azure-docs icon indicating copy to clipboard operation
azure-docs copied to clipboard

Missing IP in IP ranges for EU-West (connectivity architecture)

Open dahiro opened this issue 2 years ago • 1 comments

We experienced multiple times that the IP-ranges mentioned on this page are not up2date. I.e. we have a DB-Server in EU-West but the connection from a k8s-cluster in azure gets redirected to d823e34816d3.tr29148.westeurope1-a.worker.database.windows.net which gets resolved to 20.61.99.232 which is not part of any IP-ranges mentioned.

Can you tell us on what Information we can base our firewall rules?

Many thanks in advance


Document Details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

dahiro avatar Nov 11 '22 14:11 dahiro

@dahiro Thanks for your feedback! We will investigate and update as appropriate.

SaibabaBalapur-MSFT avatar Nov 11 '22 15:11 SaibabaBalapur-MSFT

Hi @dahiro - Sorry for the delay! SQL Database has two modes of connecting – Proxy and Redirection. Redirection will require customers to allow access to all the IP ranges from the downloadable Azure IP Ranges and Service Tags list. Proxy only requires a subset of the IP ranges – specifically those that are used by our Gateways (which we document in the table & which gets outdated as new ranges are added). Sorry for the inconvenience.

We're compiling a list internally, and working on ways to automate updating the list. We'll hopefully resolve the list being outdated in the future. In the meantime, we'll get the list updated to the latest version. Thanks again for bringing this to our attention.

@MashaMSFT

VanMSFT avatar Mar 21 '23 20:03 VanMSFT

Hi @dahiro , thanks for contacting Microsoft! Since we're aware of the issue and are working to address it, I'll go ahead and close out this Git Issue but please feel free to comment should you need anything further.

Thanks again for reaching out and I hope you have a wonderful rest of your day! Masha from the SQL Docs team #please-close

MashaMSFT avatar Mar 22 '23 20:03 MashaMSFT