Unable to send cloud metrics for Azure API Management self-hosted gateway

Karim Seoudy 1

reference to this guide:

https://learn.microsoft.com/en-us/azure/api-management/how-to-configure-cloud-metrics-logs

my self hosted gateway doesn't send any cloud metrics to Azure API management,

my self hosted gateway is deployed on an on-prem Kubernetes cluster which has network policies to block or whitelist ingress and egress rules, so i need to allow a specific port to allow the on-prem gateway to send metrics to azure, so which port do i need to allow in order to enable the gateway to send metrics ?

1 answer

MuthuKumaranMurugaachari-MSFT 22,141 Reputation points

2023-02-02T15:25:25.04+00:00

@Karim Seoudy Thanks for posting in Microsoft Q&A. As mentioned in your reference doc, it requires outbound connectivity to Azure on port 443.

The same has been also described in Connectivity to Azure doc which also describes about FQDN dependencies, security limitations etc. I hope this helps with your question but let me know if you face any issues or have other questions.
Please sign in to rate this answer.
Karim Seoudy 1 Reputation point

2023-02-02T15:25:41.21+00:00

@MuthuKumaran Murugaachari

i have port 443 whitelisted on the Kubernetes cluster Network Policies, and the gateway is working and reading the configurations from APIM, but i still don't get any metrics for the self hosted gateway sent to Azure, what might be the problem ?

i have this in the ConfigMap:

telemetry.metrics.cloud: "true"

MuthuKumaranMurugaachari-MSFT 22,141 Reputation points

2023-02-02T15:34:14.3466667+00:00

@Karim Seoudy Thanks for sharing the additional details. If you are able to read configurations, then it is likely that connectivity to Azure Monitor is blocked. Please validate the connectivity to IP addresses listed in https://learn.microsoft.com/en-us/azure/azure-monitor/app/ip-addresses#outgoing-ports and make sure you add regional one as well.
You can also download https://learn.microsoft.com/en-us/azure/virtual-network/service-tags-overview#discover-service-tags-by-using-downloadable-json-files and it is updated every week. Alternatively, you can subscribe to this page as an RSS feed by adding https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/azure-monitor/app/ip-addresses.md to your favorite RSS/ATOM reader to get notified of the latest changes.
Doc: https://learn.microsoft.com/en-us/azure/api-management/self-hosted-gateway-overview#connectivity-to-azure
If you still face the problem after validating the IP addresses, then I would recommend submitting a support ticket to our support team. They have the best resources to review backend logs and assist you in finding the cause. Please let me know if you need any assistance with that in case you don't have a support plan.

MuthuKumaranMurugaachari-MSFT 22,141 Reputation points

2023-02-23T16:30:06.2633333+00:00

Karim Seoudy I'm reaching out to see if you have any questions regarding the information provided. If you found the answer helpful, please consider marking it as "Yes".
Sign in to comment