azure bot to web app private communication

Yazn Zamel (MiddleEast) 0

Hi There , i have a setup of resources where i have an azure bot service that is communicating with azure web app as a messaging endpoint , the azure bot and azure web app have private endpoints and are in the same subnet , once the web app is publicly accessible the azure bot is working fine but as soon as i disable the public access on the web app , the communication is no longer working even though there is a private endpoint for both of them and i there is no NSG blocking any traffic.

1 answer

Sina Salam 12,011 Reputation points

2024-06-10T21:06:21.8766667+00:00
Hello Yazn Zamel (MiddleEast),

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you would like to troubleshoot the issue with the Azure Bot Service and Azure Web App communication over private endpoints.

Solution

The first thing that could come to my mind even though you mentioned no NSG blocking traffic, double-check all NSG rules associated with the subnet and private endpoints. Sometimes default rules might interfere. So, ensure there are no Azure Firewall or other network security appliances blocking the communication.

Secondly, Azure Web Apps can be configured to restrict access to only certain IP ranges or service endpoints. Make sure the Azure Bot Service’s IP range is allowed if any such restrictions are configured. Therefore, verify that the Azure Bot Service can reach other resources in the subnet to ensure there are no underlying network issues.

Thirdly, navigate to the Azure portal, go to your VNet and check the subnets, private endpoints, and integration settings to verify VNet and Subnet Configuration.

Finally, make sure the Private DNS Zone such as privatelink.azurewebsites.net is correctly linked to the VNet and has the correct A records to review your Private DNS Zone Configuration.

References

Use the resources below for more details and step by steps configuration:

Azure Private Endpoint DNS configuration.

Integrate your app with an Azure Virtual Network.

[Troubleshoot Private Endpoint connectivity. ](https://learn.microsoft.com/en-us/azure/private-link/troubleshoot-private-endpoint

)

Accept Answer

I hope this is helpful! Do not hesitate to let me know if you have any other questions.

** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.

Best Regards,

Sina Salam
Please sign in to rate this answer.
Yazn Zamel (MiddleEast) 0 Reputation points

2024-06-11T10:14:57.1266667+00:00

thank you for your response , i want assitant on how to make azure bot communicate privately with azure web app , is there a certain configuration of direct line or app service extension to enable private communication between azure bot and web app (which is based on a linux asp)

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Sina Salam 12,011 Reputation points

2024-06-11T12:53:53.4866667+00:00

Hello Yazn Zamel (MiddleEast),

Thank you for your clarification and your feedback.

Yes, there are certain lengthy configurations, however this are the simple steps with the links (resources) below to guide you through:

Enable Direct Line Channel.

Manage Secret Keys.

Generate a Direct Line Token.

Configure Direct Line App Service Extension.

Secure your Bot and Web App.

Resources for more detail steps:

Connect a bot to Direct Line in Bot Framework SDK - Bot Service.

Direct Line Authentication in Azure AI Bot Service - Bot Service.

Private Endpoint & Direct Line App Service Extension Configuration

Direct Line App Service extension - Bot Service.

Use Web Chat with the Direct Line App Service extension in Bot - https://learn.microsoft.com/en-us/azure/bot-service/bot-service-channel-directline-extension-webchat-client?view=azure-bot-service-4.0.

How to get started with Azure Communication Services. https://www.youtube.com/watch?v=W-YWJYCS6YI.

Cheers,

Sina

Yazn Zamel (MiddleEast) 0 Reputation points

2024-06-19T09:44:27.2066667+00:00

thank you for your answer , following up on that , should the resources be in the same region and resource group or the azure bot and the azure web app can be in different regions ?

Sina Salam 12,011 Reputation points

2024-06-19T11:08:31.4233333+00:00

Hi Yazn Zamel (MiddleEast),

Regarding your question:

thank you for your answer , following up on that , should the resources be in the same region and resource group or the azure bot and the azure web app can be in different regions ?

You need to understand benefits of same region and same resources group to be certain what you want.

I can say same region and resource group for the azure bot and azure web app to reduce cost, minimizes network latency, ensuring faster response times for your users and simplify management. Also, in the resource group to reduce management overhead.

However, there might be specific cases where you would place your resources in different regions for the purpose of disaster recovery, compliance requirements, and multi-region strategy with replication and failover mechanisms.

Best Advice by practices:

Start by deploying both your Azure Bot and Azure Web App in the same region and resource group to take advantage of lower latency and cost efficiencies.

Then later increase the capacity to as many regions you can be based on your customer and some criteria listed above.

Please, close this thread by accept the answer. If there is any other question, kindly open a new thread.

Thank you and best regards.

Sina

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

azure bot to web app private communication

1 answer

Solution

References

Accept Answer

Your answer