能否为Azure容器实例（ACI）分配预留IP以满足第三方白名单需求？

Hey there, great question—this is a super common scenario when dealing with third-party whitelisting requirements. The short answer is yes, you can assign a reserved public IP to your ACI, but there are some key constraints and steps you need to follow to make it work:

Prerequisites #

• You must use the Premium SKU for your ACI deployment. The Basic SKU doesn’t support reserved IP addresses at all.
• The reserved IP has to be a static public IP address with the Standard SKU (Basic SKU public IPs are incompatible with ACI).
• The reserved IP must be created in the same Azure region where you’ll deploy your ACI.

How to deploy ACI with a reserved IP #

Using Azure CLI #

First, create your static reserved public IP:

az network public-ip create \
  --name myReservedACIIP \
  --resource-group myACIRG \
  --location eastus \
  --sku Standard \
  --allocation-method Static

Then deploy your ACI, specifying the reserved IP you just created:

az container create \
  --name myWhitelistedContainer \
  --resource-group myACIRG \
  --image your-workload-image \
  --ip-address Public \
  --public-ip-address myReservedACIIP \
  --sku Premium

Using Azure Portal #

When setting up your ACI instance:

1. Under the Networking tab, set IP address type to "Public".
2. Expand the Public IP address section, either select "Create new" to make a new Standard SKU static IP, or pick an existing one from your resource group.
3. Make sure you’ve selected the Premium SKU under the Advanced tab before deploying.

Important Notes #

• Once your ACI is deployed with a reserved IP, you can’t swap out the IP later. If you need a different address, you’ll have to delete the existing ACI and redeploy with a new reserved IP.
• Reserved public IPs charge ongoing fees even if your ACI is stopped or deleted—you’ll need to manually delete the IP resource to stop billing.
• You can’t retroactively attach a reserved IP to an already-deployed ACI instance—this has to be configured right at deployment time.

内容的提问来源于stack exchange，提问作者AlexB