你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。
Use Azure AI Translator behind firewalls
Azure AI Translator can translate behind firewalls using either Domain-name or IP filtering. Domain-name filtering is the preferred method.
If you still require IP filtering, you can get the IP addresses details using service tag. Translator is under the CognitiveServicesManagement service tag.
Configure firewall
Navigate to your Azure AI Translator resource in the Azure portal.
Select Networking from the Resource Management section.
Under the Firewalls and virtual networks tab, choose Selected Networks and Private Endpoints.
Note
- Once you enable Selected Networks and Private Endpoints, you must use the Virtual Network endpoint to call the Translator. You can't use the standard translator endpoint (
api.cognitive.microsofttranslator.com) and you can't authenticate with an access token. - For more information, see Virtual Network Support.
- Once you enable Selected Networks and Private Endpoints, you must use the Virtual Network endpoint to call the Translator. You can't use the standard translator endpoint (
To grant access to an internet IP range, enter the IP address or address range (in
CIDRnotation) under Firewall > Address Range. Only valid public IP (non-reserved) addresses are accepted.
Running Azure AI Translator from behind a specific IP filtered firewall is not recommended. The setup is likely to break in the future without notice.
The IP addresses for Translator geographical endpoints as of September 21, 2021 are:
| Geography | Base URL (geographical endpoint) | IP Addresses |
|---|---|---|
| United States | api-nam.cognitive.microsofttranslator.com | 20.42.6.144, 20.49.96.128, 40.80.190.224, 40.64.128.192 |
| Europe | api-eur.cognitive.microsofttranslator.com | 20.50.1.16, 20.38.87.129 |
| Asia Pacific | api-apc.cognitive.microsofttranslator.com | 40.80.170.160, 20.43.132.96, 20.37.196.160, 20.43.66.16 |