10.4 C
New York
Friday, March 14, 2025

routing – Azure App Service would not see path to VPN


I’ve an App Service that’s utilizing personal endpoints and personal hyperlinks to attach with an SQL occasion in the identical Useful resource Group. I’m additionally attempting to arrange a IPsec Tunnel/site-to-site VPN connection for the App Service to hook up with one other website outdoors of Azure.

I’ve a vnet that was created for the beforehand talked about App Service to SQL connection. The App Service is on a subnet named internet as a part of that connection.

To arrange my IPsec:

  • I created a GatewaySubnet subnet on the present vnet
  • I created a Digital Community Gateway on the present vnet
  • I assigned the Digital Community Gateway a Public IP useful resource from the identical Useful resource Group
  • I created a Native Community Gateway with the opposite website’s Public IP and inner IP as an Deal with House
  • I created a Connection in that Digital Community Gateway of kind (Website-to-Website/IPsec) utilizing the VNG and the LNG with a shared key
  • I created a Route Desk and related the online Subnet with it
  • I created a Route on that Route Desk that routes the inner IP from the Native Community Gateway settings to hop to the VNG
  • I’ve tried to pressure routing of the App Service by setting WEBSITE_VNET_ROUTE_ALL to 1 within the Ap Service setting variables App Settings.

I’ve set VnetRouteAll to true for the App Service.

I’ve restarted and even stopped and began the app service in any case these modifications.

These are the outcomes of some CLI instructions that I imagine issues are arrange appropriately, but the App Service hasn’t discovered the route.

I’ve tried utilizing cUrl, tcpping, nslookup from the App Service Kudu Powershell and Console and each time it fails to seek out 10.95.4.51

PS /residence/mber> az community vnet subnet present --resource-group myname --vnet-name vn-myname-test --name internet --query "{Subnet: title, RouteTable: routeTable.id}"
{
  "RouteTable": "/subscriptions/*********/resourceGroups/myname/suppliers/Microsoft.Community/routeTables/rt-myname-test",
  "Subnet": "internet"
}
PS /residence/mber> az community route-table route listing --resource-group myname --route-table-name rt-myname-test --query "[].{RouteName: title, AddressPrefix: addressPrefix, NextHopType: nextHopType}"
[
  {
    "AddressPrefix": "10.95.4.51/32",
    "NextHopType": "VirtualNetworkGateway",
    "RouteName": "to-10.95.4.51"
  }
]
PS /residence/mber> az community vpn-connection listing --resource-group myname --query "[].{VPNConnection: title, Standing: connectionStatus, ProvisioningState: provisioningState}"
[
  {
    "ProvisioningState": "Succeeded",
    "Status": null,
    "VPNConnection": "vpn-myname-test"
  }
]
PS /residence/mber> az community vpn-connection present --resource-group myname --name vpn-myname-test --query "{Identify:title, Standing:connectionStatus, ProvisioningState:provisioningState}"
{
  "Identify": "vpn-myname-test",
  "ProvisioningState": "Succeeded",
  "Standing": "Related"
}
PS /residence/mber> az webapp vnet-integration listing --name mynamedev --resource-group myname
[
  {
    "certThumbprint": null,
    "id": "/subscriptions/*********/resourceGroups/myname/providers/Microsoft.Web/sites/mynamedev/virtualNetworkConnections/web",
    "location": "East US 2",
    "name": "web",
    "resourceGroup": "myname",
    "routes": null,
    "type": "Microsoft.Web/sites/virtualNetworkConnections",
    "vnetResourceId": "/subscriptions/*********/resourceGroups/myname/providers/Microsoft.Network/virtualNetworks/vn-myname-test/subnets/web"
  }
]

Related Articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest Articles