AKS deployed application to access on-prem server

Question

AKS deployed application to access on-prem server

Santhi Dhanuskodi 325

Hi,

I want to connect to on-prem sql server from a .net application which is deployed in AKS.

We already have Azure relay/hybrid connection setup for the same, but that requires azure app service. I am looking for options to connect from AKS deployed app, atleast forward sql operations to azure relay/hybrid Connection manager

Please provide solutions/suggestions.

AgaveJoe 30,126 Reputation points

2024-05-16T13:17:30.7866667+00:00

See if the following documentation is what you're looking for. It requires installing gateway software on a server.

https://learn.microsoft.com/en-us/fabric/data-factory/how-to-access-on-premises-data

I use existing a REST services to connect Azure Data Factory to on-premises data. This is a standard multi-tier design.

Otherwise, perhaps read the Azure relay/hybrid connection documentation which has many examples.

https://learn.microsoft.com/en-us/azure/azure-relay/relay-hybrid-connections-protocol

https://learn.microsoft.com/en-us/azure/azure-relay/relay-what-is-it

https://github.com/Azure/azure-relay/tree/master/samples/hybrid-connections/dotnet

I did not look too much into the relay/hybrid but it seems it can be done but you'll have to write a bit of code.
Santhi Dhanuskodi 325 Reputation points

2024-05-16T14:53:41.35+00:00

I am looking for connecting from AKS deployed solution. These links dont help.
kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2024-05-19T17:28:56.1166667+00:00

Hello, @Santhi Dhanuskodi !

If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

1 answer

Your answer

AgaveJoe 30,126 Reputation points

2024-05-16T13:17:30.7866667+00:00

See if the following documentation is what you're looking for. It requires installing gateway software on a server.

https://learn.microsoft.com/en-us/fabric/data-factory/how-to-access-on-premises-data

I use existing a REST services to connect Azure Data Factory to on-premises data. This is a standard multi-tier design.

Otherwise, perhaps read the Azure relay/hybrid connection documentation which has many examples.

https://learn.microsoft.com/en-us/azure/azure-relay/relay-hybrid-connections-protocol

https://learn.microsoft.com/en-us/azure/azure-relay/relay-what-is-it

https://github.com/Azure/azure-relay/tree/master/samples/hybrid-connections/dotnet

I did not look too much into the relay/hybrid but it seems it can be done but you'll have to write a bit of code.
Santhi Dhanuskodi 325 Reputation points

2024-05-16T14:53:41.35+00:00

I am looking for connecting from AKS deployed solution. These links dont help.
kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2024-05-19T17:28:56.1166667+00:00

Hello, @Santhi Dhanuskodi !

If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

Answer 1

Bruce (SqlWork.com) 77,686 Volunteer Moderator

Azure relay/hybrid not supported by containers as it requires support code (a tcp reverse proxy client) in the app service hosting. that is, its an app service feature only. there are samples of calling the hybrid connection directly, so in theory you could write the sqlserver reverse proxy client yourself and host in the container.

https://github.com/Azure/azure-relay/tree/master/samples/hybrid-connections/dotnet

you will probably need a more traditional vpn solution:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

Santhi Dhanuskodi 325 Reputation points

2024-05-17T12:40:22.4966667+00:00

Is it possible to have Azure relay endpoint as a connection string, and it will work from AKS deployed solution?
Bruce (SqlWork.com) 77,686 Reputation points Volunteer Moderator

2024-05-17T15:16:19.5166667+00:00

No, the relay connection is a url and websocket connection, while Sqlserver is an ipaddress and port socket connection.
Santhi Dhanuskodi 325 Reputation points

2024-05-20T10:08:07.6566667+00:00

you had mentioned as below

"you will probably need a more traditional vpn solution:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

"even if I implement reverse proxy, it requires azure VPN. Is that what you are saying?

What abt network, scalability and logging, failures etc , other aspects of app service, how that can be handled?

Is it going to be a week/month work for implementing reverse proxy? or its a huge implementation?
Bruce (SqlWork.com) 77,686 Reputation points Volunteer Moderator

2024-05-20T16:15:07.1666667+00:00

azure vpn gateway is a hardware solution. you just buy the vpn devices, install and configure.

a azure relay is a software solution. how long the project to write your own takes depends on how well you understand writing network code. you will find more sample/open source code for linux based solutions.

also you should be able to buy a 3rd party software vpn solution, but we can not recommend on this site.

Share via

AKS deployed application to access on-prem server

1 answer

Your answer