Forum Discussion
IP firewall for an Azure Relay blocking Azure public IP
I'm configuring a new Azure Relay service, wcfrelay, for an onpremise data gateway. I want to use IP address white listing as described here. The goal is to allow powerbi to connect to onprem SQL servers.
I added public network CIDR to allow my onprem server. But now I'm seeing a public IP address from Azure being blocked. The data gateway status in powerplatform admin also shows as disconnected. The relay I setup diagnostics for the Relay and seeing Deny connection in the Log Analytics for 20.92.128.xx
I also have enabled Allow Microsoft Trusted services to Bypass the firewall. Could it be some other service that's not on the trusted list? Is there a way I can determine what service it is.
I'm concerned about the security implications of whitelisting an Azure IP address or broad ranges.
Is this expected behaviour?
Originally posted in Azure QA but was asked to post in here.
Hi robinmartin,
We would like to follow up and see whether the details we shared have resolved your problem. If you need any more assistance, please feel free to connect with the Microsoft Fabric community.
Thank you.I raised a support case with Microsoft and they said whitelisting isn't supported for my scenario. I need to open it to public networks.
4 Replies
Hi robinmartin,
We appreciate your inquiry through the Microsoft Fabric Community Forum.
Based on our understanding, when IP firewall rules are configured on an Azure Relay namespace, they are enforced at the namespace level, and any connection that is not explicitly allowed is rejected. The WCF Relay endpoint URI must be unique for every gateway and cannot be reused for other gateways. Additionally, Azure Relay configured with Private Link is not supported.
Please refer to the links below for more details:
Set the Azure Relay for on-premises data gateway | Microsoft Learn
Adjust communication settings for the on-premises data gateway | Microsoft Learn
On-premises Data Gateway In-depth - Power BI | Microsoft Learn
What is Azure Relay? - Azure Relay | Microsoft Learn
Azure Relay authentication and authorization - Azure Relay | Microsoft LearnWe hope the information provided helps to resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric Community.
Thank you.
Hi robinmartin,
We would like to follow up and see whether the details we shared have resolved your problem. If you need any more assistance, please feel free to connect with the Microsoft Fabric community.
Thank you.I raised a support case with Microsoft and they said whitelisting isn't supported for my scenario. I need to open it to public networks.
Hi robinmartin,
We are pleased to note that your issue has been resolved. Thank you for the update and for sharing the details from the support team, which will be beneficial to other members of the community. Should you have any further queries, please feel free to contact the Microsoft Fabric Community.
Thankyou.