How to integrate my existing Microsoft Fabic (Preview) Instance to a NAT Gateway

Question

Hello,

I am using Microsoft Fabric (Preview) along with Lakehouse and NoteBooks. I want to conncet to an AWS RDS from the Notebook and for that I need to whitelist the IP from Azure. The easiest way to do that is to use a NAT Gateway on the Azure side along with the Microsoft Fabric. But the Microsoft Fabric is a managed system and all I see is a "on premise data gateway" (Settings -> Manage Connections and Gateways -> on premise data gateway).

How do I integrate a NAT Gateway with an Microsoft Fabric network?

If it is that the UI for doing that is not available, will I be able to achieve the same thing using ARM template or terraform?

I don't find any modules other than fabric-capacity under Microsoft Fabric:

https://github.com/Azure/azure-data-labs-modules/tree/main/terraform/fabric/fabric-capacity

Also no Fabric ARM templates are available under:

https://learn.microsoft.com/en-us/azure/templates/

Please let me know on how to achieve routing the traffic of an existing Microsoft Fabric through a NAT Gateway.

Answer 1

Hello, @selva ! I believe this is what you are looking for. Let me know in the comments if this doesn't work for your scenario.

How do I integrate an NAT Gateway with an Azure Service Fabric network?

If you want to provide internet access to Service Fabric managed clusters without exposing them directly to the internet, you can use NAT Gateways in the following scenarios:

https://learn.microsoft.com/en-us/azure/service-fabric/how-to-managed-cluster-nat-gateway

• Attach an NAT gateway to any node type and subnet configuration under the Bring your own virtual network section of the Configure managed cluster network settings article.
• Attach an NAT gateway to secondary node types using a dedicated subnet as outlined in the Bring your own Azure Load Balancer section of the Configure managed cluster network settings article. When you add your own load balancer and NAT gateway, you get increased control over your network traffic.

Bring your own virtual network with NAT gateway

https://learn.microsoft.com/en-us/azure/service-fabric/how-to-managed-cluster-nat-gateway#bring-your-own-virtual-network-with-nat-gateway

You'll need both a virtual network and a load balancer, and you'll need to complete the following tasks to bring in your own virtual network with NAT gateway:

1. Follow the steps in the Azure NAT Gateway quickstart to create a NAT gateway.
2. Provide the Service Fabric resource provider permission to modify the NAT gateway's settings using role assignment. Follow the first two steps in Bring your own virtual network section of the Configure managed cluster network settings article, injecting your NAT gateway's information into subnet parameters.
3. Now, you're ready to attach the NAT gateway to your virtual network's subnet. You can use an ARM template, the Azure CLI, Azure PowerShell, or the Azure portal.

Azure CLI:

az network vnet subnet update --resource-group myResourceGroup --vnet-name mvVNet --name mySubnet --nat-gateway myNATGateway

Portal:

1. On the Azure portal, navigate to your virtual network resource.
2. Under Settings, select Subnets.
3. Select the subnet you want to associate with your NAT gateway.
4. Open the NAT gateway dropdown and select your NAT gateway.
5. Click Save.

Additional Reading:

• Configure network settings for Service Fabric managed clusters
• Service Fabric networking patterns

---

I hope this has been helpful! Your feedback is important so please take a moment to accept answers.

If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!