question

VinsonYuen-8877 avatar image
0 Votes"
VinsonYuen-8877 asked VinsonYuen-8877 commented

Azure Virtual Machine unable to connect Access Restricted App Service

I have an Azure App Service which I limit access by IP using the Networking Access restrictions. The Access restrictions were working without an issue until March 25th 2021. Since then I am no longer able to access the App Service from an Azure Virtual Machine with a static IP Address. The rejected IP Addresses found under Configuration and Management shows a new IPv6 Address that I believe is the Virtual Machine. Adding the IPv6 address does not resolve my 403 error and the virtual machine is still unable to access the Web API.

I've tried adding the AzureCloud Service Tag as well hoping the VM would be include under that umbrella but had no luck.

azure-virtual-machinesazure-webapps-apisazure-webapps-ip-addresses
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

kllin avatar image
0 Votes"
kllin answered VinsonYuen-8877 commented

Hi @VinsonYuen-8877 ,

How many rules are there in the App Service's Access Restrictions?
Have you checked which Azure Virtual Machine's IP is in priority over the general blocking rule?
Have you tried using the Private Endpoins for Azure Web App?

Regards,

Kllin Nunes

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

There is only one rule in the Access Restrictions allowing the IP address of the Azure Virtual Machine. All other traffic is blocked.

I have not tried using the Private Endpoints of Azure Web App. I would prefer to get this working under the current setup rather than testing and building a new method that may not work. Azure support was kind enough to give me a support ticket to look into the matter. I'm waiting to hear back from the shortly.

0 Votes 0 ·