We have a simple php website which needs to connect to a 3rd party API, and that third party requires a point to point IPSEC VPN.

Azure has an ipsec gateway product for this, but how does one use it with a web app?

There are 3 categories of web app: Dev, Production and isolated.

CAn the gateway be used with a "production" instance? the isolated allows setting up a private network, which will presumably work with the ipsec gateway, but the cost is prohibative

Assuming we have a web app using this IPSEC gateway, is there any way a developer at home can "see" the API Address? If we were using a linux box, I would simply use ssh tunnels, but I am guessing you cant use ssh tunnels to a web app.


You can use Private Endpoints which are available with Azure App Service Premium v2, and provision the App Service Plan in a VNet that has a VPN established with your API subnet.

Using Private Endpoints for Azure Web App (Preview)

For testing in a development environment, you could try tunneling with ngrok, see this example for an idea of what will look like:

Remotely debugging PHP on Azure Web Apps with ngrok


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.