Questions tagged [azure-networking]

Questions related to azure networking: Virtual Networks, Load Balancers, routes, gatewayes and vpn/expressroute

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

Azure VMSS behind a load balancer SSL certs

Trying to get my head around what SSL/TLS certs i need to create for a couple of webservers hosted in Azure. The basic idea is : External User -> Azure Load Balancer -> Webserver ( part of a VM ...
NickDa's user avatar
  • 99
0 votes
1 answer
176 views

Routing traffic between newly established S2S VPN between AWS and Azure

I am trying to establish a site-to-site VPN connection between AWS and Azure to connect some VMs together. I followed a set of instructions from Microsoft and have successfully connected an Azure ...
Chris's user avatar
  • 1
0 votes
1 answer
73 views

How to SSH to different Virtual Machines attached to same Azure Firewall using same port?

We have host-Windows, proxy-Linux(same VNET, different subnets) and sftp-Linux(different VNET and subnet) machines in which SSH is enabled in port 815(SSH is done to domain set to each machines). Now ...
reshma m nair's user avatar
0 votes
1 answer
44 views

Microsoft Defender: extract Automatic log upload data

Is there a way to extract this automatic log upload table from defender: my goal is to use this information to aid in responding to the System alert: Cloud Discovery automatic log upload error alert ...
HarriS's user avatar
  • 101
0 votes
0 answers
60 views

Azure SQL Datasync IP address

We have to sync 2 SQL servers located in different clouds under the different tenants. One in Azure global cloud and another one is in Azure China. I've created a sync group in global cloud, added ...
Vyacheslav Benedichuk's user avatar
0 votes
1 answer
63 views

Azure Private Link Scope (AMPLS) Limits

Can anyone please confirm if this limit of Azure Monitor Private Link Scope (AMPLS) is soft or hard: An AMPLS object can connect to 300 Log Analytics workspaces and 1,000 Application Insights ...
Azure Dev's user avatar
0 votes
0 answers
214 views

Forwarding requests to another Azure Container App in the same environment results in 403 forbidden

-- Copied from Stackoverflow -- I am trying to setup two containers in an Azure Container App Environment. One Container App has a Caddy reverse-proxy plus SPA app files (app-www) and another has an ...
Brendan's user avatar
  • 153
0 votes
1 answer
61 views

How to route TCP traffic through a fixed IP in Azure during local development?

Hello ServerFault Community, I'm working through a challenge related to accessing a third-party OPC UA server and am considering a solution using Azure's cloud infrastructure. Background Our team ...
sgabler-solytic's user avatar
0 votes
1 answer
146 views

Reply traffic lost when using an NVA to SNAT

I am trying to implement the following in a lab subscription, as described in https://learn.microsoft.com/en-us/azure/architecture/guide/networking/ipv4-exhaustion#implement-snat-via-third-party-nvas (...
jimbobmcgee's user avatar
  • 2,685
0 votes
0 answers
119 views

How to backup an Azure PostgreSQL Single Server instance which is available on a private endpoint with Azure Backup Vault

I'd like to back up an Azure PostgreSQL Single Server instance using the Azure Backup Vault, which is only available through a Private Endpoint. I've created the Backup Vault and the Backup Instance ...
Nagy Vilmos's user avatar
0 votes
2 answers
290 views

Using Azure Firewall's DNS Proxy with an internal DNS Server

Question If using Azure Firewall's DNS Proxy with internal DNS severs behind this same firewall, what happens to requests for external DNS records (i.e. does this cause an infinite loop where the DNS ...
JohnLBevan's user avatar
  • 1,310
0 votes
1 answer
313 views

Force Azure Outbound Traffic via a Single Public IP

Question Is there a way, when using an Azure VWan with outbound traffic directed via the VWan's firewall, to ensure all outbound traffic breaks out via the same, single public IP address. Note: I'm ...
JohnLBevan's user avatar
  • 1,310
2 votes
1 answer
215 views

What does the Reset Hub button on an Azure Virtual Hub do?

Azure's Virtual Hub has a couple of buttons at the top: Reset Router and Reset Hub. I've found some documentation on Reset Router here but so far cannot find anything on Reset Hub. I'm trying to ...
JohnLBevan's user avatar
  • 1,310
0 votes
0 answers
69 views

Does Azure Stack HCI allow creation and management of Private VLAN (PVLAN)?

My customer is looking at deploying Azure Stack HCI. The network infrastructure I am responsible for designing will be based around Aruba CX10000 switches which have embedded Pensando module that will ...
martyvis's user avatar
  • 239
0 votes
1 answer
144 views

Azure Ubuntu VM direct S2S VPN - without VPN Gateway. Is it possible?

I would like to connect on prem Fortigate FW with one azure Ubuntu VM - direct. Is it possible without Azure VPN Gateway? Config works with other vendor but no in Azure. Is that kind of config blocked ...
Zenon Brzęczyszczykiewicz's user avatar
1 vote
0 answers
87 views

Accessing CosmosDB from a VPN

I have a CosmosDB instance that allows connections originating from a virtual network (let's call it "online-vnet"), in an address space 10.0.0.0/16. In the tenant there is a VPN defined (&...
Albie Janse van Rensburg's user avatar
0 votes
0 answers
49 views

How does Azure private endpoint communicate with Paas Services and does Azure Firewall interact in this?

All communication between a consumer and a service with a PaaS (e.g. CosmosDB) private endpoint is done using the virtual net that the consumer and the private endpoint is connected to, that's general ...
Rune G's user avatar
  • 111
0 votes
0 answers
23 views

Unable to send TCP from Azure VM to GCP VM

I have setup a Ubuntu VM in Azure within a subnet 10.0.0.0/24 within a VNet's address space 10.0.0.0/16. Next I setup a Virtual Network Gateway with a tunnel to GCP vnet. I have an internal load ...
rams's user avatar
  • 247
0 votes
0 answers
69 views

Azure Policy to Audit if NSGs contain a rule where Source and Destination match and are both IP addresses

I'm trying to create an azure policy that audits my NSGs. I need to verify if my NSGs contain a rule where the source and destination match and are both IP addresses (so not "Virtual Machine"...
user182595's user avatar
0 votes
0 answers
250 views

Cannot RDP To Server - Local Admin Password Expired/Reset Fixed Issue?

I received reports that users trying to RDP to an Azure Win Server 2019 VM via JIT or any other means were not able to. This used to work previously. In addition, users RDP using they own user account ...
Nina G's user avatar
  • 217
0 votes
1 answer
145 views

Allow Azure VMSS instances to connect to a mysql server running on a VM in another resource group

In Microsoft Azure, I've got a Virtual Machine Scale Set in (say) 'resourceGroup1' in region West EU. I also have a single Virtual Machine (let's call it 'VM1') which contains an instance of mySql, ...
Steve Owen's user avatar
1 vote
0 answers
323 views

AKS Egress Internal via Load Balancer to on-premise service

I have an AKS cluster and one of the pods, call it "my-service", needs to connect to an on-premises service via VPN and that service requires whitelisting of IPs. Unfortunately, it can only ...
Ed Boykin's user avatar
  • 111
0 votes
0 answers
415 views

Force Logic App (Standard) Outbound Traffic Through VNet Only

I want to be able to route the traffic from my Azure Logic App (Standard) via my vnet to other resources on the vnet only. I've tried a lot of different things (current setup listed below), but the ...
bri's user avatar
  • 1
0 votes
0 answers
177 views

Issues with telnet to external web service from azure vm

I have an Azure VM running Windows server. There is a job running on this server that fetches data from an external web service on port 80. This job has suddenly stopped working after a reboot (I know ...
Tngld's user avatar
  • 1
0 votes
1 answer
89 views

static external IP for azure hosts

I am creating an Azure Virtual Desktop implementation. What is the correct way to make sure that the AVD's use a static IP address for outgoing connections? Is it by creating a NAT Gateway?
longneck's user avatar
  • 23.2k
0 votes
0 answers
54 views

2 Azure VM Servers from the same region cannot communicate with each other

I have 2 Azure VM Windows Datacenter 2019 OS, that are in the same Region and are connected via VNET Peering but still cannot see or access each other, I tried turning off the Firewall from both VMs ...
Terrence McGinnis's user avatar
0 votes
1 answer
406 views

Why do my AKS node have public IP even though "enableNodePublicIP" is set to false?

I have an AKS cluster where I added a new node pool. While creating the node pool, I set the option "Enable public IP per node" as Disabled. However, I still notice that my nodes in the VMSS ...
faizan's user avatar
  • 98
0 votes
0 answers
104 views

Azure outputs outdated public IP-address

I have a Terraform file called azure.tf which is supposed to deploy a Virtual machine to Azure and afterwards SSH to said machine to run an Ansible playbook. The problem is that everytime i run ...
brokkosnarf's user avatar
1 vote
1 answer
1k views

Azure equivalent for logon script or Group Policy to launch programs on user login

We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
SKidd's user avatar
  • 61
0 votes
1 answer
120 views

Low cost TCP listener for Azure

We've been going through the process of migrating VMs from our data centres into Azure. When migrating, one of the gotchas is networking rules; i.e. there are NSGs, hardware firewalls, OS firewalls, ...
JohnLBevan's user avatar
  • 1,310
0 votes
0 answers
116 views

redundant VPN connections over Expressroute private peering

I have configured redundant VPN connections over expressroute private peering with private IPs. BGP is configured making router 2 backup using BGP as-path. Wondering how the traffic is sent back to on-...
MatB's user avatar
  • 1
1 vote
1 answer
181 views

Adding my remote public static IP to an Azure VNET so I can access a private VM inside the VNET

I don't even know if this is possible. But I have a VM in azure running just private IP. I can access this VM from my azure web app when it is running in Azure. But I need to develop against it and I ...
paulinventome's user avatar
1 vote
0 answers
20 views

Azure Network Adapter without Windows Admin Center

I want to use Azure Network Adapter, but I don't want to use Windows Admin Center. Windows Admin Center is a security headache and I don't want it. I just want to install an Azure Network Adapter on ...
A X's user avatar
  • 519
0 votes
1 answer
44 views

when configuring Azure file sync between a azure file share and an on-premise server can this be done with private link?

Trying to configure azure file share between and on-premise file server and azure file share but am unsure about how to make it secure. We will be using express routewith private peering to connect ...
d1260's user avatar
  • 1
0 votes
1 answer
313 views

How to move an IP address in Azure from one VM to another?

I have an old VM with a static IP address - let's say IP address A. I want to dissociate this IP address from the old VM, make a new VM, and then associate IP address A with the new VM. They would ...
A X's user avatar
  • 519
1 vote
0 answers
51 views

Multiple S2S Connections for Azure

I’m confused by all of this and need help. I setup an Azure S2S tunnel from Azure to my On Prem DC. This is for AD and AAD to sync. We have a new billing system coming in and the only way they’ll ...
EastCoast2234's user avatar
0 votes
1 answer
50 views

How to Know the Which IP-Port belongs to Which Instance of the Virtual Machine Scale Set

I have an Azure Windows VMSS with 2 instances in running state with a load balancer: LB Rule - Port 80 Inbound NAT Rule - Frontend Port 50000, Service Port 3389 My VMSS Public IP is 20.1.13.195 I'm ...
user avatar
0 votes
1 answer
1k views

Connecting Private Container Apps Environment with Application Gateway

im in a bit of a pickle right now. Right now i'm in the process of setting up a microservice heavy application in azure container apps. The Container Apps Environment is located in its own subnet, and ...
Isparia's user avatar
  • 103
-1 votes
1 answer
442 views

RDP Client showing different screen (related to SConfig) on VM Startup

I have created a VM of Windows Server 2022 Datacenter Azure Edition x64 bit in Central US. I have installed the IIS Web Server while provisioning the VM itself by selecting the custom script extension ...
user avatar
0 votes
1 answer
940 views

Connection to Azure SQL Database using Public IP and not my Azure VPN Client-assigned IP

I have configured a VNet in Azure with default 10.0.0.0/16 ip range. I configured my Azure SQL Database to allow connections from the VNet. I now want to connect my local dev pc to the VNet, so I ...
Shawn de Wet's user avatar
0 votes
1 answer
227 views

How to connect overlapping VNets in Azure?

I am working on an Azure-based networking solution. We have a typical hub and spoke VNets topology. The Hub VNet connects to on-prem DC via ExpressRoute and spoke VNets peer to Hub VNet. There is an ...
Prado's user avatar
  • 111
1 vote
0 answers
65 views

Access from classic resources to ARM storage account in Azure

This is a generalised version of what I posted on stack StackOverflow. I have a number of storage accounts in Azure - the "new" ARM deployment model. I also have a number of old classic ...
Aleks G's user avatar
  • 986
-1 votes
1 answer
49 views

How to determine specific resource responsible for Azure cost?

Azure Portal > Cost Management > Cost Analysis > Cost By Resource > Services provides line-items such as : IP Addresses IP Addresses - Standard IPv4 Standard IPv4 Static Public IP Usage $...
BaltoStar's user avatar
  • 207
2 votes
1 answer
185 views

Azure vnet gateway - Block traffic between connected P2S clients (client-to-client)

I have set up an Azure VNet gateway to allow P2S clients to connect to resources within a VNet. The VNet has address range 10.0.0.0/24, and has two subnets: the GatewaySubnet 10.0.0.0/25 and the ...
Håvard S's user avatar
  • 121
2 votes
1 answer
297 views

Azure App Gateway warning about Public IP

I am using the Azure App Gateway v2 and the App Gateway Ingress Controller as a public frontend to an AKS cluster. Following the guidance in this doc, I created and associated the IP address to my ...
gutsmania's user avatar
  • 121
0 votes
1 answer
282 views

Routing ports on a private IP to different addresses in Azure

Is there a way to route requests to the same private IP address to different targets depending on port used within Azure? Context We have a VM which serves content on SFTP (SSH; not FTPS) and HTTP. ...
JohnLBevan's user avatar
  • 1,310
-1 votes
1 answer
32 views

Running PORT exposure on Microsoft Server

So this is admittedly a very n00b question on Microsoft Server, so please assume basic knowledge and be kind :). I do, however, feel I have a good knowledge of Linux networking concepts, but I am ...
Micheal J. Roberts's user avatar
2 votes
2 answers
4k views

How does Azure Loadbalancer work with Azure AKS

I recently tried to figure out how an Azure Loadbalancer in front of an Azure AKS cluster actually routes traffic to the cluster nodes. Our (quite basic) setup: AKS cluster version 1.23.x with the ...
antaxify's user avatar
  • 123
0 votes
1 answer
408 views

Firewall threat protection rules for SSH/SFTP

Can a firewall improve the security of an SFTP service through inspecting incoming requests (e.g. to block any SSH commands which aren't required when only using SFTP? Context I recently found a VM in ...
JohnLBevan's user avatar
  • 1,310
0 votes
0 answers
689 views

Multiple VPNs with multiple virtual network gateways (Hub & Spoke)

I have a requirement to build out a networking solution that will have several site-to-site (S2S) VPNs and a point-2-site VPN (P2S). Ideally, we want each service provider/VPN to have its own set of ...
woter324's user avatar
  • 253

1
2 3 4 5
8