion SKU层级，以及在不同VNet、订阅和环境中使用基于IP的Bastion连接。
架构与设计模式L52-L58Azure Bastion的架构选项与模式：中心/辐射型和对等VNet、纯私有部署、网络/拓扑设计，以及安全远程访问的部署指导。
安全性L59-L65配置安全的Azure Bastion访问：Entra ID认证、所需NSG规则，以及加固Bastion主机和连接的最佳实践。
配置L66-L77配置Azure Bastion设置、扩展、基于IP和Kerberos的访问、监控/指标、会话管理/录制、原生客户端使用，以及可共享链接。
集成与编码模式L78-L85如何将Azure Bastion与AKS私有集群、VM规模集以及Windows/Linux原生客户端配合使用，包括SSH/RDP连接模式和通过Bastion原生客户端进行文件传输。

Troubleshooting

故障排除

TopicURL
Diagnose and fix common Azure Bastion issueshttps://learn.microsoft.com/en-us/azure/bastion/troubleshoot
主题URL
诊断并修复Azure Bastion常见问题https://learn.microsoft.com/en-us/azure/bastion/troubleshoot

Best Practices

最佳实践

TopicURL
Optimize Azure Bastion costs without reducing securityhttps://learn.microsoft.com/en-us/azure/bastion/cost-optimization
主题URL
在不降低安全性的前提下优化Azure Bastion成本https://learn.microsoft.com/en-us/azure/bastion/cost-optimization

Decision Making

决策制定

TopicURL
Select the appropriate Azure Bastion SKU tierhttps://learn.microsoft.com/en-us/azure/bastion/bastion-sku-comparison
Use Azure Bastion IP-based connections across environmentshttps://learn.microsoft.com/en-us/azure/bastion/connect-ip-address
View and upgrade Azure Bastion SKU tiers safelyhttps://learn.microsoft.com/en-us/azure/bastion/upgrade-sku
主题URL
选择合适的Azure Bastion SKU层级https://learn.microsoft.com/en-us/azure/bastion/bastion-sku-comparison
在不同环境中使用Azure Bastion基于IP的连接https://learn.microsoft.com/en-us/azure/bastion/connect-ip-address
安全查看并升级Azure Bastion SKU层级https://learn.microsoft.com/en-us/azure/bastion/upgrade-sku

Architecture & Design Patterns

架构与设计模式

TopicURL
Understand Azure Bastion deployment architectureshttps://learn.microsoft.com/en-us/azure/bastion/design-architecture
Design and deploy private-only Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/private-only-deployment
Use Azure Bastion with VNet peering architectureshttps://learn.microsoft.com/en-us/azure/bastion/vnet-peering
主题URL
了解Azure Bastion部署架构https://learn.microsoft.com/en-us/azure/bastion/design-architecture
设计并部署纯私有Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/private-only-deployment
在VNet对等架构中使用Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/vnet-peering

Security

安全性

TopicURL
Configure Microsoft Entra ID auth for Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/bastion-entra-id-authentication
Configure Azure Bastion NSG rules for secure accesshttps://learn.microsoft.com/en-us/azure/bastion/bastion-nsg
Harden and secure your Azure Bastion deploymenthttps://learn.microsoft.com/en-us/azure/bastion/secure-bastion
主题URL
为Azure Bastion配置Microsoft Entra ID认证https://learn.microsoft.com/en-us/azure/bastion/bastion-entra-id-authentication
为Azure Bastion配置安全访问的NSG规则https://learn.microsoft.com/en-us/azure/bastion/bastion-nsg
加固并保护你的Azure Bastion部署https://learn.microsoft.com/en-us/azure/bastion/secure-bastion

Configuration

配置

TopicURL
Reference Azure Bastion configuration settings and optionshttps://learn.microsoft.com/en-us/azure/bastion/configuration-settings
Configure Kerberos authentication for Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/kerberos-authentication-portal
Configure monitoring and diagnostics for Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/monitor-bastion
Reference monitoring metrics and logs for Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/monitor-bastion-reference
Configure Azure Bastion for native client accesshttps://learn.microsoft.com/en-us/azure/bastion/native-client
Monitor and manage active Azure Bastion sessionshttps://learn.microsoft.com/en-us/azure/bastion/session-monitoring
Configure and store Azure Bastion session recordingshttps://learn.microsoft.com/en-us/azure/bastion/session-recording
Create and use Azure Bastion shareable linkshttps://learn.microsoft.com/en-us/azure/bastion/shareable-link
主题URL
Azure Bastion配置设置与选项参考https://learn.microsoft.com/en-us/azure/bastion/configuration-settings
为Azure Bastion配置Kerberos认证https://learn.microsoft.com/en-us/azure/bastion/kerberos-authentication-portal
为Azure Bastion配置监控与诊断https://learn.microsoft.com/en-us/azure/bastion/monitor-bastion
Azure Bastion监控指标与日志参考https://learn.microsoft.com/en-us/azure/bastion/monitor-bastion-reference
为Azure Bastion配置原生客户端访问https://learn.microsoft.com/en-us/azure/bastion/native-client
监控并管理活跃的Azure Bastion会话https://learn.microsoft.com/en-us/azure/bastion/session-monitoring
配置并存储Azure Bastion会话录制https://learn.microsoft.com/en-us/azure/bastion/session-recording
创建并使用Azure Bastion可共享链接https://learn.microsoft.com/en-us/azure/bastion/shareable-link

Integrations & Coding Patterns

集成与编码模式

TopicURL
Connect to AKS private clusters via Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/bastion-connect-to-aks-private-cluster
Connect to VM scale sets using Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/bastion-connect-vm-scale-set
Connect from Linux native clients through Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/connect-vm-native-client-linux
Connect from Windows native clients through Azure Bastionhttps://learn.microsoft.com/en-us/azure/bastion/connect-vm-native-client-windows
Transfer files via Azure Bastion native clientshttps://learn.microsoft.com/en-us/azure/bastion/vm-upload-download-native
主题URL
通过Azure Bastion连接到AKS私有集群https://learn.microsoft.com/en-us/azure/bastion/bastion-connect-to-aks-private-cluster
使用Azure Bastion连接到VM规模集https://learn.microsoft.com/en-us/azure/bastion/bastion-connect-vm-scale-set
通过Azure Bastion从Linux原生客户端连接https://learn.microsoft.com/en-us/azure/bastion/connect-vm-native-client-linux
通过Azure Bastion从Windows原生客户端连接https://learn.microsoft.com/en-us/azure/bastion/connect-vm-native-client-windows
通过Azure Bastion原生客户端传输文件https://learn.microsoft.com/en-us/azure/bastion/vm-upload-download-native