My customer uses our client application to connect an on-premises WCF service with the Azure Service Bus relay. They want to restrict their firewall to permit only outbound access on ports 443 and 9350-9354 to specific addresses or domains. We know that the namespace is *.servicebus.windows.net, but by watching traffic on the firewall it appears there are others that are used behind the scenes, such as:
*.accesscontrol.windows.net
*.cloudapp.net
*.a-msedge.net
I have not been able to find an official list from Microsoft of the domains that are used by the Service Bus. Does anyone know of such a list that is officially supported by Microsoft? The closest we have found are:
http://blogs.msdn.com/b/brunoterkaly/archive/2012/02/07/azure-ports.aspx
http://blogs.breeze.net/mickb/2011/06/22/AzureServiceBusRequiredFirewallRulesWatchdog.aspx
Matt Wittemann, MVP for CRM (http://icu-mscrm.blogspot.com)