I have a VM on windows azure that is running an SQL server 2012 on windows datacenter 2012,
I want to define a firewall rule so that the sql server can be accessed from anywhere in the private network (azure virtual network) and from specific IPs adresses in the internet.
I tried to define that in the firewall as one could think it should be but still i get no access from anywhere,
Later on i discovered that i should play a bit with the sql server tcp/ip properties on the sql server network configurations/ protocols for sql server
I tried to play with all those properties but could only reach a situation which the sql server can be accessed from anywhere or cannot be accessed at all.
Can one tell me a step-by-step what should be the best way to solve this issue ?
After a lot of efforts i found the solution which contains 2 parts :
a. i needed to define via azure powershell the tcp endpoint for the sql because if its done via the portal it automatically defines it a load-balance port checks and than the load balance ip needs also to be enabled in the firewall.
b. i needed to open access to the udp port of 1434 because the sql server uses it to tell the end-user on which port it should set the communication
The endpoint acl is also an option