Thanks jalenmcg​ for writing this article. May I just check one thing please? The diagram suggests that Azure Monitor (AMA) data plane traffic will traverse the Azure Gateway, however the table also documents that the following URLs still require direct data access:
- <log-analytics-workspace-id>.ods.opinsights.azure.com
- <data-collection-endpoint>.<virtual-machine-region-name>.ingest.monitor.azure.com
In my testing I have also seen this behaviour, i.e. the Arc control plane traffic mostly goes via <URL Prefix>.gw.arc.azure.com while the data while AMA goes direct, unaffected by Arc Gateway.
Perhaps the diagram may need updating to clarify this? Many thanks.
Microsoft