App Service Outbound connectivity not routing through VNET

Question

I have configured keyvault with allow public access from vnet and specific ip address
added the subnet delegated to app services

created a app service with vnet integration and the outbound traffic to key vault is still going through public and not through vnet.

Tried

1.created route table in app service delegated subnet to go through firewall and allow firewall rules from app services to keyvault

2.Created application configuation to force traffic to vnet using application configuration WEBSITE_VNET_ROUTE_ALL to 1

note: my keyvault doesnt have private endpoint and i want app services to go through service endpoint and access keyvault secrects.

Answer 1

Hi Syed Munaz,

To be able to reach the keyvault privately you need the private endpoint on the keyvault. The keyvault gets a private ip address and you can refer to it from your app service.

If you want to use the name of the keyvault you need to add a private dns zone for keyvaults and associate the private endpoint to the dns zone.