An Azure service that provides cloud messaging as a service and hybrid integration.
Hi Rick,
To clarify, the retirement of the SBMP (Service Bus Messaging Protocol) scheduled for September 30, 2026, primarily affects the Azure Service Bus SDK libraries (WindowsAzure.ServiceBus, Microsoft.Azure.ServiceBus, and com.microsoft.azure.servicebus).
According to official Microsoft Azure Updates:
"Azure WCF Relay still uses this library, and support of this library in combination with this service will continue until further notice."
What this means for you:
- No immediate breakage: Your existing WCF Relay endpoints using
NetTcpRelayBinding(which rely on SBMP) are not being retired on September 30, 2026. They will continue to function as they currently do. - Long-term strategy: While there is no hard cutoff date for WCF Relay's SBMP support, it is still recommended to transition to modern, secure protocols like WebSockets or AMQP over port 443 for new developments. You may explore Azure Relay Hybrid Connections, which are built for modern web standards and offer a more future-proof architecture compared to traditional WCF Relay bindings.
If you have strict firewall requirements that necessitate HTTPS (port 443) traffic, migrating to Hybrid Connections is the recommended path forward. To directly answer your questions:
1. Does NetTcpRelayBinding still rely on SBMP-related ports (9350–9354) in any scenario? Or does it fall back entirely to outbound HTTPS/TCP over port 443?
Yes, NetTcpRelayBinding still relies on TCP ports 9350-9354 by default, but it can fall back to port 443 depending on your application's configuration. This behavior is controlled by the ServiceBusEnvironment.SystemConnectivity.Mode setting.
According to the official Azure Relay documentation:
"The connectivity mode describes the protocol the service uses to communicate with the relay service; either HTTP or TCP. Using the default setting
AutoDetect, the service attempts to connect to Azure Relay over TCP if it's available, and HTTP if TCP isn't available." Reference: Expose on-premises WCF REST service to clients
If your mode is set to AutoDetect, the binding will first attempt to use the SBMP ports (9350-9354). If a firewall blocks this outbound traffic, it will gracefully fall back to HTTP over port 443. If you want to bypass the TCP attempt entirely and force 443 from the start, you can change the connectivity mode to HTTP (ConnectivityMode.Http).
2. Are WCF Relay scenarios affected by the SBMP/port retirement, or is this change strictly limited to Service Bus messaging (queues/topics)?
The retirement is strictly limited to Service Bus messaging (queues/topics). Your WCF Relay scenarios are entirely unaffected by the September 30, 2026 deadline.
In short, your existing NetTcpRelayBinding implementations are safe from the 2026 retirement. If you require a strict 443-only outbound topology without the latency of fallback attempts, you can configure your WCF Relay code to use ConnectivityMode.Http, or eventually migrate to Azure Relay Hybrid Connections.
Note: This response is drafted with the help of AI systems.