Unable to retrieve SDKs from oryx-cdn with VNet integration

Question

Hello,

We need helps to troubleshooting the "Unable to retrieve SDKs from oryx-cdn" issue while deploying the Azure Function with a VNet and in a app service plan tier B3.

• We are aware the network dependency to oryx-cdn.microsoft.io as mentioned in the doc.
• https://oryx-cdn.microsoft.io is well whitelisted by the firewall. In the host ( via KUDU UI/SSH ), CURL https://oryx-cdn.microsoft.io tells that the oryx cdn is accessible.

root@7cdde5d43bd2:/# curl https://oryx-cdn.microsoft.io

<?xml version="1.0" encoding="utf-8"?><Error><Code>InvalidQueryParameterValue</Code><Message>Value for one of the query parameters specified in the request URI is invalid.

RequestId:3c99b046-701e-0090-73aa-e43233000000

Time:2024-08-02T07:04:53.6667287Z</Message><QueryParameterName>comp</QueryParameterName><QueryParameterValue /><Reason /></Error>

• The function app is in an app service plan B3. We tried P3 but the issue persists.
• There is no Network security group configured.
• There is no NAT gateway.
• There is an user defined route. All traffic is sent forward to the firewall. The Oryx CDN is well whitelisted by the firewall ( since curl ok)
• The build error

Command: oryx build /tmp/zipdeploy/extracted -o /tmp/build/expressbuild --platform python --platform-version 3.11 -i /tmp/8dcb251b8c71745 -p packagedir=.python_packages/lib/site-packages

...

Oryx Version: 0.2.20240424.1, Commit: d37b2225a252ab2c04b4726024d047cf01ea1318, ReleaseTagName: 20240424.1

...

Error: System.AggregateException: Http request to retrieve the SDKs available to download from 'https://oryx-cdn.microsoft.io' failed. Please ensure that your network configuration allows traffic to required Oryx dependencies, as documented in 'https://github.com/microsoft/Oryx/blob/main/doc/hosts/appservice.md#network-dependencies

System.AggregateException: One or more errors occurred. (A task was canceled.)

...

I do not know how can we debug the issue ? I will be grateful if you can give us some advice :)

Answer 1

Hello @CC TAN

Based on the information you provided, it seems like you have already whitelisted oryx-cdn.microsoft.io by the firewall and confirmed that it is accessible via curl.

Since you are still experiencing issues, I would recommend checking if there are any network security groups or NAT gateways configured that might be blocking the traffic.

If there are no network security groups or NAT gateways configured, you can try removing the user-defined route temporarily to see if it resolves the issue. If the issue persists, you can try checking the logs for any additional error messages or try deploying the Azure Function without VNet integration to see if it works.

I hope this helps! Let me know if you have any other questions.