Hello, I configured a Private Connection between an existing Azure App Service and a newly created Azure Database for MySQL flexible server. However, I cannot connect to my Azure Database for MySQL flexible server (through MySQL Workbench). I am receiving "Failed to connect to .... " "Unable to connect to localhost". The way I configured the Private Connection is: In my existing VNet, I created 2 new subnets: PrivateLinkSubnet (192.168.103.0/24) AppSvcSubnet (192.168.102.0/24) In my Azure Database for MySQL Flexible Server, I created a private endpoint and linked this to the Azure Database for MySQL Flexible Server. I assigned it to the subnet PrivateLinkSubnet (192.168.103.0./24) that I created above. In the DNS option, I selected "Integrate with Private DNS zone: Yes". I placed this in the same resource group as the App Service and Azure Database for MySQL Flexible Server. I unticked the box "Allow public access to this resource through the internet using a public IP address" Finally, in the existing App Service, I configured the VNet integration to use the subnet AppSvcSubnet (192.168.102.0/24) that I created above. Does anyone know what I am doing wrong? Thank you in advance.

@PeterT94 Thanks for reaching here! If you want to connect an App Services Web app to an Azure Database for MySQL - Flexible Server in a virtual network you need to follow below steps. Create a virtual network and a subnet for the web app and the database server. Create an Azure Database for MySQL - Flexible Server instance and configure it to use the subnet. Create an App Services Web app and configure it to use the subnet and the regional VNet integration feature. Update the web app's connection string to point to the database server's hostname and credentials. Test the connection from the web app to the database server using tools like MySQL Workbench or Azure Data Studio. For more details suggest you refer this detailed article- Tutorial: Connect an App Services Web app to an Azure Database for MySQL - Flexible Server in a virtual network Hope this helps, Let us know if further query or issue remains.

Unable to connect to Azure Database for MySQL flexible server

PeterT94 0

Hello,

I configured a Private Connection between an existing Azure App Service and a newly created Azure Database for MySQL flexible server. However, I cannot connect to my Azure Database for MySQL flexible server (through MySQL Workbench). I am receiving "Failed to connect to .... " "Unable to connect to localhost".

The way I configured the Private Connection is:

In my existing VNet, I created 2 new subnets:
- PrivateLinkSubnet (192.168.103.0/24)
  - AppSvcSubnet (192.168.102.0/24)
In my Azure Database for MySQL Flexible Server, I created a private endpoint and linked this to the Azure Database for MySQL Flexible Server. I assigned it to the subnet PrivateLinkSubnet (192.168.103.0./24) that I created above.
In the DNS option, I selected "Integrate with Private DNS zone: Yes". I placed this in the same resource group as the App Service and Azure Database for MySQL Flexible Server.

I unticked the box "Allow public access to this resource through the internet using a public IP address"

Finally, in the existing App Service, I configured the VNet integration to use the subnet AppSvcSubnet (192.168.102.0/24) that I created above.

Does anyone know what I am doing wrong?

Thank you in advance.

PeterT94 0 Reputation points

2023-11-17T11:32:08.09+00:00

Thank you for your reply @SnehaAgrawal-MSFT

Regarding the Web app's connection string pointing to the database server's hostname and credentials: Do I have to enter the hostname and credentials of the Azure Database for MySQL Server itself? Or the credentials of the database that I added manually to the Database Server?
SnehaAgrawal-MSFT 20,856 Reputation points

2023-11-20T10:34:26.2966667+00:00

@PeterT94 Thanks for reply! If you are following this tutorial and created an Azure Database for MySQL - Flexible Server, then use connection strings and credentials for this.

else-as this command creates settings named DBHOST, DBNAME, DBUSER, and DBPASS. If your application code is using different name for the database information then use those names for the app settings as mentioned in the code.

az webapp config appsettings set --settings DBHOST="<mysql-server-name>.mysql.database.azure.com" DBNAME="flexibleserverdb" DBUSER="<username>" DBPASS="<password>"

Let us know.
SnehaAgrawal-MSFT 20,856 Reputation points

2023-11-22T05:02:38.98+00:00

@PeterT94 Just checking if you have chance to see recent response.

Please let us know if further query or issue remains.
Nathan88 0 Reputation points

2023-11-22T13:18:43.5866667+00:00

Hello @SnehaAgrawal-MSFT , thank you, I have succesfully added the connection string and everything seems to work now!

I have one more question: I would like to do the same for a Storage Account (Blob). So basically I would like the Storage Account only to be reachable through the App Service Web App, if possible with Managed Identity (System Assigned).

Could you perhaps explain how to do this?

Thank you in advance.
SnehaAgrawal-MSFT 20,856 Reputation points

2023-11-27T08:31:12.5466667+00:00
@PeterT94 Yes, it is possible to connect a Storage Account to an App Service Web App and restrict access to the Storage Account only from the Web App.

You can use Managed Identity (System Assigned) to authenticate the Web App with the Storage Account.

Here are the high-level steps to achieve this:

Enable Managed Identity (System Assigned) for your App Service Web App. You can do this by going to the Azure portal, selecting your Web App, and then navigating to the "Identity" section under "Settings". Here, you can enable System Assigned Managed Identity.

Grant the Managed Identity access to the Storage Account. You can do this by going to the Storage Account in the Azure portal, selecting "Access Control (IAM)" and then adding a role assignment for the Web App's Managed Identity. You can use the "Storage Blob Data Contributor" role to grant read and write access to the Storage Account.

Update your Web App's code to use the Managed Identity to authenticate with the Storage Account. You can use the Azure.Storage.Blobs NuGet package to interact with the Storage Account from your Web App's code. You can use the DefaultAzureCredential class to authenticate with the Storage Account using the Web App's Managed Identity.

Configure the Storage Account firewall to only allow traffic from the Web App's outbound IP addresses. You can find the outbound IP addresses for your Web App by going to the "Properties" section of your Web App in the Azure portal.

By following these steps, you can ensure that your Storage Account is only accessible from your App Service Web App and that the Web App is authenticated using Managed Identity.

You may refer to below doc links would be helpful--

Managed Identity: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

Storage Account: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

Access Control (IAM): https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Azure.Storage.Blobs NuGet package: https://www.nuget.org/packages/Azure.Storage.Blobs/

DefaultAzureCredential class: https://docs.microsoft.com/en-us/dotnet/api/azure.identity.defaultazurecredential?view=azure-dotnet

1 answer

SnehaAgrawal-MSFT 20,856 Reputation points

2023-11-17T10:44:43.8766667+00:00
@PeterT94 Thanks for reaching here! If you want to connect an App Services Web app to an Azure Database for MySQL - Flexible Server in a virtual network you need to follow below steps.

Create a virtual network and a subnet for the web app and the database server.

Create an Azure Database for MySQL - Flexible Server instance and configure it to use the subnet.

Create an App Services Web app and configure it to use the subnet and the regional VNet integration feature.

Update the web app's connection string to point to the database server's hostname and credentials.

Test the connection from the web app to the database server using tools like MySQL Workbench or Azure Data Studio.

For more details suggest you refer this detailed article- Tutorial: Connect an App Services Web app to an Azure Database for MySQL - Flexible Server in a virtual network

Hope this helps, Let us know if further query or issue remains.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

Unable to connect to Azure Database for MySQL flexible server

1 answer