Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,447 questions
Issue with API Management Unable to Connect to Backend API When Using Private Endpoint Configuration
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 65%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETK%3C/text%3E%3C/svg%3E)
Tomohiro Kajita
20
Reputation points
Issue with API Management Unable to Connect to Backend API When Using Private Endpoint Configuration
We have configured our API Management instance to receive traffic exclusively through a private endpoint, following the guidance provided in the following Microsoft documentation:
Enable private link for Azure API Management
Our API Management SKU is Standard.
When attempting to access the backend API (hosted on a VM server) via API Management, which itself is accessed through an Application Gateway, we encountered the following error messages:
-
"Unable to connect to the remote server" -
"Error occurred while calling backend service." -
"An attempt was made to access a socket in a way forbidden by its access permissions 10.0.1.4:7443"
Note:
10.0.1.4:7443is the destination configured for the backend API.
We would like to understand what configuration might be missing or misconfigured in order to resolve this issue, while keeping the private endpoint setup for API Management enabled.
Any guidance or recommendations would be greatly appreciated.
Azure API Management
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 5%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Praveen Kumar Gudipudi 1,875 Reputation points Microsoft External Staff Moderator2025-06-27T13:28:10.95+00:00 hello Tomohiro Kajita,
Thanks for reaching out.
The error message you are encountering suggests that there is an issue with accessing the specified socket, which may be due to firewall settings or network permissions. Here are some steps you can take to troubleshoot this issue:
- Check Firewall Settings: Ensure that the firewall is not blocking the port (7443 in your case). You may need to open this port in your firewall settings.
- Verify Service Availability: Make sure that the service you are trying to connect to is running and accepting connections on the specified IP address and port.
- Network Permissions: Confirm that the network permissions allow access to the socket. This could involve checking user permissions or group policies that might restrict access.
- Use Netstat: Utilize the
netstat.exeutility to check if the service is listening on port 7443. This can help you determine if the service is correctly configured. - Test Connectivity: You can use tools like Portqry to test TCP connectivity to ensure that there are no network devices blocking access to the specified port.
If these steps do not resolve the issue, you may need to consult the logs for more detailed error messages or seek further assistance.
Sign in to comment
Sign in to answer