How do I set a public static IP address to a storage account? I have 'blobstorageaccountname.blob.core.windows.net', I want to choose a static IP Address, just like I would for an Azure VM. In Azure portal | Storage | Networking | Custom domain: it says "Configure a custom domain for accessing blob data in your Azure storage account, like www.contoso.com". If that is possible could I allocate the custom domain a static IP address? Is it really only blob specific, what about queue endpoints? I could configure my DNS with each endpoint having a new CNAME entry. Azure portal | Add new resource "<a href="https://portal.azure.com/#view/Microsoft_Azure_Marketplace/GalleryItemDetailsBladeNopdl/product%7E/%7B%22displayName%22%3A%22Public%20IP%20address%22%2C%22itemDisplayName%22%3A%22Public%20IP%20address%22%2C%22id%22%3A%22Microsoft.PublicIPAddress%22%2C%22bigId%22%3A%22Microsoft.PublicIPAddress%22%2C%22offerId%22%3A%22PublicIPAddress%22%2C%22publisherId%22%3A%22Microsoft%22%2C%22publisherDisplayName%22%3A%22Microsoft%22%2C%22summary%22%3A%22An%20IP%20address%20that%20can%20be%20used%20with%20virtual%20machines%20and%20load%20balancers.%22%2C%22longSummary%22%3A%22An%20IP%20address%20that%20can%20be%20used%20with%20virtual%20machines%20and%20load%20balancers.%22%2C%22description%22%3A%22%3Cp%3EA%20public%20IP%20address%20is%20a%20dynamic%20or%20static%20IP%20address%20that%20you%20can%20assign%20to%20virtual%20machines%2C%20load%20balancers%2C%20and%20virtual%20network%20gateways%20to%20communicate%20with%20the%20Internet.%20Your%20public%20IP%20addresses%20are%20associated%20with%20your%20Azure%20subscription%2C%20and%20can%20be%20moved%20freely%20between%20Azure%20resources.%20The%20address%20of%20dynamic%20public%20IP%20address%20may%20change%20when%20dissociated%20and%20moved%20between%20resources%2C%20or%20when%20the%20associated%20resource%20is%20shutdown%20or%20deleted.%20You%20can%20use%20a%20static%20public%20IP%20address%20to%20ensure%20that%20the%20assigned%20address%20remains%20the%20same%2C%20even%20if%20the%20associated%20resource%20is%20shutdown%20or%20deleted.%3C%2Fp%3E%3Cp%3EIn%20the%20Classic%20deployment%20model%2C%20a%20public%20IP%20address%20was%20named%20an%20instance-level%20public%20IP%20(ILPIP)%20address%20when%20assigned%20to%20a%20virtual%20machine%20or%20role%20instance%20directly%2C%20and%20a%20virtual%20IP%20address%20(VIP)%20when%20assigned%20to%20a%20cloud%20service.%20Furthermore%2C%20a%20reserved%20IP%20address%20could%20be%20associated%20to%20the%20VIP%20of%20a%20cloud%20service%20to%20ensure%20that%20the%20assigned%20address%20remained%20the%20same%20even%20if%20its%20virtual%20machines%20or%20deployments%20were%20stopped.%20These%20concepts%20have%20now%20been%20unified%20in%20the%20Resource%20Manager%20deployment%20model%20with%20the%20public%20IP%20address%20resource.%3C%2Fp%3E%22%2C%22isPrivate%22%3Afalse%2C%22hasPrivateOffer%22%3Afalse%2C%22isMacc%22%3Atrue%2C%22isPreview%22%3Afalse%2C%22isByol%22%3Afalse%2C%22isCSPEnabled%22%3Atrue%2C%22isCSPSelective%22%3Afalse%2C%22isThirdParty%22%3Afalse%2C%22isStopSell%22%3Afalse%2C%22isReseller%22%3Afalse%2C%22hasFreeTrials%22%3Afalse%2C%22marketingMaterial%22%3A%5B%5D%2C%22version%22%3A%221.1.5%22%2C%22metadata%22%3A%7B%22leadGeneration%22%3Anull%2C%22testDrive%22%3Anull%7D%2C%22categoryIds%22%3A%5B%22networking%22%5D%2C%22screenshotUris%22%3A%5B%5D%2C%22links%22%3A%5B%7B%22id%22%3A%220%22%2C%22displayName%22%3A%22Service%20overview%22%2C%22uri%22%3A%22https%3A%2F%2Flearn.microsoft.com%2Fazure%2Fvirtual-network%2Fvirtual-network-public-ip-address%22%7D%2C%7B%22id%22%3A%221%22%2C%22displayName%22%3A%22Pricing%20details%22%2C%22uri%22%3A%22http%3A%2F%2Fazure.microsoft.com%2Fpricing%2Fdetails%2Fip-addresses%2F%22%7D%5D%2C%22filters%22%3A%5B%5D%2C%22plans%22%3A%5B%7B%22id%22%3A%22PublicIPAddress-ARM%22%2C%22displayName%22%3A%22Public%20IP%20address%22%2C%22summary%22%3A%22An%20IP%20address%20that%20can%20be%20used%20with%20virtual%20machines%20and%20load%20balancers.%22%2C%22description%22%3A%22%3Cp%3EA%20public%20IP%20address%20is%20a%20dynamic%20or%20static%20IP%20address%20that%20you%20can%20assign%20to%20virtual%20machines%2C%20load%20balancers%2C%20and%20virtual%20network%20gateways%20to%20communicate%20with%20the%20Internet.%20Your%20public%20IP%20addresses%20are%20associated%20with%20your%20Azure%20subscription%2C%20and%20can%20be%20moved%20freely%20between%20Azure%20resources.%20The%20address%20of%20dynamic%20public%20IP%20address%20may%20change%20when%20dissociated%20and%20moved%20between%20resources%2C%20or%20when%20the%20associated%20resource%20is%20shutdown%20or%20deleted.%20You%20can%20use%20a%20static%20public%20IP%20address%20to%20ensure%20that%20the%20assigned%20address%20remains%20the%20same%2C%20even%20if%20the%20associated%20resource%20is%20shutdown%20or%20deleted.%3C%2Fp%3E%3Cp%3EIn%20the%20Classic%20deployment%20model%2C%20a%20public%20IP%20address%20was%20named%20an%20instance-level%20public%20IP%20(ILPIP)%20address%20when%20assigned%20to%20a%20virtual%20machine%20or%20role%20instance%20directly%2C%20and%20a%20virtual%20IP%20address%20(VIP)%20when%20assigned%20to%20a%20cloud%20service.%20Furthermore%2C%20a%20reserved%20IP%20address%20could%20be%20associated%20to%20the%20VIP%20of%20a%20cloud%20service%20to%20ensure%20that%20the%20assigned%20address%20remained%20the%20same%20even%20if%20its%20virtual%20machines%20or%20deployments%20were%20stopped.%20These%20concepts%20have%20now%20been%20unified%20in%20the%20Resource%20Manager%20deployment%20model%20with%20the%20public%20IP%20address%20resource.%3C%2Fp%3E%22%2C%22restrictedAudience%22%3A%7B%7D%2C%22skuId%22%3A%22PublicIPAddress-ARM%22%2C%22planId%22%3A%22PublicIPAddress-ARM%22%2C%22legacyPlanId%22%3A%22Microsoft.PublicIPAddress-ARM%22%2C%22keywords%22%3A%5B%5D%2C%22type%22%3A%22None%22%2C%22leadGeneration%22%3Anull%2C%22testDrive%22%3Anull%2C%22categoryIds%22%3A%5B%22networking%22%5D%2C%22conversionPaths%22%3A%5B%5D%2C%22metadata%22%3A%7B%7D%2C%22uiDefinitionUri%22%3A%22https%3A%2F%2Fcatalogartifact.azureedge.net%2Fpublicartifacts%2FMicrosoft.PublicIPAddress-ARM-1.1.5%2FUIDefinition.json%22%2C%22artifacts%22%3A%5B%7B%22name%22%3A%22PublicIPAddress%22%2C%22uri%22%3A%22https%3A%2F%2Fcatalogartifact.azureedge.net%2Fpublicartifacts%2FMicrosoft.PublicIPAddress-ARM-1.1.5%2FPublicIPAddress.json%22%2C%22type%22%3A%22Template%22%7D%5D%2C%22version%22%3A%221.1.5%22%2C%22itemName%22%3A%22PublicIPAddress-ARM%22%2C%22isPrivate%22%3Afalse%2C%22isHidden%22%3Afalse%2C%22hasFreeTrials%22%3Afalse%2C%22isByol%22%3Afalse%2C%22isFree%22%3Afalse%2C%22isPayg%22%3Afalse%2C%22isStopSell%22%3Afalse%2C%22cspState%22%3A%22OptIn%22%2C%22isQuantifiable%22%3Afalse%2C%22purchaseDurationDiscounts%22%3A%5B%5D%2C%22upns%22%3A%5B%5D%2C%22hasRI%22%3Afalse%2C%22stackType%22%3A%22ARM%22%7D%5D%2C%22selectedPlanId%22%3A%22PublicIPAddress-ARM%22%2C%22iconFileUris%22%3A%7B%22small%22%3A%22https%3A%2F%2Fcatalogartifact.azureedge.net%2Fpublicartifacts%2FMicrosoft.PublicIPAddress-ARM-1.1.5%2FSmall.png%22%2C%22medium%22%3A%22https%3A%2F%2Fcatalogartifact.azureedge.net%2Fpublicartifacts%2FMicrosoft.PublicIPAddress-ARM-1.1.5%2FMedium.png%22%2C%22large%22%3A%22https%3A%2F%2Fcatalogartifact.azureedge.net%2Fpublicartifacts%2FMicrosoft.PublicIPAddress-ARM-1.1.5%2FLarge.png%22%2C%22wide%22%3A%22https%3A%2F%2Fcatalogartifact.azureedge.net%2Fpublicartifacts%2FMicrosoft.PublicIPAddress-ARM-1.1.5%2FWide.png%22%7D%2C%22itemType%22%3A%22Single%22%2C%22hasNoProducts%22%3Atrue%2C%22hasNoPlans%22%3Afalse%2C%22privateBadgeText%22%3Anull%2C%22createBladeType%22%3A1%2C%22offerType%22%3A%22None%22%2C%22useEnterpriseContract%22%3Afalse%2C%22hasStandardContractAmendments%22%3Afalse%2C%22standardContractAmendmentsRevisionId%22%3A%2200000000-0000-0000-0000-000000000000%22%2C%22supportUri%22%3Anull%2C%22galleryItemAccess%22%3A0%2C%22privateSubscriptions%22%3A%5B%5D%2C%22isTenantPrivate%22%3Afalse%2C%22hasRIPlans%22%3Afalse%7D/id/PublicIPAddress-ARM/resourceGroupId//resourceGroupLocation//dontDiscardJourney%7E/false" rel="ugc nofollow">Public IP Address ", allows me to add a public statis IP address for a virtual network gateway (VNG?). I know it's possible to apply a static IP to a VM. How does one create or configure a VNG? or Azure VNet? to apply a static IP to a Storage endpoint? I read these, but they were not helpful: https://social.msdn.microsoft.com/forums/en-US/b7dbea96-5349-45c6-8774-f8c766d08e31/help-assign-static-ip-to-a-blob-storage-account?forum=windowsazuredata https://stackoverflow.com/questions/35979724/virtual-public-ip-address

@ozbobwa Thank you for reaching out to Microsoft Q&A. I understand that you want to allocate a static Public IP address to your Storage Blob. Currently we are still unable to assign a public IP to the blob storage. You could provide the feedback to our product team via Ideas · Community (azure.com). SFTP Enabled Azure Storage: How to assign a static public IP? - Microsoft Q&A https://social.msdn.microsoft.com/Forums/lync/en-US/a12c2e78-4b7b-4703-b217-671572ec2523/assign-static-ip-to-a-blob-storage-account Hope this helps. Please let us know if you have any further questions and we will be glad to assist you further. Thank you! Remember: Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how . Want a reminder to come back and check responses? Here is how to subscribe to a notification.

How to allocate azure storage a static public IP address?

ozbobwa 16

How do I set a public static IP address to a storage account?

I have 'blobstorageaccountname.blob.core.windows.net', I want to choose a static IP Address, just like I would for an Azure VM.

In Azure portal | Storage | Networking | Custom domain: it says "Configure a custom domain for accessing blob data in your Azure storage account, like www.contoso.com".

If that is possible could I allocate the custom domain a static IP address?

Is it really only blob specific, what about queue endpoints? I could configure my DNS with each endpoint having a new CNAME entry.

Azure portal | Add new resource "Public IP Address", allows me to add a public statis IP address for a virtual network gateway (VNG?). I know it's possible to apply a static IP to a VM. How does one create or configure a VNG? or Azure VNet? to apply a static IP to a Storage endpoint?

I read these, but they were not helpful:
https://social.msdn.microsoft.com/forums/en-US/b7dbea96-5349-45c6-8774-f8c766d08e31/help-assign-static-ip-to-a-blob-storage-account?forum=windowsazuredata
https://stackoverflow.com/questions/35979724/virtual-public-ip-address

ozbobwa 16 Reputation points

2022-06-10T15:47:40.45+00:00

Pls vote to add the Public Static IP feature to Storage in the Az Community Forums:

https://feedback.azure.com/d365community/idea/ffd48800-d4e8-ec11-a81b-0022484ee92d
risolis 8,701 Reputation points

2022-06-11T05:45:13.6+00:00

Thanks for bringing our attention on this : )

Cheers,

1 answer

SaiKishor-MSFT 17,176 Reputation points

2022-06-01T17:41:30.007+00:00

@ozbobwa Thank you for reaching out to Microsoft Q&A. I understand that you want to allocate a static Public IP address to your Storage Blob.

Currently we are still unable to assign a public IP to the blob storage. You could provide the feedback to our product team via Ideas · Community (azure.com).
SFTP Enabled Azure Storage: How to assign a static public IP? - Microsoft Q&A
https://social.msdn.microsoft.com/Forums/lync/en-US/a12c2e78-4b7b-4703-b217-671572ec2523/assign-static-ip-to-a-blob-storage-account

Hope this helps. Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.
Please sign in to rate this answer.
ozbobwa 16 Reputation points

2022-06-02T01:21:57.38+00:00

As per @SaiKishor-MSFT 's answer the Azure Storage service does not support public IPs,
but
Azure API management does.

So if I pay for that service and a public static IP, then create an 'pass through' endpoint for storage I will be able to get a static IP for all my storage endpoints.

The challenge now is how to set values in my client application app.config for "AzureWebJobsStorage", so that it will go through my API Management for each endpoint type. I am currently using a generic connection not specifying the endpoints, so each client will need updating to use the 'explicit storage endpoint connection string

Alternatively I'll investigate dotnet YARP as a reverse proxy hosted on a Azure WebApp

ozbobwa 16 Reputation points

2022-06-02T01:37:44.243+00:00

re: 'unable to assign public ip to blob storage', there are other solutions, with other azure resources.

url to ''Community(azure.com) broken" as 'learn.microsoft.com' route it through a service that is broken:
The URL you posted is:
https://urlisolation.com/browser?clickId=367C72C7-42BC-493F-BAFC-3C9E2D9683AD&traceToken=1654105191%3Bappliedmaterials_hosted%3Bhttps%3A%2Ffeedback.azure.com%2Fd365co&url=https%3A%2F%2Ffeedback.azure.com%2Fd365community%2F
and falls back to : https://www.proofpoint.com/us

Link to other post 'how to assign a static public ip' = poor answer, with broken links to https://feedback.azure.com/forums/217298-storage/suggestions/11220711--request-please-implement-static-ip-address-or-re which 404's

https://feedback.azure.com/community/ broken and 404's

https://feedback.azure.com/ redirects to: https://feedback.azure.com/d365community

what is a 'd365community' i don't feel safe posting there.

SaiKishor-MSFT 17,176 Reputation points

2022-06-02T07:10:41.837+00:00

@ozbobwa We apologize for the broken links. I have updated the answer with the right website where you can post your ideas for the product team.

The reason you are seeing broken links to feedback.azure.com is because the feedback website has moved to a new website i.e., the IDEAS site- https://feedback.azure.com/d365community/ which is the correct site to post feedback and Ideas which the PG team can look into.

If you do not feel safe to post it there, I will provide this feedback to the team myself internally. Regarding usage of API management, I will reach out to the API Management team for alternative suggestions for this requirement and will get back to you soon with their suggestions.

If you have any other questions or feedback, please do let us know. Thank you!

risolis 8,701 Reputation points

2022-06-10T10:26:49.887+00:00

https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-static-website

ozbobwa 16 Reputation points

2022-06-10T15:30:54.133+00:00

Yes the Azure Blob storage does have a static website feature. It also does not have a static public IP facility.

risolis 8,701 Reputation points

2022-06-11T05:13:46.627+00:00

Have you considered this solution?

https://azure.microsoft.com/en-us/blog/bring-your-own-ip-addresses-byoip-to-azure-with-custom-ip-prefix/

Onboarded IPs can be associated with any resource that supports Standard SKU public IPs, such as virtual machines, Standard Public Load Balancers, Azure Firewalls, and more.

Thanks : )

BR,

ozbobwa 16 Reputation points

2022-06-13T04:52:26.97+00:00

Thx for the suggestion BR.
If the client requesting that my Azure Storage resources exist at a known IP address, were requesting that the IP Address be within their own corporate IP Address range, this new (March 2022) BYOIP feature would be a good solution.

For my situation I am searching for an even simpler solution. An Azure solution that would (cost effectively) allow me to specify a fix IP address to my Azure storage resource for Blob/Q/Files endpoints.

Sumarigo-MSFT 43,401 Reputation points Microsoft Employee

2022-06-22T05:05:32.127+00:00

@ozbobwa Apologies for the delay response! You cannot have a static IP for the storage account. Unfortunately we do not support this.

We have informed to product team regarding you request on this feature, they are looking on it. I don't any ETA/Update on this for now, however I would recommended you to please Subscribe to notifications to stay informed. Get the latest updates on Azure products and features to meet your cloud investment needs.

https://azure.microsoft.com/en-in/updates/
Please let us know if you have any further queries. I’m happy to assist you further.

Sumarigo-MSFT 43,401 Reputation points Microsoft Employee

2022-07-11T11:47:54.763+00:00

@ozbobwa Apologies for the delay response here!

I do not understand how Azure API management works so I don’t get the full picture about how it could be used as a ‘pass through’ endpoint for storage. But for the connection string, SDK is not the only way to talk to storage. If you do pure http calls you should not need to follow the connection string format.

BTW May I know why static IP address needed in your scenario? Sounds like they’re using SDK with connection string still. Having a static IP or not should not change the way they use storage AFAIK.
Sign in to comment