Action required for your Azure SQL Database service

Question

Action required for your Azure SQL Database service

Anonymous

You're receiving this notification because you use Azure SQL Database.

To improve performance and reduce login latency, all Azure SQL Database traffic in the listed regions will be migrated to Gateway IP address subnets on or after 31 August 2023. As a result, the public IP addresses of your SQL databases in these regions may change.

Regions:Central US

To avoid service disruptions, update your network configuration to allow communication with all Gateway IP address subnets in the listed regions by 31 August 2023 as outlined in our documentation.

If you use zone redundant configuration in SQL Database, ensure that your client can communicate with all gateways in their respective region.

Please let us know action is actually required from DBA prospective?

JulienMERICE-2626 0 Reputation points

2023-08-04T12:00:52.8633333+00:00

Hello, if we only use the Azure SQL Database service with a private endpoint, are we concerned?

Thank you.
SSingh-MSFT 16,461 Reputation points Moderator

2023-08-06T07:33:46.8433333+00:00

Hi Priyanka Roy (ns),

Following up to see if the below suggestions helped. If this answers your query, do click Accept Answer and Mark Helpful for the same. And, if you have any further query do let us know.

2 answers

Your answer

JulienMERICE-2626 0 Reputation points

2023-08-04T12:00:52.8633333+00:00

Hello, if we only use the Azure SQL Database service with a private endpoint, are we concerned?

Thank you.
SSingh-MSFT 16,461 Reputation points Moderator

2023-08-06T07:33:46.8433333+00:00

Hi Priyanka Roy (ns),

Following up to see if the below suggestions helped. If this answers your query, do click Accept Answer and Mark Helpful for the same. And, if you have any further query do let us know.

Answer 1

SSingh-MSFT 16,461 Moderator

Hi Priyanka Roy (ns),

Welcome to Microsoft Q&A forum.

As I understand, you want to know what actions are needed to be performed for Azure SQL Database on the notification received.

The changes that needs to be done are listed in our docs here - https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-architecture?view=azuresql-db#gateway-ip-addresses

Logins for SQL Database or dedicated SQL pools (formerly SQL DW) in Azure Synapse can land on any of the Gateway IP address subnets in a region. For consistent connectivity to SQL Database or dedicated SQL pools (formerly SQL DW) in Azure Synapse, allow network traffic to and from all the Gateway IP address subnets in a region.

Hope this helps. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Thanks

Vishnu K 1 Reputation point

2023-08-07T08:24:40.31+00:00

Hi, @SSingh-MSFT

We also got the same warning [For our resource in West US]. Based on the information available in this thread we configured the values in the "Gateway IP Addresses" column for the region WestUS, as our resources are in WestUS.

Also, In this link, we came to know that "Microsoft strongly encourage customers to move away from relying on any individual Gateway IP address (since these will be retired in the future) and instead allow network traffic to reach all the Gateway IP address subnets in a region." whereas we are still following individual Gateway IP address rule.

Believe that it is not going to be an immediate change, it wil be very helpful if you could assist with link or something on how we can switch to "Gateway IP address subnets" from "Individual IP Address"
SSingh-MSFT 16,461 Reputation points Moderator

2023-08-10T04:13:02.5366667+00:00

Hi Priyanka Roy (ns), Vishnu K,

Thanks for your patience.

It is recommended by internal team to raise support case if you need further assistance on this.

Let us know if you are able to raise support case, if not we could look for other options to unblock you.

Thank you.

Answer 2

Alberto Morillo 35,506 MVP Volunteer Moderator

I have received similar emails in the past. The only thing I do is add the IPs of the new gateways on the firewall rules on the Azure SQL Database logical server as shown on the image below.

User's image

Please add these IP addresses to your firewall 52.246.152.0, 20.38.144.1. These IP addresses are associated to US Central Gateways.

You do not have to do anything else. Based on my experience everything keeps working as usual.

Oscar Ponce Samayoa 0 Reputation points

2023-08-01T22:28:59.55+00:00

Hi, Alberto.

How do I know what are those IP adresses of the new GWs?

Thanks in advance.
Nandan Hegde 36,886 Reputation points MVP Volunteer Moderator

2023-08-02T04:56:18.43+00:00

https://www.microsoft.com/en-us/download/details.aspx?WT.mc_id=DP-MVP-5004154&id=56519

here you would get the IP details of all Azure aspects
Alberto Morillo 35,506 Reputation points MVP Volunteer Moderator

2023-08-04T12:19:21.9733333+00:00

Thank you Nandan.

Share via

Action required for your Azure SQL Database service

2 answers

Your answer