I have a Java application running in Azure App Service and an Azure Databricks pipeline that both need to connect to a SQL Server hosted on-premises. The database is currently reachable from our corporate network through a VPN. What Azure networking and authentication setup would allow these services to access the server securely?
3 Answers
An Azure App Service can also use an Azure Hybrid Connection for certain on-premises access scenarios. For Databricks, you’ll need to configure networking and a connectivity method supported by your workspace, such as a virtual network connection or private routing through the corporate network. Check that both services can resolve and reach the database endpoint.
Don’t overlook SQL authentication and authorization. After network connectivity works, configure an appropriate authentication method, create a restricted database user or identity, allow only the required source addresses, and store credentials in a managed secret store rather than in application configuration. If possible, moving or replicating the database to an Azure-managed SQL service may simplify the architecture.
The usual approach is to establish a site-to-site VPN between the Azure virtual network and the on-premises network. You’ll need compatible VPN gateways, correct routing and firewall rules, DNS resolution for the SQL host, and an allowed SQL Server port. The exact configuration depends on your existing network and security setup.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures