Questions tagged [azure-networking]

Questions related to azure networking: Virtual Networks, Load Balancers, routes, gatewayes and vpn/expressroute

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

Unable to send TCP from Azure VM to GCP VM

I have setup a Ubuntu VM in Azure within a subnet 10.0.0.0/24 within a VNet's address space 10.0.0.0/16. Next I setup a Virtual Network Gateway with a tunnel to GCP vnet. I have an internal load ...
rams's user avatar
  • 247
0 votes
0 answers
17 views

Azure Policy to Audit if NSGs contain a rule where Source and Destination match and are both IP addresses

I'm trying to create an azure policy that audits my NSGs. I need to verify if my NSGs contain a rule where the source and destination match and are both IP addresses (so not "Virtual Machine"...
user182595's user avatar
0 votes
0 answers
34 views

Cannot RDP To Server - Local Admin Password Expired/Reset Fixed Issue?

I received reports that users trying to RDP to an Azure Win Server 2019 VM via JIT or any other means were not able to. This used to work previously. In addition, users RDP using they own user account ...
Nina G's user avatar
  • 217
0 votes
1 answer
76 views

Allow Azure VMSS instances to connect to a mysql server running on a VM in another resource group

In Microsoft Azure, I've got a Virtual Machine Scale Set in (say) 'resourceGroup1' in region West EU. I also have a single Virtual Machine (let's call it 'VM1') which contains an instance of mySql, ...
Steve Owen's user avatar
0 votes
0 answers
44 views

AKS Egress Internal via Load Balancer to on-premise service

I have an AKS cluster and one of the pods, call it "my-service", needs to connect to an on-premises service via VPN and that service requires whitelisting of IPs. Unfortunately, it can only ...
Ed Boykin's user avatar
  • 101
0 votes
0 answers
61 views

Force Logic App (Standard) Outbound Traffic Through VNet Only

I want to be able to route the traffic from my Azure Logic App (Standard) via my vnet to other resources on the vnet only. I've tried a lot of different things (current setup listed below), but the ...
bri's user avatar
  • 1
0 votes
0 answers
36 views

Issues with telnet to external web service from azure vm

I have an Azure VM running Windows server. There is a job running on this server that fetches data from an external web service on port 80. This job has suddenly stopped working after a reboot (I know ...
Tngld's user avatar
  • 1
0 votes
1 answer
37 views

static external IP for azure hosts

I am creating an Azure Virtual Desktop implementation. What is the correct way to make sure that the AVD's use a static IP address for outgoing connections? Is it by creating a NAT Gateway?
longneck's user avatar
  • 23.1k
0 votes
0 answers
32 views

2 Azure VM Servers from the same region cannot communicate with each other

I have 2 Azure VM Windows Datacenter 2019 OS, that are in the same Region and are connected via VNET Peering but still cannot see or access each other, I tried turning off the Firewall from both VMs ...
Terrence McGinnis's user avatar
0 votes
1 answer
102 views

Why do my AKS node have public IP even though "enableNodePublicIP" is set to false?

I have an AKS cluster where I added a new node pool. While creating the node pool, I set the option "Enable public IP per node" as Disabled. However, I still notice that my nodes in the VMSS ...
faizan's user avatar
  • 98
0 votes
0 answers
57 views

Azure outputs outdated public IP-address

I have a Terraform file called azure.tf which is supposed to deploy a Virtual machine to Azure and afterwards SSH to said machine to run an Ansible playbook. The problem is that everytime i run ...
brokkosnarf's user avatar
1 vote
1 answer
221 views

Azure equivalent for logon script or Group Policy to launch programs on user login

We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
SKidd's user avatar
  • 45
0 votes
1 answer
93 views

Low cost TCP listener for Azure

We've been going through the process of migrating VMs from our data centres into Azure. When migrating, one of the gotchas is networking rules; i.e. there are NSGs, hardware firewalls, OS firewalls, ...
JohnLBevan's user avatar
  • 1,214
0 votes
0 answers
81 views

redundant VPN connections over Expressroute private peering

I have configured redundant VPN connections over expressroute private peering with private IPs. BGP is configured making router 2 backup using BGP as-path. Wondering how the traffic is sent back to on-...
MatB's user avatar
  • 1
1 vote
1 answer
43 views

Adding my remote public static IP to an Azure VNET so I can access a private VM inside the VNET

I don't even know if this is possible. But I have a VM in azure running just private IP. I can access this VM from my azure web app when it is running in Azure. But I need to develop against it and I ...
paulinventome's user avatar
1 vote
0 answers
15 views

Azure Network Adapter without Windows Admin Center

I want to use Azure Network Adapter, but I don't want to use Windows Admin Center. Windows Admin Center is a security headache and I don't want it. I just want to install an Azure Network Adapter on ...
A X's user avatar
  • 469
0 votes
1 answer
28 views

when configuring Azure file sync between a azure file share and an on-premise server can this be done with private link?

Trying to configure azure file share between and on-premise file server and azure file share but am unsure about how to make it secure. We will be using express routewith private peering to connect ...
d1260's user avatar
  • 1
0 votes
0 answers
25 views

IPsec Tunnel to Vendor with Azure AD

On Prem AD connected to Azure AD connect. A vendor we are using requires an IPsec tunnel to a DC on their side to then create a trust to our on Prem AD. Problem is, their router is not compatible with ...
EastCoast2234's user avatar
0 votes
1 answer
124 views

How to move an IP address in Azure from one VM to another?

I have an old VM with a static IP address - let's say IP address A. I want to dissociate this IP address from the old VM, make a new VM, and then associate IP address A with the new VM. They would ...
A X's user avatar
  • 469
1 vote
0 answers
42 views

Multiple S2S Connections for Azure

I’m confused by all of this and need help. I setup an Azure S2S tunnel from Azure to my On Prem DC. This is for AD and AAD to sync. We have a new billing system coming in and the only way they’ll ...
EastCoast2234's user avatar
0 votes
0 answers
236 views

Azure VPN fail to connect while working remotely

My organization is using Azure VPN to connect to Azure VMs and environments. When I'm working from office or from the same country, the connection works fine. However, when I'm working overseas, the ...
jak123's user avatar
  • 101
0 votes
1 answer
26 views

How to Know the Which IP-Port belongs to Which Instance of the Virtual Machine Scale Set

I have an Azure Windows VMSS with 2 instances in running state with a load balancer: LB Rule - Port 80 Inbound NAT Rule - Frontend Port 50000, Service Port 3389 My VMSS Public IP is 20.1.13.195 I'm ...
user avatar
0 votes
0 answers
76 views

Nginx proxy forward to Azure Analysis Service

Problem: From on-premises computers I need to be able to login to Azure Analysis Service. Since AAS is publically available my split-tunnel VPN configured in on-prem computer forwards the request to ...
Marci-man's user avatar
  • 101
0 votes
1 answer
1k views

Connecting Private Container Apps Environment with Application Gateway

im in a bit of a pickle right now. Right now i'm in the process of setting up a microservice heavy application in azure container apps. The Container Apps Environment is located in its own subnet, and ...
Isparia's user avatar
  • 103
-1 votes
1 answer
278 views

RDP Client showing different screen (related to SConfig) on VM Startup

I have created a VM of Windows Server 2022 Datacenter Azure Edition x64 bit in Central US. I have installed the IIS Web Server while provisioning the VM itself by selecting the custom script extension ...
user avatar
0 votes
1 answer
564 views

Connection to Azure SQL Database using Public IP and not my Azure VPN Client-assigned IP

I have configured a VNet in Azure with default 10.0.0.0/16 ip range. I configured my Azure SQL Database to allow connections from the VNet. I now want to connect my local dev pc to the VNet, so I ...
Shawn de Wet's user avatar
0 votes
1 answer
164 views

How to connect overlapping VNets in Azure?

I am working on an Azure-based networking solution. We have a typical hub and spoke VNets topology. The Hub VNet connects to on-prem DC via ExpressRoute and spoke VNets peer to Hub VNet. There is an ...
Prado's user avatar
  • 111
0 votes
0 answers
14 views

where is it most appropriate to apply/maintain IP restrictions rules - Azure WAF or NSG

this is regarding the appropriateness of implementing IP restrictions either in WAF or NSG. im for implementing in NSG since its portable i.e. does not need WAF to be there. also the rules in NSG will ...
asdfasdfasdf's user avatar
0 votes
0 answers
47 views

How to setup Azure Application Gateway + Web Deploy?

I am trying to setup an Azure Application Gateway and then to setup IIS Web Deploy in a vm. Web Deploy requires a SSL certificate to access remotely. I have used the default one, the WMSVC-SHA2, but ...
kokokok's user avatar
  • 103
1 vote
0 answers
58 views

Access from classic resources to ARM storage account in Azure

This is a generalised version of what I posted on stack StackOverflow. I have a number of storage accounts in Azure - the "new" ARM deployment model. I also have a number of old classic ...
Aleks G's user avatar
  • 946
0 votes
0 answers
207 views

Why does Azure Data Factory SHIR server lose connection?

Windows Server 2019 (WS2019) Self-Hosted Integration Runtime (SHIR) I have two on-premises WS2019 servers with Integration Runtime installed. Each SHIR has been successfully registered with an Azure ...
BaltoStar's user avatar
  • 207
-1 votes
1 answer
39 views

How to determine specific resource responsible for Azure cost?

Azure Portal > Cost Management > Cost Analysis > Cost By Resource > Services provides line-items such as : IP Addresses IP Addresses - Standard IPv4 Standard IPv4 Static Public IP Usage $...
BaltoStar's user avatar
  • 207
2 votes
1 answer
106 views

Azure vnet gateway - Block traffic between connected P2S clients (client-to-client)

I have set up an Azure VNet gateway to allow P2S clients to connect to resources within a VNet. The VNet has address range 10.0.0.0/24, and has two subnets: the GatewaySubnet 10.0.0.0/25 and the ...
Håvard S's user avatar
  • 121
2 votes
1 answer
194 views

Azure App Gateway warning about Public IP

I am using the Azure App Gateway v2 and the App Gateway Ingress Controller as a public frontend to an AKS cluster. Following the guidance in this doc, I created and associated the IP address to my ...
gutsmania's user avatar
  • 121
0 votes
1 answer
193 views

Routing ports on a private IP to different addresses in Azure

Is there a way to route requests to the same private IP address to different targets depending on port used within Azure? Context We have a VM which serves content on SFTP (SSH; not FTPS) and HTTP. ...
JohnLBevan's user avatar
  • 1,214
-1 votes
1 answer
27 views

Running PORT exposure on Microsoft Server

So this is admittedly a very n00b question on Microsoft Server, so please assume basic knowledge and be kind :). I do, however, feel I have a good knowledge of Linux networking concepts, but I am ...
Micheal J. Roberts's user avatar
1 vote
2 answers
3k views

How does Azure Loadbalancer work with Azure AKS

I recently tried to figure out how an Azure Loadbalancer in front of an Azure AKS cluster actually routes traffic to the cluster nodes. Our (quite basic) setup: AKS cluster version 1.23.x with the ...
antaxify's user avatar
  • 113
0 votes
1 answer
326 views

Firewall threat protection rules for SSH/SFTP

Can a firewall improve the security of an SFTP service through inspecting incoming requests (e.g. to block any SSH commands which aren't required when only using SFTP? Context I recently found a VM in ...
JohnLBevan's user avatar
  • 1,214
0 votes
0 answers
450 views

Multiple VPNs with multiple virtual network gateways (Hub & Spoke)

I have a requirement to build out a networking solution that will have several site-to-site (S2S) VPNs and a point-2-site VPN (P2S). Ideally, we want each service provider/VPN to have its own set of ...
woter324's user avatar
  • 233
1 vote
1 answer
397 views

Is there a way to map a VM to a domain name with Azure without a static public IP?

I have a Go application that I would like to host on the public internet via Azure using a domain I own with another provider. I realize the most straight forward way todo this is to spin up a VM, ...
Liam Kelly's user avatar
0 votes
2 answers
385 views

How do I build the Hub & Spoke setup when VMs cannot be fronted by Application Gateways outside their virtual network?

Ported from Stackoverflow I am building a Hub & Spoke network topology - described here - as recommended in the Azure docs However when it comes to create the VM in the separate VNet, I get the ...
Brendan's user avatar
  • 153
0 votes
1 answer
296 views

Connect multiple azure resource groups via route-based vpn to same on-site firewall

We are developing an app in Azure, made dev/test/prod ressource groups and want to connect these via Site-to-Site VPN to our On-Prem environment. Connecting one of these ressource groups isn't a ...
sz1337's user avatar
  • 1
0 votes
1 answer
194 views

Azure new Virtual Machine Windows Server 2022 can't make IIS work for a simple website

I got a new Azure Virtual machine server 2022 datacenter edition, they don't have the option "endpoints" where you configure the port 80 for http, I tried option "networking" 'add ...
TexWebDev's user avatar
0 votes
1 answer
1k views

Multiple Azure Private DNS Zones

I was wondering is it possible to have multiple Private DNS Zones in a hub and spoke topology, where we have a separate DNS zone for an application (splint), but splint will be retired in a year, so ...
Norrin Rad's user avatar
2 votes
1 answer
2k views

How do I set a public static IP address to a storage account?

I have an Azure storage account with a blob endpoint of: 'mystorageaccountname.blob.core.windows.net', (and queues etc.). I want to choose a static IP Address, because some of my more zealous ...
OzBob's user avatar
  • 121
1 vote
0 answers
105 views

On prem to Azure IPSec VPN not connecting

I have a TP-Link MR6400 router that I am trying to connect to our Azure environment over an IPSec VPN. The trouble is it will never connect. Settings as follows - Azure Connection Settings Use Azure ...
dynmatt's user avatar
  • 21
1 vote
2 answers
2k views

How to setup Azure VPN P2S with outbound Internet access with a static IP?

I want to setup an Azure VNET with an Azure VPN Gateway. Then when I VPN into the gateway, I want to have outbound Internet access for P2S VPN from clients. I want this outbound Internet access to ...
A X's user avatar
  • 469
0 votes
1 answer
31 views

Static Azure FW for 3rd Parties to Whitelist

I’m trying to find a way to assign a static ip to out azure firewall. This IP will need to be shared with 3rd party vendors, I’m thinking of using a NAT gateway, but that doesn’t support inbound ...
Norrin Rad's user avatar
-2 votes
1 answer
60 views

How to change IP address of azure NIC, as soon as azure load-balancer's health probe detect instance unhealthy?

I have two machines in backendpool of azure LB, I would like to update network interface usign rest api as soon as health probe detects vm is unhealthy. is there any way to to recoginse that event ...
yogesh deshpande's user avatar
-3 votes
1 answer
109 views

How can we move secondary IP address of from one NIC to other in Azure

I want to implement HA system on azure, for that I need to move secondary IP address of active vm to standby vm as soon failover happens, how can we do this?
yogesh deshpande's user avatar

1
2 3 4 5
7