How to connect to a on prem SAP system and run a RFC function from Azure VM

Riyan Das 30

we are trying to move our on prem java web application running on apache tomcat to Azure VM. This application makes RFC(Remote function call) to on prem SAP systems to do some data transformation. Now if we move this solution to azure what are the options to connect to the on prem SAP system to make RFC calls ?

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-03-25T02:04:47.4633333+00:00

Hello, @Anonymous !

If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

Accepted answer

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-03-23T19:17:54.65+00:00
Hello, @Das, Riyan !
Edit: I've had this verified by a couple experts in this area so I'm going to move this to an answer for additional visibility. If you have any questions about ExpressRoute or site-to-site VPNs, feel free to start a new thread and we'd be happy to work with you!

How do I connect to a on prem SAP system and run an RFC function from an Azure VM?

Similar to what @JimmySalian-2011 suggested, the recommendation I received was to use a means to connect on-premises users and systems to Azure with either site-to-site VPN or express routes. With that, if the on-prem system is reachable by the Azure web app, RFC connection should be possible provided that networking firewall allows the connection.

What is Azure ExpressRoute?

Tutorial: Create a site-to-site VPN connection in the Azure portal
Please sign in to rate this answer.

1 person found this answer helpful.
Riyan Das 30 Reputation points

2023-03-26T07:06:46.9133333+00:00

It might be a rookie question but I I have a few regarding Site to site VPN.

if want to connect our java web app running in azure VM to different clients sites dynamically depending upon the request received , is this possible?

If multiple clients have same CIDR in their side of VPN then how to connect to different client from same azure VM ?

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-03-30T07:18:17.37+00:00

Hello, @Das, Riyan !

Thank you for being patient! These are excellent questions and they would be perfect for networking. While I believe you can use Application Gateway to route traffic based on the URL and connect to different clients from the same VM using Azure VPN Gateway, you'd want to ask a new question using the networking tag (this also helps other people who may be searching for the same answer).

Riyan Das 30 Reputation points

2023-03-30T08:04:22.4166667+00:00

Thank you for your response. but I think for URL path based routing the destination VMs for different paths should be different also.

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-03-30T17:08:00.42+00:00

My apologies, @Das, Riyan ! Networking is outside my area of specialization but networking specialists should be able to point you in the right direction. Let me know when you start a new thread and I'll make sure that we get the appropriate people to look at it.

Riyan Das 30 Reputation points

2023-04-03T05:05:42.0266667+00:00

As per your suggestion I have posted a new question. please find the link

https://learn.microsoft.com/en-us/answers/questions/1194597/connecting-to-multiple-clients-dynamically-in-site?source=docs&sharingId=6F833E383F9ADE33

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-04-03T23:57:28.95+00:00

Hello, @Das, Riyan ! It looks like Gita is working through the networking portion of this solution with you.
Sign in to comment

1 additional answer

JimmySalian-2011 41,926 Reputation points

2023-03-20T06:39:05.4566667+00:00

Hi Riyan,

I will suggest you to explore Azure VPN gateway solution between the Azure and Onpremise Network - detailed design and requirements over here - https://learn.microsoft.com/en-us/microsoft-365/enterprise/connect-an-on-premises-network-to-a-microsoft-azure-virtual-network?view=o365-worldwide

Azure VPN is encrypted so traffic is secured and you can check VPN GW options over here -https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Riyan Das 30 Reputation points

2023-03-20T11:59:56.77+00:00

Yes, That is one option that we are exploring. but what about logic app with SAP connector? will that be a possible solution here?

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-03-22T06:46:30.9666667+00:00

Hello, @Das, Riyan !

SAP is outside my area of expertise however this article on SAP on Azure Network connectivity and Security seemed to provide extensive references for on-premises to Azure SAP even if I didn't see anything regarding Azure to on-premises SAP. Still, it may be worth a look:

https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-on-azure-network-connectivity-and-security/ba-p/2713184

Riyan Das 30 Reputation points

2023-03-22T07:41:22.65+00:00

Thank you for sharing this. but I think this article talks about moving SAP to Azure. but our requirement is to host the web application in azure and talk to on premise SAP system. and there will be many such different SAP systems lying on different client network that our application needs to connect to

kobulloc-MSFT 23,656 Reputation points Microsoft Employee

2023-03-22T19:08:49.2566667+00:00

Hello, @Das, Riyan !

Yeah, I wish I had better resources I could give you. SAP is in a bit of a unique area where it has its own documentation and specialization. I'm trying to track down some experts in this area to see if I can get you a better answer here.
Sign in to comment