vNet Seperation
Hello, we are an organization that has too many vnets. Do we need to separate vnets based on production, development etc? Wouldn't it be just as secure to offer NSG at the subnet level and routes per subnet to a hub vnet for traffic filtering, why would…
Static Web App connecting to Database for MySQL flexible server
I have an application written in Next.JS (using server-side-rendering / app router), on the back-end it communicates with a MySQL database (hosted on Azure). During development, I set the MySQL server to be available publicly, but just from my IP…
Missing connectivity behind by a Load Balancer
Hi all, I can't figure out why my Load Balancer answer with 502 Connection Refused . I try to describe the status : There is a rule that forward traffic from port 80 to port 8080 I'm sure that the service is waiting on port 8080 on AKS cluster…
Can you override service endpoints use of IPv6
Hello, I don't think it is possible since it defeats the purpose of using a service endpoint but, is there a way to override the use of the Azure assigned IPv6 IP when Microsoft.web service endpoint is enabled? Having Microsoft.web service endpoint…
SSH to VM from Bastion Host Failed.
Hello, I created a test environment in preparation for a live environment and I am having trouble connecting to my virtual machines from the Bastion Host. Configuration: One VNET with 3 subnets. All the subnets have NSGs associated to them. Bastion…
Understanding Combined Costs of VNET Peering and Bandwidth for Cross-Continent Data Transfer in Azure
Hello community, On the 'Virtual Network pricing' page, the Global VNET Peering section lists 'Inbound data transfer' and 'Outbound data transfer' for Zone 1 as "$0.035 per GB" each. It also mentions that "Ingress and egress traffic is…
Azure Public IPs are identified as BOT Activity
Can MS please cleanup your side as AZURE public IPs are being tagged as BOT ACTIVITY. Some of your subscribers must be abusing your services and websites are now tagging your public IPs as BOT ACTIVITY. Is there any way to expedite the cleanup process…
Virtual Network Flow logs for Azure SQL Managed Instance Virtual Network.,
After enabling the Virtual Network Flow logs for Azure SQL Managed Instance integrated Virtual Network., the flow logs are not getting captured in Storage account.
ER Direct with FastPath on GW connection and UDRs in GW subnet
In a non-VWAN hub'n'spoke setup, can I be sure that my GW Subnet UDRs are honored, even with FastPath enabled on the ER GW connection to my ER Direct Circuit? Can I verify it in CLI somehow? Thanks! /Thomas Winther
Will there be asymmetric traffic if two tunnels have the same private address space defined or overlapped ?
Suppose I already have an S2S tunnel A on the vWAN with a private address space of 192.12.0.0/16, provided by the on-prem team, and a link IP address A. now need to create another S2S tunnel B on the same vWAN hub, with link IP address B. However, the…
Hot to use Azure Student Subscription
I’m trying to use an Azure student subscription to create a virtual network, but it doesn’t allow me, showing this error message: “The operation is not permitted for the namespace ‘Microsoft.Network’. The list of allowed provider namespaces is…
Inquiry on Primary-Failover Model and Zone Outage Handling for Azure NAT Gateway
I am seeking clarification regarding the configuration of a primary-failover model for outbound traffic using Azure NAT Gateways. Have read the document https://learn.microsoft.com/en-us/azure/nat-gateway/nat-availability-zones. Specifically, I still…
Support TLS V1.1
Hi We utilize a hardware using TLS V1.1 in a marine search & rescue environment. The hardware used is not upgradable to TLS V1.2 or later. Does Azure have any platform for legacy V1.1 equipment that are unable to transition to V1.2? We would be…
Point to site
Currently now i have VPN gateway to connecting my onprem to azure via site to site VPN. If i enabled the Point To Site to connecting home user to azure resources and to connecting to internal onprem resources, will consume extra costs or not?
Bicep to Deploy Data Factory Managed Virtual Network
I'm trying to create a bicep module that will deploy a data factory along with a managed vnet. Here's what I have: param dfName string param sqlId string resource df 'Microsoft.DataFactory/factories@2018-06-01' = { name: dfName location:…
Cannot delete subnet delegated to Microsoft.PowerPlatform/vnetaccesslinks
Hi I am trying to delete a virtual network. however, there is one subnet that is delegated to " Microsoft.PowerPlatform/vnetaccesslinks" which I cannot undelegate. How do I delete the virtual network if the subnet cannot be undelegated? I also…
Unable to delete Public IP address & virtual network subnet due to linkage with resource I can't access
I am on Microsoft Azure, trying to delete a public IP address and a virtual network subnet. I can't delete either because they are linked with "appgwLoadBalancer," a resource that I don't have access to. This is preventing me from unlinking /…
VM public IP and Subdomain bind but not accessible
Dear Team, I am new in Azure Vm, creted new VM and ip binding with godaddy domain making as subdomain but not accessible, port 80 https also shows open and IIS service running on VM. please do the needful. Regards, Nitesh
Azure Site-to-Site VPN NAT rules
Hey Guys! Im facing and issue with azure site-to-site vpn with NAT rules, I hope you can guide me to right track. My scope is to have a site-to-site connection between VNET_vpn and Remote site (its in place and works), then have the following NAT or…
Traffic Manager Failover Issue in Active/Passive Mode for Internal Servers on Azure
Hello everyone, I'm facing difficulties with configuring Azure Traffic Manager for active/passive failover between two internal web servers that are only accessible through private IP addresses. Here’s a summary of my setup: Current Infrastructure: A…