Hello @David Chapman , apologies for the delayed response here. Just to confirm If I have understood the question correctly, I see that you have web server hosted on a RHEL server VM on Azure (with only private IP address) and you want to access it via your local machine. If my understanding is correct and as you mentioned correctly this is not possible using Azure bastion but there are multiple ways to achieve this without assigning a public IP to the VM's itself.
- You can use Azure VPN Gateway to access the VM. Azure P2S VPN supports TLS based protocols such as OpenVPN Protocol, Secure Socket Tunneling Protocol (SSTP). You can go through this documentation for additional details on implementation and architecture.
- You can also use Azure Application Gateway as an entry point where you can add the RHEL server VMs to your backend pool and secure the access using SSL. You can go through this feature list for AG which might help you decide. Azure Load balance can be another alternative to in this scenario you can explore.
If it helps you can also go though this documentation as one stop to understand the various networking features offered by Azure. Please let me know if there are any additional concerns or questions I will be glad to continue with our discussion. Thank you!