Questions tagged [azure-networking]
Questions related to azure networking: Virtual Networks, Load Balancers, routes, gatewayes and vpn/expressroute
1
vote
1answer
20 views
What is “fmsascon” as a network layer L7 protocol & what is port 16001 typically used for?
I'm responsible for an Azure network and various IaaS and PaaS services. I'm looking at Azure Network Watcher Traffic Anaysis that indicates ports receiving traffic including:
L7Protocol: fmsascon
...
2
votes
1answer
15 views
How can I configure an Azure VM to act as a proxy for connecting to SQL Database over a Service Endpoint?
Currently, Azure does not allow for SQL Databases to be accessed through a Service Endpoint over a VPN Gateway. My idea to circumvent this limitation is to set up an Azure VM to function as a proxy so ...
0
votes
1answer
13 views
Additional resources needed for standalone Azure Windows VM
I currently run a simple PowerShell script every hour on my development Windows 2012 server. It generates a CSV file which can be downloaded via HTTP from an IIS website on the same server.
I'd ...
0
votes
1answer
10 views
Lockdown Azure Subnets with NSGs
I don't think this is currently possible, but I'll give it a shot.
VNET "main" contains subnets "A" and "B".
Subnet A contains VM A1.
Subnet B contains VMs B1 and B2.
By default (even with an NSG ...
0
votes
0answers
19 views
Monitoring Traffic Sources on Azure Functions
I have an Azure Function that is proxying to an HTTP endpoint (mainly to enable HTTPS fronting).
In the past day I have seen a big spike in usage, and my user numbers have not grown. I think this is ...
0
votes
1answer
35 views
Azure WebApp Socket can't connect
I have a ASP .NET application hosted as a WebApp in Azure and a Xamarin client app that consumes that WebApi in Azure.
As soon as I changed my webapi to an Azure WebApp, which was previously hosted in ...
1
vote
1answer
45 views
Azure application gateway spring boot app VM scaleset
I have a setup of Azure VM scaleset, each Linux VM running java spring boot app on a specific port (8070).
I need to use a domain with https on application gateway and use Linux VMSS with java app as ...
1
vote
1answer
44 views
Unable to access Azure VM remotely on port 80
I am unable to access/telnet using the public IP on port 80.
I am able to access the it from inside the VM.
The port has been added to the inbound rules in Azure dashboard:
1
vote
1answer
20 views
Azure File Store mapping over site-to-site VPN
Need to map the file store, but our ISP is blocking 445 and there's no reasoning with them.
As a workaround, I've set up a site-to-site VPN, but I can't seem to find an option to assign a virtual IP ...
0
votes
1answer
41 views
Azure Webapp and SQL Secure networking
I believe i'm trying to do simple pretty basic with Azure, yet so far I didn't found anything "safe".
Basically, I just want to have a Azure WebApp and a Azure SQL Server (no VMs) communicating to ...
0
votes
1answer
47 views
Download OpenVPN client using Azure Powershell?
I'm a learner of Azure Powershell and I want to download the VPN profile for the gateway using Powershell. As per Microsoft this can be done with New-AzureRmVpnClientConfiguration but could not find ...
1
vote
2answers
69 views
Route traffic between two Azure site-to-site VPN locations
I have a single Azure virtual network gateway running the "Basic" VPN SKU (MainVGW) in "Route-based" mode in the Australia East region. MainVGW has two "Connections" (BR and MH) which are IPsec Site-...
0
votes
1answer
59 views
Azure VM not communicating over IPSec VPN
I have setup an IPSec VPN between Azure gateway and a remote Cisco Firewall. I can't RDP into local Windows servers in the azure vnet from remote site machine. However I can connect to the remote site ...
0
votes
3answers
109 views
Use public IP in virtual network
I have a VM in Azure that has a public IP and a DNS entry like my-db.westeurope.cloudapp.azure.com. I have another server at another hosting provider and configured the firewall to only allow access ...
1
vote
0answers
28 views
Firewall IP whitelist vs IPSEC VPN (Azure specific)
We are about to move our company's internal web app and samba shares from a datacenter to Azure. All our locations have a VPN connection to that data center.
Instead of creating all new connections ...
0
votes
0answers
70 views
How to prevent Azure application gateway v2 buffering
I have a service deployed in Azure behind an Application Gateway - standard v2 sku. One of the endpoints exposed by this service returns a streaming http response containing progress updates for a ...
0
votes
0answers
12 views
Azure point-to-site vpn with MFA - Authorization working but no connection after that
I've setup a point-to-site vpn on Azure using RADIUS authentication and multi-factor authentication. The authentication is all working and I can see NPS granting access and I'm getting authentication ...
1
vote
1answer
73 views
Restrict traffic between peered VNETs in Azure
I'm working with Azure, and I have 2 VNETs, each in its own resource group
Peering
+
|
...
0
votes
1answer
50 views
Enable communication between Azure virtual networks
I have an Azure subscription with 2 different resource groups, Test and Prod. Each resource group has a VNET with a bunch of VMs in it.
There is a VM in Prod that acts as a license server, and ...
0
votes
1answer
27 views
How do I configure Azure Load Balancer to forward traffic to an external endpoint?
I have a few of the same public endpoints exposed which I'd like my load balancer to route traffic to, but I can't figure out how to specify a backend pool that consists of these external endpoints - ...
0
votes
1answer
21 views
Is it possible to have security rules for different backend pools of an Azure Application Gateway?
I have an Azure Application Gateway in front of an AKS cluster. The cluster has some internal IP addresses published through an Internal Load Balancer, so with ip addresses from the subnet where the ...
-1
votes
1answer
146 views
DHCP in Azure in case of fail in Onprem [closed]
Please confirm can we install DHCP server in Azure. Actually, we want to use this Azure DHCP in case of DHCP fail in Onprem.
Please confirm how can we enable the same IP addresses in the Azure by ...
0
votes
1answer
109 views
Multi-NIC Linux VM (ubuntu 16.04 LTS) in Azure and default gateway route
Can some one please share steps on how to add default gateway address route permanently to the route table on Ubuntu 16.04 LTS on Azure for the secondary nic?
As you know Azure DHCP only populate ...
0
votes
0answers
108 views
How to setup an Azure Firewall in a hub-spoke model to forward to the correct spoke subnets?
I have an Azure environment with different VNETs for each environment (dev, test, and so on). Each VNET has its own Azure Application Gateway with WAF enabled (due to the limitation on number of sites/...
0
votes
1answer
20 views
Performance testing an Azure Netapp instance
We are looking to run a Netapp instance in Azure Ireland. The first time our cloud architect tried it performance was terrible. We therefore want to run some performance tests but are hitting a brick ...
0
votes
1answer
122 views
Access control with Azure Load Balancer VMs having individual public IP addresses
I have an Azure standard public load balancer with a few web server VMs behind it. I also need the VMs to have an individual public static IP each (not load balanced) for management stuff, so I've ...
0
votes
0answers
33 views
azure network peering zookeeper timeouts
I'm trying a few things on azure with terraform, but I'm not really used to debug networking and I'm facing an issue.
My network looks like :
On_premise_Network(196.168.0.0/16) <--- VPN IPsec --->...
0
votes
2answers
229 views
Azure Network Interface, change “Primary” IP configuration
I have an Azure VM with multiple static IP addresses. I had to delete and recreate the VM a couple times due to lost connectivity, and ended up with this IP Configuration:
It automatically assigned ...
0
votes
1answer
1k views
Azure Virtual Machine has no public IP yet can access the internet
I have a Virtual Machine which is connected to a Virtual Network. The Virtual network has 2 attached devices, and Virtual Network Gateway and a Network Interface.
Only the Virtual Network Gateway has ...
0
votes
2answers
369 views
Restrict access from Azure Vault only to App Services in production
I would like to restrict and give access to my secret only to my application in production. Even when I enabled Firewalls and virtual networks > Selected networks and select allow Microsoft trusted ...
0
votes
2answers
54 views
Best practice for Domain Controller [closed]
I have a main DC on Microsoft Azure VM and an on-premise DC. Both domain networks are connected with site-to-site VPN.
The purpose of setting up the DC on cloud was to get rid of the old on-premise ...
0
votes
0answers
227 views
How to connect to Azure VPN Gateway SSTP using sstpc
This is my first questions here. I'm facing an issue where I have to connect to some vnets in Microsoft Azure. I received instructions of how to do it in Windows. The issue here is that I use Antergos,...
1
vote
1answer
2k views
Use of Gateway Subnet on Azure
I'm trying to create a Point-to-Site(P2S) VPN on Microsoft Azure and in order to do so I created a VNet, created a couple of subnets under the VNAT and then I read that I need to create a "Gateway ...
2
votes
0answers
24 views
Azure classic migration errors
We're trying to migrate a couple of classic VMs in classic vnet over to ARM ('non-classic'). I've been following the Microsoft powershell migration steps here but the migration (and validation) fails ...
0
votes
0answers
33 views
Sophos-Azure Ipsec Random Drops
been dealing with a weird issue lately. Using a sophos xg125 I have a s2s ipsec up to azure. Data subnet onprem 10.1.50.0/24 and ssl vpn subnet of 10.281.135.0/24. Azure subnet 10.0.0.0/24. ...
1
vote
1answer
99 views
Azure Load Standard Public Balancer load balancing to unhealthy or removed VM
We have a highly available website which we are trying to migrate to Azure. We basically have an Azure Standard Load Balancer with a public IP and 2 VMs in the backend pool.
We have noticed that if 1 ...
0
votes
2answers
30 views
Creating common gateway for Azure network
Suppose I created a Linux VM instance on Azure (Let's call it A1). To access this instance from my company's network I had to ask the IT team to allow the outbound traffic from my company's machine (...
1
vote
1answer
323 views
How to restrict RDPs to Azure VMs only via VPN?
I have:
An Azure virtual network
A Point-To-Site (P2S) Virtual Network Gateway
A subnet inside that network
A virtual machine inside the subnet
A network security group that the VM is a member of, ...
0
votes
2answers
121 views
Unable to Join local VM to Azure domain
I have a VM in Azure running Server 2016 with Active Directory Domain Controler. (Not Azure AD! But AD role setup on a VM!) and for this I use our public domain intra.test.online (I didn't share ...
0
votes
1answer
202 views
Use custom domains & SSL in SaaS solution in Azure Web App
Currently we are planning to provide a SaaS solution with subdomains that will be hosted in Azure as App Service. Currently we have the following CNAME mapping in the DNS provider and it is perfectly ...
0
votes
1answer
119 views
Connecting Azure to VPN site to site
I'm trying to connect an Azure network to an on-site VPN via a site to site connection. I don't have control or much knowledge of the on-site network.
On the Azure side, I have a Virtual Network ...
0
votes
1answer
223 views
Azure Inbound/Outbound Port Rules Security Issue
Not so much a question as an observation on port rule security. I have a Linux VM with iptables blocking and logging everything except for the exact things I need, and I have noticed that whenever I ...
0
votes
1answer
34 views
Azure load balancer
I have an on prem web server we want to make high availability. We was looking at iis arr.
if we setup another iis web server at a different site and setup dfs to replicate content, i would like to ...
0
votes
1answer
341 views
Azure Site Recovery VM in VMWare 6.0 erroneously says it does not have internet connectivty
1[]2
Setting up the Azure Site Recovery VM in VMWare 6.0 to enable replication between on-prem and Azure.
Azure Site Recovery Configuration Manager says "Checking for internet connectivity failed"
"...
0
votes
0answers
339 views
How to establish a Point-to-Site VPN connection to Azure from Linux machine (CLI only)?
I got an Ubuntu 16.04 (with CLI access only) which is behind NAT and I try to establish a Point-to-Site VPN connection to Azure gateway. Below is my configuration of strongswan and an output when ...
0
votes
1answer
19 views
Automatic update the file in cloud whenever database of java standalone application is changed
I have created a java standalone application for windows and used SQLite as database and now i want to connect this application with azure so that database can be saved on cloud an anyone help me how ...
0
votes
1answer
90 views
Is Azure DNS redirecting all my traffic to HTTPS?
I just set up an Azure environment including Azure DNS. For one of my domain names, it appears to be redirecting all http traffic to HTTPS instead, even subdomain CNAME records that point to different ...
0
votes
2answers
366 views
ERR_CONNECTION_TIMED_OUT when try to access port 80
I have Azure Linux VM created with httpd running on port 80, here is putty:
I have enabled/allowed azure vm security group to allow port 80 traffic.
When I try to access this vm from my browser ...
1
vote
1answer
237 views
Security for peered VNETS with internal load balancer
I have two VNETS (VNET1 and VNET2). VNET1 allows many site2site and point to site connections. VNET2 contains an internal load balancer and a set of VMs for the back end pool of that load balancer. I ...
0
votes
1answer
32 views
New Azure Standard LB doesn't allow inbound connection
I have setup a LB with a backend pool (only one host for test).
I setup network security group on test host with following rule:
Source: AzureLoadBalancer Destination: Any Action: Allow
Source: ...
