Questions tagged [azure-networking]
Questions related to azure networking: Virtual Networks, Load Balancers, routes, gatewayes and vpn/expressroute
349
questions
0
votes
0
answers
16
views
Unable to send TCP from Azure VM to GCP VM
I have setup a Ubuntu VM in Azure within a subnet 10.0.0.0/24 within a VNet's address space 10.0.0.0/16. Next I setup a Virtual Network Gateway with a tunnel to GCP vnet. I have an internal load ...
- 247
0
votes
0
answers
17
views
Azure Policy to Audit if NSGs contain a rule where Source and Destination match and are both IP addresses
I'm trying to create an azure policy that audits my NSGs.
I need to verify if my NSGs contain a rule where the source and destination match and are both IP addresses (so not "Virtual Machine"...
- 11
0
votes
0
answers
34
views
Cannot RDP To Server - Local Admin Password Expired/Reset Fixed Issue?
I received reports that users trying to RDP to an Azure Win Server 2019 VM via JIT or any other means were not able to. This used to work previously. In addition, users RDP using they own user account ...
- 217
0
votes
1
answer
76
views
Allow Azure VMSS instances to connect to a mysql server running on a VM in another resource group
In Microsoft Azure, I've got a Virtual Machine Scale Set in (say) 'resourceGroup1' in region West EU. I also have a single Virtual Machine (let's call it 'VM1') which contains an instance of mySql, ...
- 103
0
votes
0
answers
44
views
AKS Egress Internal via Load Balancer to on-premise service
I have an AKS cluster and one of the pods, call it "my-service", needs to connect to an on-premises service via VPN and that service requires whitelisting of IPs. Unfortunately, it can only ...
- 101
0
votes
0
answers
61
views
Force Logic App (Standard) Outbound Traffic Through VNet Only
I want to be able to route the traffic from my Azure Logic App (Standard) via my vnet to other resources on the vnet only. I've tried a lot of different things (current setup listed below), but the ...
- 1
0
votes
0
answers
36
views
Issues with telnet to external web service from azure vm
I have an Azure VM running Windows server. There is a job running on this server that fetches data from an external web service on port 80. This job has suddenly stopped working after a reboot (I know ...
- 1
0
votes
1
answer
37
views
static external IP for azure hosts
I am creating an Azure Virtual Desktop implementation. What is the correct way to make sure that the AVD's use a static IP address for outgoing connections?
Is it by creating a NAT Gateway?
- 23.1k
0
votes
0
answers
32
views
2 Azure VM Servers from the same region cannot communicate with each other
I have 2 Azure VM Windows Datacenter 2019 OS, that are in the same Region and are connected via VNET Peering but still cannot see or access each other, I tried turning off the Firewall from both VMs ...
0
votes
1
answer
102
views
Why do my AKS node have public IP even though "enableNodePublicIP" is set to false?
I have an AKS cluster where I added a new node pool. While creating the node pool, I set the option "Enable public IP per node" as Disabled. However, I still notice that my nodes in the VMSS ...
- 98
0
votes
0
answers
57
views
Azure outputs outdated public IP-address
I have a Terraform file called azure.tf which is supposed to deploy a Virtual machine to Azure and afterwards SSH to said machine to run an Ansible playbook. The problem is that everytime i run ...
1
vote
1
answer
221
views
Azure equivalent for logon script or Group Policy to launch programs on user login
We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
- 45
0
votes
1
answer
93
views
Low cost TCP listener for Azure
We've been going through the process of migrating VMs from our data centres into Azure.
When migrating, one of the gotchas is networking rules; i.e. there are NSGs, hardware firewalls, OS firewalls, ...
- 1,214
0
votes
0
answers
81
views
redundant VPN connections over Expressroute private peering
I have configured redundant VPN connections over expressroute private peering with private IPs. BGP is configured making router 2 backup using BGP as-path. Wondering how the traffic is sent back to on-...
- 1
1
vote
1
answer
43
views
Adding my remote public static IP to an Azure VNET so I can access a private VM inside the VNET
I don't even know if this is possible. But I have a VM in azure running just private IP. I can access this VM from my azure web app when it is running in Azure.
But I need to develop against it and I ...
- 111
1
vote
0
answers
15
views
Azure Network Adapter without Windows Admin Center
I want to use Azure Network Adapter, but I don't want to use Windows Admin Center. Windows Admin Center is a security headache and I don't want it. I just want to install an Azure Network Adapter on ...
- 469
0
votes
1
answer
28
views
when configuring Azure file sync between a azure file share and an on-premise server can this be done with private link?
Trying to configure azure file share between and on-premise file server and azure file share but am unsure about how to make it secure. We will be using express routewith private peering to connect ...
- 1
0
votes
0
answers
25
views
IPsec Tunnel to Vendor with Azure AD
On Prem AD connected to Azure AD connect. A vendor we are using requires an IPsec tunnel to a DC on their side to then create a trust to our on Prem AD. Problem is, their router is not compatible with ...
0
votes
1
answer
124
views
How to move an IP address in Azure from one VM to another?
I have an old VM with a static IP address - let's say IP address A. I want to dissociate this IP address from the old VM, make a new VM, and then associate IP address A with the new VM. They would ...
- 469
1
vote
0
answers
42
views
Multiple S2S Connections for Azure
I’m confused by all of this and need help. I setup an Azure S2S tunnel from Azure to my On Prem DC. This is for AD and AAD to sync. We have a new billing system coming in and the only way they’ll ...
0
votes
0
answers
236
views
Azure VPN fail to connect while working remotely
My organization is using Azure VPN to connect to Azure VMs and environments. When I'm working from office or from the same country, the connection works fine. However, when I'm working overseas, the ...
- 101
0
votes
1
answer
26
views
How to Know the Which IP-Port belongs to Which Instance of the Virtual Machine Scale Set
I have an Azure Windows VMSS with 2 instances in running state with a load balancer:
LB Rule - Port 80
Inbound NAT Rule - Frontend Port 50000, Service Port 3389
My VMSS Public IP is 20.1.13.195
I'm ...
anon
0
votes
0
answers
76
views
Nginx proxy forward to Azure Analysis Service
Problem:
From on-premises computers I need to be able to login to Azure Analysis Service.
Since AAS is publically available my split-tunnel VPN configured in on-prem computer forwards the request to ...
- 101
0
votes
1
answer
1k
views
Connecting Private Container Apps Environment with Application Gateway
im in a bit of a pickle right now.
Right now i'm in the process of setting up a microservice heavy application in azure container apps.
The Container Apps Environment is located in its own subnet, and ...
- 103
-1
votes
1
answer
278
views
RDP Client showing different screen (related to SConfig) on VM Startup
I have created a VM of Windows Server 2022 Datacenter Azure Edition x64 bit in Central US.
I have installed the IIS Web Server while provisioning the VM itself by selecting the custom script extension ...
anon
0
votes
1
answer
564
views
Connection to Azure SQL Database using Public IP and not my Azure VPN Client-assigned IP
I have configured a VNet in Azure with default 10.0.0.0/16 ip range.
I configured my Azure SQL Database to allow connections from the VNet.
I now want to connect my local dev pc to the VNet, so I ...
- 135
0
votes
1
answer
164
views
How to connect overlapping VNets in Azure?
I am working on an Azure-based networking solution.
We have a typical hub and spoke VNets topology. The Hub VNet connects to on-prem DC via ExpressRoute and spoke VNets peer to Hub VNet. There is an ...
- 111
0
votes
0
answers
14
views
where is it most appropriate to apply/maintain IP restrictions rules - Azure WAF or NSG
this is regarding the appropriateness of implementing IP restrictions either in WAF or NSG. im for implementing in NSG since its portable i.e. does not need WAF to be there. also the rules in NSG will ...
0
votes
0
answers
47
views
How to setup Azure Application Gateway + Web Deploy?
I am trying to setup an Azure Application Gateway and then to setup IIS Web Deploy in a vm.
Web Deploy requires a SSL certificate to access remotely.
I have used the default one, the WMSVC-SHA2, but ...
- 103
1
vote
0
answers
58
views
Access from classic resources to ARM storage account in Azure
This is a generalised version of what I posted on stack StackOverflow.
I have a number of storage accounts in Azure - the "new" ARM deployment model. I also have a number of old classic ...
- 946
0
votes
0
answers
207
views
Why does Azure Data Factory SHIR server lose connection?
Windows Server 2019 (WS2019)
Self-Hosted Integration Runtime (SHIR)
I have two on-premises WS2019 servers with Integration Runtime installed.
Each SHIR has been successfully registered with an Azure ...
- 207
-1
votes
1
answer
39
views
How to determine specific resource responsible for Azure cost?
Azure Portal > Cost Management > Cost Analysis > Cost By Resource > Services
provides line-items such as :
IP Addresses
IP Addresses - Standard IPv4
Standard IPv4 Static Public IP
Usage
$...
- 207
2
votes
1
answer
106
views
Azure vnet gateway - Block traffic between connected P2S clients (client-to-client)
I have set up an Azure VNet gateway to allow P2S clients to connect to resources within a VNet.
The VNet has address range 10.0.0.0/24, and has two subnets: the GatewaySubnet 10.0.0.0/25 and the ...
- 121
2
votes
1
answer
194
views
Azure App Gateway warning about Public IP
I am using the Azure App Gateway v2 and the App Gateway Ingress Controller as a public frontend to an AKS cluster. Following the guidance in this doc, I created and associated the IP address to my ...
- 121
0
votes
1
answer
193
views
Routing ports on a private IP to different addresses in Azure
Is there a way to route requests to the same private IP address to different targets depending on port used within Azure?
Context
We have a VM which serves content on SFTP (SSH; not FTPS) and HTTP.
...
- 1,214
-1
votes
1
answer
27
views
Running PORT exposure on Microsoft Server
So this is admittedly a very n00b question on Microsoft Server, so please assume basic knowledge and be kind :). I do, however, feel I have a good knowledge of Linux networking concepts, but I am ...
1
vote
2
answers
3k
views
How does Azure Loadbalancer work with Azure AKS
I recently tried to figure out how an Azure Loadbalancer in front of an Azure AKS cluster actually routes traffic to the cluster nodes.
Our (quite basic) setup:
AKS cluster version 1.23.x with the ...
- 113
0
votes
1
answer
326
views
Firewall threat protection rules for SSH/SFTP
Can a firewall improve the security of an SFTP service through inspecting incoming requests (e.g. to block any SSH commands which aren't required when only using SFTP?
Context
I recently found a VM in ...
- 1,214
0
votes
0
answers
450
views
Multiple VPNs with multiple virtual network gateways (Hub & Spoke)
I have a requirement to build out a networking solution that will have several site-to-site (S2S) VPNs and a point-2-site VPN (P2S). Ideally, we want each service provider/VPN to have its own set of ...
- 233
1
vote
1
answer
397
views
Is there a way to map a VM to a domain name with Azure without a static public IP?
I have a Go application that I would like to host on the public internet via Azure using a domain I own with another provider.
I realize the most straight forward way todo this is to spin up a VM, ...
- 124
0
votes
2
answers
385
views
How do I build the Hub & Spoke setup when VMs cannot be fronted by Application Gateways outside their virtual network?
Ported from Stackoverflow
I am building a Hub & Spoke network topology - described here - as recommended in the Azure docs
However when it comes to create the VM in the separate VNet, I get the ...
- 153
0
votes
1
answer
296
views
Connect multiple azure resource groups via route-based vpn to same on-site firewall
We are developing an app in Azure, made dev/test/prod ressource groups and want to connect these via Site-to-Site VPN to our On-Prem environment.
Connecting one of these ressource groups isn't a ...
- 1
0
votes
1
answer
194
views
Azure new Virtual Machine Windows Server 2022 can't make IIS work for a simple website
I got a new Azure Virtual machine server 2022 datacenter edition, they don't have the option "endpoints" where you configure the port 80 for http, I tried option "networking" 'add ...
0
votes
1
answer
1k
views
Multiple Azure Private DNS Zones
I was wondering is it possible to have multiple Private DNS Zones in a hub and spoke topology, where we have a separate DNS zone for an application (splint), but splint will be retired in a year, so ...
- 353
2
votes
1
answer
2k
views
How do I set a public static IP address to a storage account?
I have an Azure storage account with a blob endpoint of: 'mystorageaccountname.blob.core.windows.net', (and queues etc.). I want to choose a static IP Address, because some of my more zealous ...
- 121
1
vote
0
answers
105
views
On prem to Azure IPSec VPN not connecting
I have a TP-Link MR6400 router that I am trying to connect to our Azure environment over an IPSec VPN. The trouble is it will never connect.
Settings as follows -
Azure Connection Settings
Use Azure ...
- 21
1
vote
2
answers
2k
views
How to setup Azure VPN P2S with outbound Internet access with a static IP?
I want to setup an Azure VNET with an Azure VPN Gateway. Then when I VPN into the gateway, I want to have outbound Internet access for P2S VPN from clients. I want this outbound Internet access to ...
- 469
0
votes
1
answer
31
views
Static Azure FW for 3rd Parties to Whitelist
I’m trying to find a way to assign a static ip to out azure firewall. This IP will need to be shared with 3rd party vendors, I’m thinking of using a NAT gateway, but that doesn’t support inbound ...
- 353
-2
votes
1
answer
60
views
How to change IP address of azure NIC, as soon as azure load-balancer's health probe detect instance unhealthy?
I have two machines in backendpool of azure LB,
I would like to update network interface usign rest api as soon as health probe detects vm is unhealthy.
is there any way to to recoginse that event ...
-3
votes
1
answer
109
views
How can we move secondary IP address of from one NIC to other in Azure
I want to implement HA system on azure, for that I need to move secondary IP address of active vm to standby vm as soon failover happens, how can we do this?