Azure Virtual Machine unable to connect Access Restricted App Service

Vinson Yuen 121 Reputation points
2021-04-07T20:36:02.75+00:00

I have an Azure App Service which I limit access by IP using the Networking Access restrictions. The Access restrictions were working without an issue until March 25th 2021. Since then I am no longer able to access the App Service from an Azure Virtual Machine with a static IP Address. The rejected IP Addresses found under Configuration and Management shows a new IPv6 Address that I believe is the Virtual Machine. Adding the IPv6 address does not resolve my 403 error and the virtual machine is still unable to access the Web API.

I've tried adding the AzureCloud Service Tag as well hoping the VM would be include under that umbrella but had no luck.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,125 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
6,874 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kllin Nunes 226 Reputation points
    2021-04-08T13:18:51.317+00:00

    Hi @Vinson Yuen ,

    How many rules are there in the App Service's Access Restrictions?
    Have you checked which Azure Virtual Machine's IP is in priority over the general blocking rule?
    Have you tried using the Private Endpoins for Azure Web App?

    Regards,

    Kllin Nunes

  2. Sam Pettigrove 0 Reputation points
    2023-02-13T22:26:06.61+00:00

    To anyone seeking an answer for this, a possible solution:
    Add an access rule to the App Service that allows access to the subnet that the VM sits on.

    An example access rule:
    Name: VM Subnet
    Action: Allow
    Priority: 300
    Description: VM Subnet
    Type: Virtual Network
    Subscription: [ YOUR SUBSCRIPTION ]
    Virtual Network: [VM VIRTUAL NETOWORK]
    Subnet: [VM SUBNET]

    0 comments