Correct Endpoint ACL for Azure Websites

Hi Everyone,
I'm currently in the middle of building out my company's DEV environment using Azure Websites and Azure Virtual Machines. When I enable Endpoint ACLs for SQL (1433) on my SQL VM, my website in Azure Websites is no longer able to access it and I can't find
the correct IP to which I should grant access.
I'm really hoping I can do this using Endpoint ACLs rather than needing to resort to Virtual Networks because this is a DEV environment and I want to spend as little as possible which means sticking with the Azure Websites Basic hosting plan rather than
upgrading to Standard which is overkill.
Also, SQL Azure is currently not a viable option because I need database level encryption which is currently unsupported.
Thanks in advance for any insight you can provide.
Ryan

Azure public IP address are published and refreshed at regular intervals it can be found here: http://www.microsoft.com/en-us/download/details.aspx?id=41653
. This information can be provided in the endpoint ACL list

Similar Messages

There are no more endpoints available on Azure Website

I am just trying to setup a simple web app that pings a IP address and host it on Azure Websites. I have a standard website (not the free tier) and I have web sockets turn ON.
I am just sending a simple ping using the system.net.networkinformation.ping part of the .net api. It runs fine within VS.NET on my machine when deploying local. however when I publish to my azure website, and run it there I get
There are no more endpoints available from the endpoint mapper
I've tried looking on the azure configuration, the only obvious thing I noticed was making sure websockets was turned on. (and it is)
Any ideas? im sure it is some simple configuration and im just missing something? or are there certain things they do not allow from a Azure Website?
Thanks a bunch for looking at my question!
--Ryan

Hi,
I am afraid, Azure website doesn't support ping, if you need Inbound & Outbound ping, please vote this feedback:
http://feedback.azure.com/forums/217313-networking-dns-traffic-manager-vpn-vnet/suggestions/3346609-icmp-support-for-azure-websites-roles-cloud-serv
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Best Practice while configuring Traffic Manager for Azure Website

Hi Team,
I want to understand What is the best practice while we configure traffic manager for Azure website.
To give you the base, Here let me explain my requirement. I have one website which 40% target audiences would be East US, while 40% would be UK and rest 20% would be from Asia-pacific.
Now, What I want is Failover + Performance based Traffic Manager Configuration.
My thinking:
1) we need to create 1 website with 2 instances in each region (east us, east asia, west us for an example). so, total 3 deployment of website. (give region based url for the website)
2) create traffic manager based on performance and add 3 of those instances. that would become website-tmonperformance
3) create traffic manager based on failover and add 3 of those instances. that would become website-tmonfailover
4) create traffic manager and ?? don't know the criteria but add both above traffic manager here and take your final url for end user.
I am not sure (1) this may be the right approach or not (2) if this is right, in the 4th step which criteria we should select while creating final traffic manager round-robin/ performance/ failover?
after all these if use try to access site from US.. traffic manager will divert that to US Data-Centre or it will wait for failover and till that it will be served from east-asia if in configuration, east-asia is my 1st instance?
Regards, Brijesh Shah

Hi Jonathan,
Thanks for your quick reply. actually question is bit different. Let me explain you different way.
I was asking for recommendation from Azure Traffic Manager team. whether my understanding is correct or not.We want Performance with Failover.
So, One azure website we have: take an example todoapp. I deployed that in 3 different region. now, I want to have performance based routing as well as failover based routing. but obviously I can't give two URL to my end user. so, at the top of that I will
require one more traffic manager. So,
step 1: I will create one traffic manager with performance criteria named: TMForPerformance.trafficmanager.com where I will add all those 3 instances (all are from different region so, it want create any issue.)
step 2: I will create one more traffic manager with failover criteria named: TMForFailover.trafficmanager.com where I will add all those 3 instances (all are from different region so, it want create any issue.)
step 3: I will create one final traffic manager with performance criteria named: todoapp.trafficmanager.com where I will add these two traffic manager instead of 3 different region's website.
Question 1) Is it correct structure if we want to achieve Performance with Failover or Is there any better solution?
Question 2) in step 3, what criteria we should select? performance/ round robin/ failover
Regards, Brijesh Shah

Is there a list of best practices for Azure websites?

Hi all;
I was talking with a Sql Server expert today and learned that Azure Sql Server can take up to a minute to respond to a query that normally takes a fraction of a second. This is one of those things where it's really valuable to learn it when architecting as
opposed to when we go live.
Websites are not Sql Server (obviously) but that led to the question - Is there a list of best practices for Azure Websites? If so, what are they?
We will be the website in multiple datacenters and using traffic manager to point people to the right one. The website will run as a REST server using Web API 2, mostly for license checks from our app running on corporate Exchange servers. And a small part
will be for javascript based web pages used for account CRUD.
thanks - dave
What we did for the last 6 months -
Made the world's coolest reporting & docgen system even more amazing

sorry I was not sure if you were using a web server or what?
One other idea out of the slow cooker is to use a dedicated web server with SQL server running beside IIS
If you are using the standard web sites, then the SQL option is about as slow as FTP uploads, very slow
I have considered time of day too, and it seems Azure is less loaded early in the AM
Corsair Carbide 300R with TX850V2 Asus M5A99FX PRO R2.0 CFX/SLI AMD Phenom II 965 C3 Black Edition @ 4.0 GHz G.SKILL RipjawsX DDR3-2133 8 GB EVGA GTX 660 Ti FTW Signature 2 (GK104 Kepler) Asus PA238QR
IPS LED HDMI DP 1080p ST2000DM001 & Windows 8.1 Professional x64 Microsoft Wireless Desktop 2000 & Wacom Bamboo CHT470M Place your rig specifics into your
signature like I have, makes it 100x easier to understand! <a href="http://hardcore-games.azurewebsites.net/" target="_blank">Hardcore Games</a> Legendary is the Only Way to Play!

Can you change the FTP URL for Azure Websites and link to a Domain Name FTP?

I have created an Azure Website, and have regisetered the correct Domain Name details for the site. What i want to understand is can i do the same for the FTP address via Azure?
Rather than use the default ftp://waws-XXX-XXX.ftp.azurewebsites.windows.net/ i want to change to be FTP.<Domain Name>.comi do not see the option to do this via Azure?
would i have to create a CNAME on my domain registrar to deal with this instead?

are you able to ftp to domainname.ext?
if you can ftp to domainname.ext and instead you want to ftp to FTP.domainname.ext then yes you need dns map

Over 10% downtime for Azure Website Shared?

My monitoring software is reporting about 11.52% downtime over the last 12 days for our Azure Website that is on a "Shared" plan. Is this normal for Azure? It seem something is wrong, most of other hosts guarantee at least 99% uptime.

Hi,
I would request you to monitor using Monitor management page and check if it shows the same thing, here is the link:
http://azure.microsoft.com/en-in/documentation/articles/web-sites-monitor/
Regards,
Azam Khan

Certificate for Azure Websites in the VNET

Hi,
I created a point-to-site connectivity from Azure websites to existing VNET. My Questions are:
1. Eventhough I add more than one website the client count in the Dashboard of the VNET is not showing increment more than 1. What is the reason?
2. How do I change the certificate used by the Azure website that is getting generated while connecting to VNET through point-to-site? It seems it all the websites connecting the VNET using same auto generated certificate. How and Why?
Thanks in Advance,
With Best Regards,
Kasinath

Hi Kasinath,
Where did you create the websites? Are they in the same web hosting plan? Based on my experience, only websites are running on a web hosting plan that’s in the ‘Standard’ pricing tier can be connected to a virtual network. A website can only
be connected to one network at a time and you can only have up to 5 networks configured in your web hosting plan.
In addition, the system will then create a certificate to authenticate with your VNET if it is the first website in your subscription to establish a connection to that network. Why did you want to change the certificate?
The link below maybe helpful to you:
Integrate your Azure Website with an Azure Virtual Network
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Azure CDN for Azure Website

I have an Azure Website and I would like to serve some of it via an Azure CDN. Apparently, this used to be possible by using a /cdn folder in an Azure Hosted Service however, you cannot create these any more.
If I try and create a Cloud Service (which replaced the Hosted Service), I just end up creating an Azure Web Site and you cannot connect a CDN to it.
So, my question is: How can I connect an Azure CDN to an Azure website?

Hi,
CDN in general has not been changed. Some old tutorials such as
http://blog.smarx.com/posts/using-the-windows-azure-cdn-for-your-web-application would still work. Please note it does not stand by website yet. It has to use web role. When you creating a cloud service, it works as a container. You can upload your
web roles to it. Cloud service is not website. In addition, at the moment it is needed to use the old Silverlight to manage CDN. We're in the progress to enable CDN management in the new portal, as described in the old portal:
Windows Azure CDN management experience will be available in the new Windows Azure Management Portal in the next couple months. Once this experience has been moved over, sometime this summer, the Silverlight Portal will be decommissioned. At that point,
you will no longer be able to use this Portal to manage your CDN assets and will only be able to do so through the new Portal.
Best Regards,
Ming Xu
Ming Xu
MSDN Community Support | Feedback to us
Develop and promote your apps in Windows Store
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Certain Http Server Errors not visible in logs for Azure Websites

I noticed that a lot of times (but not every time) Http Server Errors on my Azure Website (an ASP.NET MVC app) don't show up in any logs, although they are recognized by Azure. E.g. I get alerts that Http Server Error count > 5 in the last 15 minutes,
I see the error count on the Portal under Monitoring/Requests and errors however these errors are not visible in my application's own logs or in the eventlog.xml. Thus I also can't troubleshoot them.
Now I'm not totally sure (and can't find any hints about) what exactly "Http Server Errors" mean in Azure terminology but since 4xx errors are handled separately by alerts I'd guess these are 5xx errors. If indeed then I don't understand why there
are apparently errors happening that are not visible at least in the event log?

Hi Zoltán Lehóczky,
For your issue ,I suggest that you could try to enable site diagnostics and application diagnostics in Azure Management Portal.
In site diagnostics ,it will logs Detailed Error Logging which logs detailed information for HTTP status codes that indicate a failure (status 400 or greater).
Then you could access the folder "/LogFiles/DetailedErrors" via Ftp to check Detailed Error Logs which provide any HTTP errors have occurred.
For more information ,I suggest that you could refer to the link below:
http://azure.microsoft.com/en-us/documentation/articles/web-sites-enable-diagnostic-log/
Best Regards,
Kevin Shen.

503 Error Solution for Azure Websites- FYI

Yesterday all of my sites went down because I had a spending limit on my account. I removed the limit and all of my sites returned a 503 error. Everything showed normal on the Azure Portal dashboard. I spent the last day trying to figure out the problem
and implemented numerous trouble shooting steps, including creating a new website instance, restoring from a backup, etc.
The solution that finally worked was that I went to the Scale Tab on the site instance, and changed the Web Hosting Plan Mode from Standard to Basic, and then back again. My sites came back up with no 503 error. This was VERY frustrating.
Everything showed that the sites should be working. I could FTP into them, but could not hit them with a browser (503 error). I wanted to post this in case some other poor unsuspecting fool runs into this issue.

Hi,
Thanks for sharing.
There are some difference between azure website Standard mode and Basic mode, not only the features but also pricing, refer to
http://azure.microsoft.com/en-us/pricing/details/websites/ for more details, if you encounter this issue, restart may be another choice.
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Long HTTP Request/Response round trip time on new Azure Websites under BizSpark Plus

Hi,
I have a very difficult situation. I am busy migrating from a traditional VM architecture to Azure Websites. This is after a few months of testing and being happy that Azure Websites can provide the performance necessary for our application. The TEST site
I set up is running great and meets all the performance requirements. The TEST site is set up under my normal BizSpark subscription.
We have since been awarded a BizSpark Plus subscription and I have started the migration process on this subscription, as opposed to the normal BizSpark basic subscription.
However, since starting our migration process, I am experiencing huge latency on the HTTP request roundtrip from browser to server and back for my newly created LIVE Azure Website instance. I have investigated and observed the statistics between the TEST
and LIVE instances. Here is a test run against the 2 environments on a particular screen of our application. Here are the times for the full roundtrip for each AJAX HTTP request of the specific actions:
TEST (Azure Website on BizSpark subscription):
GetAudioSource - 267ms
LogStartEvent - 196ms
LogProgress - 243ms
Retrieval of Audio file - 2.06s
LIVE (Azure Website on BizSpark Plus subscription):
GetAudioSource - 938ms
LogStartEvent - 3.61s
LogProgress - 5.11s
Retrieval of Audio file - 5.97s
There is clearly something wrong with the routing of the LIVE instance starting at the load balancer.
This is not the only place affected. In fact, all the HTTP requests are very lagged and delayed in the LIVE instance as opposed to hardly noticeable in the TEST instance.
I am wondering if there is a lower priority being afforded to my BizSpark Plus subscription running my LIVE instance, of if I am just unlucky with the underlying infrastructure that has been selected on my behalf. Or, is it possible that something can be
done to enhance and optimise the routing etc?
I also need to say that I have matched the Azure Website configuration and scale settings to be exactly the same between the 2 instances and have also set Always On to ON.
Any help or thoughts will be greatly appreciated, because I am starting to seriously doubt the service levels of the Azure Websites platform.
Thank you
Ozzy

Hello Ozzy Vox,
1. Which region(data center) do you have your websites deployed in?
Ideally there would be no change in terms of type of subsciptions when you deploy your website in production.
I suggest that you set up diagnostics on to your Azure websites to get the logs to understand where it is spending most of its time and the reason behind the latency.
You can refer to this link that will give you information on 'How to Monitor Websites':
http://azure.microsoft.com/en-in/documentation/articles/web-sites-monitor/
Also refer to this link regarding 'Enable diagnostic logging for Azure Websites':
http://azure.microsoft.com/en-in/documentation/articles/web-sites-enable-diagnostic-log/
Thanks,
Syed Irfan Hussain

Azure website protection

Hi,
I have done some research on protecting against DDoS in regards to Azure websites. I have found the following "Threat mitigation and protection of customer environments is similar to that used in many on-premises datacenters."
Does "Threat mitigation and protection of customer environments" include Azure customer websites that are deployed to Azure? As a Azure website user, do I need to sign up for this protection service, or is this service enabled by default for Azure
websites? I am not using a VM, but am using a Azure website instead.
Thanks in advance.

Hi Simon,
MS Azure platform has the DDOS protection for Azure website by default. Windows Azure has built-in load balancers that will stave off most (if not all) DOS type attacks. I suggest you could refer to this similar threads:
http://stackoverflow.com/questions/13771176/what-happens-if-a-ddos-attack-hits-windows-azure-web-sites
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Applicationhost.config updates for HTTP Slow Post with Azure Websites

We are trying to update our Azure websites to not show as vulnerable to the HTTP Slow Post vulnerability. Some articles suggest fixing this by updating the applicationHost.config via IIS to update the connection timeout values. Obviously with Azure websites,
we don't have access to IIS. Came across some options with Kudu and XDT to modify the application host file, as outlined on these two sites:
http://azure.microsoft.com/en-us/documentation/articles/web-sites-transform-extend/#transform
http://rtigger.com/blog/2014/03/31/number-til-modifying-you-azure-applicationhost-dot-config
Currently am using the following as our applicationHost.xdt (I have this both in our application root, as well as in a SiteExtensions folder as I wasn't clear which one was required).
<?xml version="1.0"?>
<configuration xmlns:xdt="http://schemas.microsoft.com/XML-Document-Transform">
<system.applicationHost>
<sites>
<siteDefaults>
<limits connectionTimeout="00:00:30"
xdt:Transform="Insert" />
</siteDefaults>
<applicationDefaults applicationPool="DefaultAppPool" />
<virtualDirectoryDefaults allowSubDirConfig="true" />
</sites>
<webLimits connectionTimeout="00:00:30"
xdt:Transform="Insert" />
</system.applicationHost>
</configuration>
We also set the WEBSITE_PRIVATE_EXTENSIONS app-setting to 1 as instructed.
When testing our site using a 3rd party tool, it appears the setting is not getting applied. Hoping someone can point out where our error may be. Alternatively, is there any way to see what the current applicationHost.config is for our website? I'm curious
if our XDT is correctly being applied, so if we could see what the resulting file was that may also allow us to further troubleshoot.
Thanks in advance for any advise!

Please see
this page, which has detailed steps on finding your applicationhost.config and finding the logs from the transformation. And please make sure that your applicationhost.xdt is in your
d:\home\site folder (and not in your site\wwwroot).
David

For my Azure Website, I don't see instrumentation for its dependent Azure database

I followed the instructions found at Application Insights Azure WebSite extensions but I don't see any instrumentation for the
Azure SQL database that the Azure website uses.
For the windows "Application Health / Overview timeline"
I see graphs for Client Process time, Send Request Time, Server Response Time, Server Requests and Failed Requests, but no SQL
For the windows "Diagnostics / Diagnostics timeline"
I see graphs for Server Exceptions, Browser Exceptions, Failed Requests and "DEPENDENCY FAILURES" has as text box over it stating "Learn how to collect dependent resource data". It seems that it should be able to see the Sql Server,
but it doesn't
Any thoughts how to fix this,
John Marsing http://MyHebrewBible.com/

Hi John,
Thanks for confirming your AI Nuget version is 0.12. What I meant by "choose site extension" is that if you follow the process in the blog post that you reference (Application
Insights Azure WebSite extensions) there's step #2 that describes how to enable Application Insights extension from Azure Websites blade - click on Extensions part, click +, Add Site Extension, Choose Site Extension, Application Insights Extension,
wait for it to be installed, verify that it appears in your Installed Extensions list. Please can you confirm that you have enabled it for your website.
Thanks!
Alex
Application Insights team is hiring: https://careers.microsoft.com/jobdetails.aspx?jid=166735. Interested? Please email your resume to albulank at microsoft.com.

Is CDN built in Azure Websites or CDN needs to be created and linked to website for content sharing

Is CDN built in Azure Websites or CDN needs to be created and linked to website for content sharing...

Hi
CDN is a separate service in Azure and you can serve your content there.
Then your azure website can use those CDNs that you provide in azure (just like any other CDN out there like Jquery Ajax etc ..)
Regards
Aram

Correct Endpoint ACL for Azure Websites

Similar Messages

Maybe you are looking for