Access an external MySQL database through VPN Public IP

Question

Hello!

We have an external Database resource that requires us to provide one(or more) public IPs for whitelisting whilst they provide us with an IP to access the database (plus login data).

For this, our thought was to create a Virtual Network with a VPN Gateway to allow us to provide a single Public IP address which should allow everyone connected to the VPN (with internal private addresses) to access this resource. Upon further reading, I don't think this will work the way we want it to since the VPN Gateway will only allow us to access resources inside of the virtual network.

A workaround for this would be to assign a public IP to a VM, and access that resource from there. But is there any method for us to both provide our client with the correct public IP and allow us to access this resource through an internal VPN?

Thanks in advance.

Answer 1

@Federico Busso A recommended option is to use NAT Gateway https://learn.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource
Other option is to use load balancer with outbound rules. All options are described here https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-outbound-connections

Answer 2

@Federico Busso Thank you for reaching out to Microsoft Q&A. If I understand you correctly, below is your requirement:

That is, you want both internal and external access to this DB from the Azure Cloud, please correct me otherwise. If you setup a S2S VPN to your Datacenter(DC) where the DB is located, you can access the same using its Private IP and vice-versa i.e., the DC or on-premises can also access the VMs using their Private IPs via the S2S VPN. At the same time, when the VM tries to access the DB using its Public IP, the traffic can be routed through the internet directly. This is if the routing is setup appropriately on both sides i.e., it is not routing all traffic through the VPN.

At the same time, you need to make sure DNS is setup as needed to be able to resolve the IPs correctly to the Public/Private IPs respectively. Please refer to this document for setting up DNS.

Hope this helps. Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.