Share via

As per Eventhub when firewall is set to disable public access, then eventhub ndpoint should not be accessible in public

Vishnu Mullenkandy 40 Reputation points
2025-07-25T10:44:11.9666667+00:00

As per Azure documentation when Eventhub is set to disable public access in EH firewall, then the endpoint should not be reachable or respond to pings or telnet from public internet.

However I tried atleast with two eventhubs by disabling the public access and it responds from public requests.

I even tried by selecting a network and passing atleast one ip in the firewall list as per the documentation, it dint help.

https://learn.microsoft.com/en-us/azure/event-hubs/network-security

I am on Standard SKU of eventhub

Azure Event Hubs
Accepted answer
  1. TP 131.6K Reputation points Volunteer Moderator
    2025-07-25T14:03:44.1366667+00:00

    Hi Vishnu,

    What you are seeing is normal. Event Hubs is a multi-tenant service. The IP address of your namespace is used by multiple customers.

    When an incoming request comes in the frontend checks if the intended namespace allows the source IP/Network and if not, denies the request with unauthorized message. Additionally, the request needs to be authenticated and authorized for the target namespace.

    Excerpt from documentation:

    The IP firewall rules are applied at the Event Hubs namespace level. Therefore, the rules apply to all connections from clients using any supported protocol. Any connection attempt from an IP address that doesn't match an allowed IP rule on the Event Hubs namespace is rejected as unauthorized. The response doesn't mention the IP rule. IP filter rules are applied in order, and the first rule that matches the IP address determines the accept or reject action.

    Please click Accept Answer and upvote if the above was helpful.

    Thanks.

    -TP

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.