Connecting to App Service mySql flexible Database from outside VNet

Kenny Pak 75

A few months ago, when I created a "Web App + Database", I was later able to access the database in the Azure Web Console, click Networking, enable Public Access by IP, and then use mySql CLI from my computer to connect to the created database.

Now, I can no longer access this option in Networking on a new "Web App + Database" App Service. When creating the "Web App + Database", it defaults to a private network and I can't choose any other option.

How do I directly access an Azure Database for MySQL flexible server created with a "Web App + Database" App Service? I was not able to install any mySql tools on the VM for the web app.

Thanks for any help

Kenny Pak 75 Reputation points

2023-09-10T01:19:27.37+00:00
Ok, I found a workaround for the time being:

use "az webapp create-remote-connection" to create an SSH connection to the web app instance

ssh into the instance

apt-get install mariadb-client

This is less than ideal but will work for now

1 answer

TP 91,021 Reputation points

2023-09-10T01:39:56.7466667+00:00

Hi Kenny,

Several different options besides your workaround.

You could create the App Service and Azure Database for MySQL Flexible Server separately, which would allow you to have public access to the database server.

You could create a small VM and SSH to that and use the VM to do database tasks as needed. With a VM you would have much more freedom to install/modify things compared to your workaround.

You could set up Virtual Network Gateway which would allow you connect to the virtual network directly from your local machine via Point-to-Site connection.

Please click Accept Answer if the above was useful.

Thanks.

-TP
Please sign in to rate this answer.
Kenny Pak 75 Reputation points

2023-09-10T03:11:21.7633333+00:00

The first two would require sizable work to create private links and private networks, no? When we use "Web App + Database", it creates

Private endpoint

Virtual network

Private DNS zone

I would have to manually re-create each of these.

I will look into the 3rd option. Is that like a traditional VPN, where I need to install a VPN client on my local machine?

Thanks

Kenny Pak 75 Reputation points

2023-09-10T03:13:37.3533333+00:00

The first two would require sizable work to create private links and private networks, no? When we use "Web App + Database", it creates

Private endpoint

Virtual network

Private DNS zone

I would have to manually re-create each of these.

I will look into the 3rd option. Is that like a traditional VPN, where I need to install a VPN client on my local machine?

Oh and pay for VPN gateway hours, most of the time which will be idle.

Thanks

TP 91,021 Reputation points

2023-09-10T03:40:16.02+00:00

It's not much work, but certainly more work than letting the previous creation wizard do it.

1st option: You would need to create Virtual Network with subnets, which takes seconds + time it takes to decide on your IP addresses. When you create Azure Database for MySQL Flexible Server, the wizard will create private endpoint and private DNS if you ask it to.

After database is set up you would need to go into your app service and enable vnet integration, add the application setting for mysql connection string, etc.

2nd option: Virtual Network is already existing, so you would just create VM, which is only few minutes to be up and running if done manually through the portal. If don't create VMs very often and need to study each page to decide what options to select, it could take 15 minutes or longer.

3rd option: Yes, it is VPN with client on your local machine. Downside (besides initial set up time) is you are paying for the cost of the VPN gateway running 24x7 plus outgoing bandwidth.

TP 91,021 Reputation points

2023-09-12T08:04:06.99+00:00

@Kenny Pak Any update? Please click Accept Answer to close up this thread or if you still need assistance add a comment below.

Thank you.

TP 91,021 Reputation points

2023-09-21T03:28:05.56+00:00

@Kenny Pak Please click Accept Answer to close up this thread.

Thank you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Connecting to App Service mySql flexible Database from outside VNet

1 answer

Your answer