Confusion on vnet client server without public access

Question

Hi

A simple scenario but some clarity is required please.

client-server linux webapps in the same vnet and subnet

client is on browser, makes a request to the server

My settings:

• public access restricted : does it mean vnet is granted by default ?
• Cors issue from server, even it's set to client

I don't want private endpint, is it possible to the client to call the server on vnet internally (no public exposure), maybe service endpoint ?

Answer 1

Hello Karim Tazibt

Let's clarify your questions:

• If you restrict public access, it does not automatically grant VNet access. You need to set up VNet Integration or use Private Endpoints.
  https://learn.microsoft.com/en-us/azure/app-service/networking-features
• If you want to avoid public exposure, consider Private Endpoints, App Gateway with VNet integration, or use an internal load balancer to handle internal traffic within the VNet.
• CORS issues could be caused by incorrect settings in the server or incorrect domain/subdomain configurations in the CORS settings of the application or App Service.
  https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-rest-api
• Service endpoint is similar option to private endpoint. https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/service-endpoints-vs-private-endpoints/ba-p/3962134