SQL Azure Firewall

My company has a business partner deploying a web app (Cloud Service) on a new Azure subscription that we created for them. We want them to connect to the SQL Azure instance on
our subscription, so we need to set up a firewall entry. Of course, the IP Address of their cloud service can change.
Is there any means of creating a firewall rule that would let any connections coming from that particular subscription through the firewall?
Is there a practical way to manage this situation or do we just have to use an IP and keep fixing it whenever we see that it has broken?

Hello,
When an application from Windows Azure attempts to connect to your SQL Database server, the SQL Database firewall looks for a specific firewall setting that indicates whether Windows Azure connections are allowed. A firewall setting with starting and ending
address equal to 0.0.0.0 indicates that Windows Azure connections are allowed.
We can enable connections from Windows Azure by check "Yes" for Windows Azure Services in the allowed services section on Management Portal.
After specify the firewall, you can connection to the SQL Database from the Windows Azure Web app with a valid login.
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

Similar Messages

Cannot connect to SQL Azure

Hello,
I have tried everything I could think of and still did not manage to connect to SQL Azure server instance I have created.
1) Using the SQL Server Management Studio 2008 R2 -
    I get: "A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. ...."
    I have the 1433 port allowed by my firewall (even placed a machine in the DMZ) and I have added my IP address to the SQL Azure firewall.
2) Using this app: https://onlinedemo.cerebrata.com/SQLAzureClient/default.aspx
   I get "Unable to retrieve the list of databases...."
   Now, in this case enabling the TCP port 1433 from my network is not even required as I this tools connects directly to SQL Azure. And yes, I have added the firewall rule on my SQL Azure Server.
3) Using this tool: http://hanssens.org/tools/sqlazuremanager/
   I get a message similar to what I get at 1)
The only thing that works is the "Test Connection" performed on SQL Azure site.
Can someone please help?
Regards,
Luc

I cannot connect either using that Omega tool but I have no problem from SSMS R2.
Let's try something simple: connecting from Project Houston:
Check "Allow Microsoft Services access to this database"
Go to http://sqlazurelabs.com. Click Project Houston CTP 1 on left.
When asked for data center, click the one where your db is deployed.
Agree to terms
Enter full database name - somename.database.windows.net -
along with database name, username, and password. Note: if you didn't allow Microsoft Services access to your database, you'll get an error
You should now be connected to your database.
If that worked, at least you know your database is up and running correctly. Now try connecting from SSMS R2. The parameters should be identical,
except you don't have to specify which database to connect to.

Unable to acces a an Azure website that uses SQL Azure?

I have have uploaded a website to Azure that usese SQL Azure. When I try to access that stie iget the connection error message below.
"The device or resource (the site URL) is not set up to accept connections on port "The World Wide Web service (HTTP)".
When I upload a website that does not uses SQL azure, I can access that site without any connection errors.
Appreciate any feedback.
Thanks

Does the site load at all? If not, can you double check that your endpoints are properly defined in your service definition?
Have you configured your SQL Azure instance to accept connections from other Windows Azure Services datacenters? You need to make sure the firewall rule exists with IP Start and End range of 0.0.0.0. There is a check box you can simply
check in the SQL Azure firewall settings.
If neither of those work, can you paste the SQL Connection string (without the server, username, and password).
Harin

Cannot connect to SQL Azure by allowing Domain Name in Firewall

*.database.windows.net:1433/tcp is getting resolved as IP address in corporate firewall but the corporate firewall is configured to allow only domain names.Is there a way to connect to SQL Azure without domain name getting resolved into IP.
All the http traffic are allowed by firewall for blobs,queues and tables.

Hello,
Did you means that you connect to the SQL database with IP address? If I understand correctly, you can not rely on the IP address when connect to Windows Azure SQL database.
SQL database is hosted on a virtual machine at the Microsoft datacenter and shared resource with other databases. Static IP addresses are not supported on Windows Azure virtual machines, it is use dynamic address.
What's more, one SQL Database keep at least three SQL Server databases replica that are distributed across multiple physical servers in a single data center and automatic cluster failover when a hardware fails on one server. In that case, the real IP that
is behind server might change in any moment.
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

Use SQL Azure with local web app?

Hello all-
I have a web app running on a local-ish (our Data Center) server which runs ColdFusion and SQL Server on the same physical hardware. The load for the app is not too great, so running both services on the same box is not problem.
I need to upgrade SQL Server, and I would prefer not to put more resources onto our local servers if possible. Essentially, I would like to move to the cloud. BUT at this point I don't want to move my code to the cloud due to file storage and
a few other issues.
Is it feasible to use SQL Azure as my datasource for my local web app? I am at a top-tier University on the west coast, and our connection speeds are about as good as you can possibly get.
I don't mind a minor slowdown. For instance, if the round-trip takes 30 milliseconds, I won't be sweating that. But I'd rather not have a relatively snappy app turn into something agonizing for users.
Also, we have a perimeter firewall on campus which normally blocks all SQL Server traffic. Is it possible to change the port that SQL Azure uses?
Any guidance would be appreciated.
Thanks-
Karl

Hello,
At this time I have 4 virtual servers on Azure (2 of them SQL Server instances) on a high availability configuration and it only
cost 13.35 per day. It is very cheap. Incoming traffic is free.
About how to Connect to SQL Azure, the following application may help:
http://code.msdn.microsoft.com/windowsazure/ASPNET-MVC-connect-with-1f40770f
What is the size of the database?
About the port default port and the organizational firewall, please read the following article:
http://www.dotnetsolutions.co.uk/blog/connecting-to-sql-azure-without-changing-your-firewall
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Connection to SQL Azure client application

Dear all,
I have setup an SQL azure database that will be accessible from a Desktop client application.
So that when I need to connect to the database, I need to go to the Admin portal and then allows my current PC IP to the firewall rules tables acess. When this is done my client application is allowed to access the database.
I am actually accessing the database from a local WCF services hosted as an NT service which have the connection string to the SQL azure database.
By testing different scenario I have found weird issue and hope you can help on the best way to approach it :
Question 1 : Client application PC IP adress
When I distribute my application to a customer which try to run it, it cannot access to the azure database simply because its client IP address PC is not in the list of the firewall on my azure account. As I do not know in advance the IP address of my customer,
what is the way to allows the connection automatically ?
I understand that it can be a security feature in a way to authorize a user or not to the data.
Question 2 : Connection string password
Actually the connection string to my SQL azure database is visible in the config file of my Nt service host for my WCF endpoint. The problem is that the password is in clear text here and I would like to avoid that. To solve that issue I guess I have
2 posiibilities :
- Encrypt the connection string password from my config file, but then how Azure will be able to understand it fro decrypting ?
- Host my WCF service under azure ? if yes how ? will it be better it terms of performance as well ?
Thnaks for your feedback and help
regards

Hello,
1. SQL Database use
server-level firewall to prevents all access to SQL Database server until the client computers have permission.The firewall grants access based on the originating IP address of each request.
So, you should configure the firewall rule by adding the IP address of the client PC before connect to the SQL Database.
2. Windows Azure provides a secure
certificate store where you can maintain your certificates. After encrypt sensitive data in your configuration files, you can deploy certificate with a key pair to Windows Azure and it can be used for encryption/decryption.
Reference:
Wiki: Windows Azure SQL Database Connection Security
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

"The CREATE USER statement must be the only statement in the batch" in SQL Azure - why? what to do?

I'm getting an error on a line in the middle of a larger sql script, only in SQL Azure.
IF NOT EXISTS (SELECT * FROM sys.database_principals WHERE name = N'foouser')
CREATE USER [foouser] FOR LOGIN [foouser] WITH DEFAULT_SCHEMA=[dbo]
GO
Error: "The CREATE USER statement must be the only statement in the batch."
I don't actually understand what 'the only statement in the batch' means.
What is a batch? Is it a SQL file? Is it related to a 'GO' statement or an 'IF' statement? What is the reason for the error? And how do I avoid it?
Thanks,
Tim

>IF...ELSE imposes conditions on the execution of a Transact-SQL statement
I understand the general purpose of an If statement. I could let go of our definition of statement counting disagreeing too except that because of the error I'm stuck.
It's less important for Create User but what I am really puzzled over now is a very similar issue how am I supposed to do a safe version of CREATE LOGIN, when I don't know whether a login has been previously created on the server or whether I
am setting up the database on a clean server?
IF NOT EXISTS (SELECT * FROM sys.server_principals WHERE name = N'foouser')
CREATE LOGIN [foouser] WITH PASSWORD = 'asdfasdf'
GO
If I try and execute this script, it throws the same error as above.
The first unworkable workaround idea is to omit the if statement
CREATE LOGIN [foouser] WITH PASSWORD = 'asdfasdf'
GO
But if the login already exists on the server (because a similar script was already run), then the script throws an error.
The second unworkable workaround idea is to do
DROP LOGIN [foouser]
GO
CREATE LOGIN [foouser] WITH PASSWORD = 'asdfasdf'
GO
Obviously this throws an error in the second block if the login doesn't already exist on the server.
The third workaround idea I have is to go conditional by putting an IF condition around DROP instead of CREATE:
Unfortunately that doesn't work for me either!
"The DROP LOGIN statement must be the only statement in the batch"
(This is despite the fact that 'drop login' is listed on the
supported commands page, not the partially supported page..?! Which disagrees with the notes on
this page.)
Anyway the real question I am interesting in addressing is: is there actually a way to have a 'Create/Delete login
if exists' operation which is SQL-Azure compatible and doesn't throw me error messages (which messes with the sql execution tool I am using)?
If there is no way, I would like to believe it's because it would be a bad idea to do this. But in that case why is it a bad idea?
Tim

How to add description of a column of a table in SQL Azure

Hi
I have some tables in my application database where there are descriptions added against certain columns. Needless to say they were done by using sp_addextendedproperty.
Now I am trying to migrate the Database to SQL Azure. SQL Azure does not support sp_addextendedproperty.
Hence I am not able to figure out how to add descriptions to those columns.
Any help would be much appreciated.
Thanks
Soumyadeb

Hello,
Just as Latheesh post above, Windows Azure SQL database are not support extended stored procedures. That’s one of the limitations on SQL database, and I don’t know there is another way to achieve the same on Azure.
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

Cannot refresh data in Excel Services with SQL Azure databases

I am using Excel Services on a SharePoint Online.
I get my data from a SQL Azure. When i create my Excel repor with Excel 2013 pro I have no problem. So I upload my file on my Sharepoint and try to refresh data.
Connexion : Power Query - RPT_Event_ByEventType
Erreur : Erreur sur site (OnPremise) : Sorry, the data source for this data connection isn't registered for Power BI. Ask your Power BI
admin to register the data source in the Power BI admin center.
I do not understad why I get that error because my data source is on Azure why It told me "OnPremise" ?

hi,
>> this button of excel gets just address of web and have button for import it
i test it by rest API project , but doesn't work, do you know how it is work?
Do you mean that you don't know how to get the table? You may input the site address into the address box, and then click go button nearby, select the table you want to import into the Excel. Then click import button.That also works for rest API,
and your rest API should get the data that you want
By the way, this is the forum for discussions about Excel develop(VBA ,customization), better to go to TechNet forum for Excel for Excel features question, so that you could get more professional help.
Best Regards
Lan
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

SQL Azure - Intermittent The wait operation timed out

I have a website engine which runs a few hundred "white label" sites. It's hosted on Azure with a SQL Azure Business database. Generally everything is fine - it all works and runs at a good speed.
However, throughout the day I get maybe 40 or 50 of the error:
System.ComponentModel.Win32Exception: The wait operation timed out
Please don't refer me to the connectivity blog at http://blogs.msdn.com/b/sqlazure/archive/2010/03/22/9982979.aspx as this seems to refer to problems where you just can't connect. My problem is that it's fine most of the time, but I still get these
intermittently.
This is sometimes on the main database, but we're also using a database for sessions and this gets the errors too. Both databases are on the same server.
I also get errors like:
An existing connection was forcibly closed by the remote host
and:
System.Data.SqlClient.SqlException: The service has encountered an error processing your request. Please try again. Error code 40143. A severe error occurred on the current command. The results, if any, should be discarded.
and, when evil bots are hammering the site:
System.Data.SqlClient.SqlException: Resource ID : 1. The request limit for the database is 180 and has been reached. See 'http://go.microsoft.com/fwlink/?LinkId=267637' for assistance.
Each website can potentially have a Google footprint of around 10,000 pages. The result it that bots are hitting the sites regularly, indexing lots of pages for hundreds of sites. I also have some worker roles doing data work. The database is clearly busy!
I am hoping to add 2 or 3 times the number of sites that I currently have to the "engine".
I am looking at efficiency where possible, but the sites are clearly under a fair load from bots and visitors.
My question is, will one of the upgrades from Business to S2, P1, P2 or P3 resolve these problems? The financial cost of these database instances stagger greatly so I wouldn't want to update and find I'm left with the same problems but am paying many times
more each month.
Thank you in advance.

Hello,
For Web/Business edition database, the maximum limit of concurrent requests is 180. Beyond this limit, you will receive error.
The Max woker threads for Standard(S2) is 100, you should upgrade your database to Permium tier.
The concurrent requests limit of premium database varies depending on the reservation size of a premium database. For example, for P1, the max worker threads is 200.
Reference:Azure SQL Database Resource Governance
Azure SQL Database Service Tiers and Performance Levels
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

Performance is too slow on SQL Azure box

Hi,
Performance is too slow on SQL Azure box (Located in Europe)
Below query returns 500,000 rows in 18 Min. on SQL Azure box (connected via SSMS, located in India)
SELECT * FROM TABLE_1
Whereas, on local server it returns 500,000 rows in (30 sec.)
SQL Azure configuration:
Service Tier/Performance Level : Premium/P1
DTU       : 100
MAX DB Size : 500GB
Max Worker Threads : 200
Max Sessions     : 2400
Benchmark Transaction Rate      : 105 transactions per second
Predictability : Best
Any suggestion would be highly appreciated.
Thanks,

Hello,
Can you please explain in a little more detail the scenario you testing? Are you comparing a SQL Database in Europe against a SQL Database in India? Or a SQL Database with a local, on-premise SQL Server installation?
In case of the first scenario, the roundtrip latency for the connection to the datacenter might play a role.
If you are comparing to a local installation, please note that you might be running against completely different hardware specifications and without network delay, resulting in very different results.
In both cases you can use the below blog post to assess the resource utilization of the SQL Database during the operation:
http://azure.microsoft.com/blog/2014/09/11/azure-sql-database-introduces-new-near-real-time-performance-metrics/
If the DB utilizes up to 100% you might have to consider to upgrade to a higher performance level to achieve the throughput you are looking for.
Thanks,
Jan

Link a Crystal Report report with an SQL Azure database

Hi,
I want to use my database on SQL Azure in Crystal Report. So I want to link my reports with data contained not in a local db, but in a SQL Azure one.
Insiede Crystal Report I have created a new ADO connection to my SQL Azure, providing server, db, user, password, and Crystal Report have recognized the database. But when I go to the Database Expert and I try to set this ADO connection inside my report,
I recieve this error:
"Not Implemented
Source ADODB.Connection
L'operazione richiesta non è supportata dall'oggetto o dal provider (operation not supported by the object or by the provider)"
Why? How can i use my SQL Azure data in my Crystal Report reports?
Thanks

Hi Delfins,
Please create a UDL file to test the connection, ensure the connection is fine and then use the same connection string in your Crystal Report.
For UDL file, you can refer to:
http://msdn.microsoft.com/en-us/library/e38h511e(VS.71).aspx
Hope this helps,
Raymond
Raymond Li - MSFT

Unable to save a report that includes a datasource of "Microsoft SQL azure" type

I have install SSRS in azure using the following instructions (http://msdn.microsoft.com/en-us/library/dn449661.aspx) and all seems to work fine, however when I create a report in report builder 2014 (in this case empty) that includes a Microsoft SQL Azure
datasource type I am unable to save the report and get the following error message (even though when I test connection it succeeds).
"The report definition was saved, but one or more errors occurred while setting the report properties"
Reports with standard sql datasources work fine.
I have also tried creating the report using Visual Studio 2013 and get a similar error message.
I have tried this using SQL 2012 and SQL 2014 and get the same error.
Does anybody know how I can create a report with Microsoft SQL Azure datasource type?

Hi jamesla,
Based on my research, the issue can be caused by a deleted shared data source still exist under the Data Sources list in Report Builder. For more details about this scenario, we can refer to the following thread:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/7170dbee-048c-4298-89ba-df4d42924c8e/the-report-definition-was-saved-but-one-or-more-errors-occurred-while-setting-report-properties?forum=sqlreportingservices
Since the error message without detail information, we can try to render the report to see the detail error message. Besides, we can try to check it in the log file. The SQL Reporting Services log files are found on the reporting services point server, in
the folder %programfiles%\Microsoft SQL Server\<SQL Server Instance>\Reporting Services\LogFiles.
For more information about how to use Microsoft SQL azure as the data source of a report, please see:
http://msdn.microsoft.com/en-IN/library/ff519560.aspx
http://programming4.us/database/2158.aspx
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Create a web site in Visual Studio - fails with SQL Azure V12

Creation of Microsoft Azure Website failed. <Error xmlns="Microsoft.SqlServer.Management.Framework.Web.Services" xmlns:i="http://www.w3.org/2001/XMLSchema-instance"><Message>The service objective 'Web' specified is invalid.</Message><InnerError
i:nil="true"/><SqlErrorCode>40804</SqlErrorCode><Severity>16</Severity></Error>
I receive this error after connecting to a database using the Preview Edition of SQL Azure V12 with a service level of 'Basic'
'Web' may need to be changed to 'Basic' or 'Standard' depending on the service level. How can I do this?
Regards
David

Hi,
Thanks for posting here.
Upgrading Web and Business Databases
Upgrading Web or Business databases to a new service tier/performance level does not take the database offline. The database will continue to work through the upgrade operation. At the time of the actual transition to the new performance level temporary
dropping of the connections to the database can happen for a very small duration (typically measured in seconds). If an application has transient fault handling for connection terminations then it is sufficient to protect against dropped connections at the
end of the upgrade.
Upgrading a Web or Business database to a new service tier involves the following steps:
Determine service tier based on feature capability
Determine an acceptable performance level based on historical resource usage
Why does existing performance for my Web or Business database map to the higher Premium levels?
Tuning your workload to fit a lower performance level
Upgrade to the new service tier/performance level
Monitor the upgrade to the new service tier/performance level
Monitor the database after the upgrade
Refer:
http://azure.microsoft.com/en-us/documentation/articles/sql-database-upgrade-new-service-tiers/
https://msdn.microsoft.com/en-us/library/azure/dn741336.aspx
Hope this helps you.
Girish Prajwal

Unable to drop SQL azure table

Hi,
I'm trying to drop SQL azure table. However I can delete data inside the table. When using drop command, it is taken long time processing and finally this error message 'Connection Failed'. Please help me. Thanks

That sounds like an internal error in SQL Server which may be due to corruption. Don't really know how you deal with that in Azure. But if DBCC CHECKDB is available, run it and see what happens.
Also, do you have any DDL triggers on the database? In such case, disable the trigger, in case it is the trigger that is failing.
Erland Sommarskog, SQL Server MVP, [email protected]

SQL Azure Firewall

Similar Messages

Maybe you are looking for