How to connect Azure Container Instance into another grouped VM?

Question

How to connect Azure Container Instance into another grouped VM?

wolverine 0

I'm struggling to connect ACI into my Azure Virtual Machine which has mongoDB inside of it. ( normal Virtual Machine, not DB I just installed mongoDB into this VM )

What I already treid is, inbounding ACI's private / public IP in my VM ( for mongoDB ) network rule. But both private and public IP doesn't work. It only connected to the VM when I allow all the incoming Traffic in Network Rule...

I'm trying to use ACI for FE / BE application and run the Database as an isolated VM. That's why I wanna make ACI of my BE application to be connected into Virtual Machine.. with private ip.

please help with this issue.

AlaaBarqawi_MSFT 942 Reputation points Microsoft Employee

2023-12-04T11:03:19.1633333+00:00
Hi @wolverine

can you make the ACI & the VM in same subnet and allow the same subnet rule

https://learn.microsoft.com/en-us/answers/questions/1456805/how-to-connect-azure-container-instance-into-anoth

Container groups deployed into an Azure virtual network enable scenarios like:

Direct communication between container groups in the same subnet

Send task-based workload output from container instances to a database in the virtual network

Retrieve content for container instances from a service endpoint in the virtual network

Enable container communication with on-premises resources through a VPN gateway or ExpressRoute

Integrate with Azure Firewall to identify outbound traffic originating from the container

Resolve names via the internal Azure DNS for communication with Azure resources in the virtual network, such as virtual machines

Use NSG rules to control container access to subnets or other network resources
wolverine 0 Reputation points

2023-12-04T14:22:16.4633333+00:00

Hello AlaaBarqawi,

can you make the ACI & the VM in same subnet and allow the same subnet rule

=> does this mean that I need to re-create my VM and ACI under same Vnet?

I just created ACI using the subnet of the VM network, and it doesn't work as well.

When I open the inbound rule of VM to any, it works though. I guess this means there's no problem with VM side, but when the inbound rule specified for the ACI's IP address it never works. I don't exactly know what point should I closely look into.

+I don't have firewall setting for both side as well.
kobulloc-MSFT 26,846 Reputation points Microsoft Employee Moderator

2023-12-07T18:14:54.7733333+00:00

Hello, @wolverine !

If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

1 answer

Your answer

AlaaBarqawi_MSFT 942 Reputation points Microsoft Employee

2023-12-04T11:03:19.1633333+00:00

Hi @wolverine

can you make the ACI & the VM in same subnet and allow the same subnet rule

https://learn.microsoft.com/en-us/answers/questions/1456805/how-to-connect-azure-container-instance-into-anoth

Container groups deployed into an Azure virtual network enable scenarios like:

Direct communication between container groups in the same subnet

Send task-based workload output from container instances to a database in the virtual network

Retrieve content for container instances from a service endpoint in the virtual network

Enable container communication with on-premises resources through a VPN gateway or ExpressRoute

Integrate with Azure Firewall to identify outbound traffic originating from the container

Resolve names via the internal Azure DNS for communication with Azure resources in the virtual network, such as virtual machines

Use NSG rules to control container access to subnets or other network resources
wolverine 0 Reputation points

2023-12-04T14:22:16.4633333+00:00

Hello AlaaBarqawi,

can you make the ACI & the VM in same subnet and allow the same subnet rule

=> does this mean that I need to re-create my VM and ACI under same Vnet?

I just created ACI using the subnet of the VM network, and it doesn't work as well.

When I open the inbound rule of VM to any, it works though. I guess this means there's no problem with VM side, but when the inbound rule specified for the ACI's IP address it never works. I don't exactly know what point should I closely look into.

+I don't have firewall setting for both side as well.
kobulloc-MSFT 26,846 Reputation points Microsoft Employee Moderator

2023-12-07T18:14:54.7733333+00:00

Hello, @wolverine !

If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

Answer 1

Hi @wolverine,

i did following steps to repro the scenario can you confirm it :
1)created Vnet with 2 subnet
i used this sample as as , click deploy to Azure

https://learn.microsoft.com/en-us/samples/azure/azure-quickstart-templates/vnet-two-subnets/

after create check the subnet

User's image

2-Create linux VM inside the Subnet1 as below

User's image

3-Create ACI instance with default image inside Subnet 2

User's image

Note: you cannot create ACI inside the VM subnet

Also notice the delegation happened to subnet2 after ACI created , check the vnet1-->subnets

4-connect to the ACI instance and try to ssh or nc to the VM private IP

User's image

Connection successful using VM private IP inside Subnet1

User's image

I hope this help waiting your feedback

Share via

How to connect Azure Container Instance into another grouped VM?

1 answer

Your answer