How can Azure VM with private IP connect to Azure Storage account via internet

Question

Hi Team,

i have a Redhat Based VM, which is HPE VSA. now this is deployed in customer Azure environment and there is no public IP connected to VM. i want this VM to connect to an Azure storage account. This storage account reads data from on-prem HPE Storage and storage account firewall is set for inbound connection from anywhere and this is used by HPE storage to connect to storage account.

On-prem HPE storeonce storage and Azure VM VSA use combination of storage account access key and container name to connect to the storage account and appear as a cloud store inside HPE storeonce storage and Azure VM VSA.

is there anyway to connect to storage account public end point, from azure VM using it private IP address, at same time allowing on-prem HPE storage to continue accessing storage account via internet.

Answer 1

Yes - you can configure service endpoint (to route the traffic from the VM to the Azure Storage account via backbone) and Azure Storage firewall (to allow incoming traffic via public endpoint from the public IP address you designate) at the same time (that's the Enabled from selected virtual networks and IP addresses option on the Networking page of the storage account)

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

@Marcin Policht

Hi Marcin, thank you for your earlier response.

i just want to clarify one more related query.

i have a Site to site VPN from om-prem to Azure. i have azure storate account which is set to accept traffic from anywhere. i transfer some data from on-prem to Azure storage account, this will be transferred over the internet to public endpoint of storage account right ?

Also when i this same data from Azure storage account is read by another Azure VM in same region, will this traffic stay on the Microsoft backbone network or transferred to Azure VM via internet ?

if traffic is transferred via internet from azure storage to azure VM, in this case is Azure VM connecting to storage account public endpoint ?