Use Azure Public IP With On Prem VM

Question

A Customer has an on prem Firewall that connects to an Azure Virtual Network that allows us to have an On Prem/Azure hybrid. My query is, if i was to provision a public IP address in azure, what would be the best way to route it to one of our on prem VMs through the site to site connection? I have had a look around and haven't seen any similar scenarios.

This would help me in a few ways

• We have run out of public IPs locally and they are rather expensive from our provider
• It would make it easier for developers to expose stuff to the outside world for lab environment

Answer 1

Hello @Taha Yaseen

I think i understand your issue

The services you are looking for is either

Azure NAT Gateway for Outbound Traffic

https://learn.microsoft.com/en-us/azure/nat-gateway/nat-overview

OR

Azure Traffic Manager

https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

Probably the second one fits your case if i understand correctly !

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Can you use any service in azure to redirect traffic coming on these IP addresses to Virtual machines running on private networks?

I am happy to proceed with any recommendations you might have.

Thanks

Answer 3

@ChaitanyaNaykodi-MSFT

@Konstantinos Passadis

Answer 4

Hello @Taha Yaseen

Yes the Solution is :

Create a VPN with Azure from the On Premises Firewall , type Site to Site VPN

https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

Provision a Load Balancer in Azure , type Public

https://learn.microsoft.com/en-us/azure/load-balancer/quickstart-load-balancer-standard-public-portal

Create a backend pool and add the virtual machine IP Addresses that you want to receive the incoming web traffic.

Create load balancing rules to define how the traffic should be routed to the VMs. Set the front-end port (e.g., port 80 for HTTP) and back-end port (the port on which your web server is listening).

OR

Create NAT Rules to redirect traffic to your VMs , it depends on the use , i can see you want Web Traffic so Load Balancing is the better option

Allow traffic from the Load Balancer to your VMs and to the Firewall , in case you pass the traffic to a Firewall first

notes : You must create Load Balancing rules on your Firewall so traffic is delivered equally if you dont have already one ....another solutions is Round Robin DNS...

Azure VPN will have the routing table in place so the n Premises IPs will be known . The Load Balancer will just send requests to a Private IP Pool ( 192.168.1.2, 1.3 , 1.4) so the VPN Gateway will send in turn the traffic to the On Premises Endpoint/Firewall.

Thats it in a High Level

We will offer any additional help , once you start ! So give it a go , with just one VM to see the drill!

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards