You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/configure-vnet-integration-enable.md
+9-12Lines changed: 9 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,27 +5,24 @@ keywords: vnet integration
5
5
author: madsd
6
6
ms.author: madsd
7
7
ms.topic: how-to
8
-
ms.date: 10/20/2021
8
+
ms.date: 02/13/2023
9
9
ms.tool: azure-cli, azure-powershell
10
10
---
11
11
12
12
# Enable virtual network integration in Azure App Service
13
13
14
-
Through integrating with an Azure virtual network (VNet) from your [Azure App Service app](./overview.md), you can reach private resources from your app within the virtual network. The VNet integration feature has two variations:
15
-
16
-
***Regional virtual network integration**: Connect to Azure virtual networks in the same region. You must have a dedicated subnet in the virtual network you're integrating with.
17
-
***Gateway-required virtual network integration**: When you connect directly to a virtual network in other regions or to a classic virtual network in the same region, you must use gateway-required virtual network integration.
18
-
19
-
This article describes how to set up regional virtual network integration.
14
+
Through integrating with an Azure virtual network from your [Azure App Service app](./overview.md), you can reach private resources from your app within the virtual network.
20
15
21
16
## Prerequisites
22
17
23
-
The VNet integration feature requires:
18
+
The virtual network integration feature requires:
24
19
25
20
- An App Service pricing tier [that supports virtual network integration](./overview-vnet-integration.md).
26
21
- A virtual network in the same region with an empty subnet.
27
22
28
-
The subnet must be delegated to Microsoft.Web/serverFarms. If the delegation isn't done before integration, the provisioning process will configure this delegation. The subnet must be allocated an IPv4 `/28` block (16 addresses). We recommend that you have a minimum of 64 addresses (IPv4 `/26` block) to allow for maximum horizontal scale.
23
+
The subnet must be delegated to Microsoft.Web/serverFarms. If the delegation isn't done before integration, the provisioning process configures this delegation. The subnet must be allocated an IPv4 `/28` block (16 addresses). We recommend that you have a minimum of 64 addresses (IPv4 `/26` block) to allow for maximum horizontal scale.
24
+
25
+
If the virtual network is in a different subscription than the app, you must ensure that the subscription with the virtual network is registered for the `Microsoft.Web` resource provider. You can explicitly register the provider [by following this documentation](../azure-resource-manager/management/resource-providers-and-types.md#register-resource-provider), but it is automatically registered when creating the first web app in a subscription.
29
26
30
27
## Configure in the Azure portal
31
28
@@ -39,7 +36,7 @@ The subnet must be delegated to Microsoft.Web/serverFarms. If the delegation isn
39
36
40
37
:::image type="content" source="./media/configure-vnet-integration-enable/vnetint-add-vnet.png" alt-text="Screenshot that shows selecting the virtual network.":::
41
38
42
-
During the integration, your app is restarted. When integration is finished, you'll see details on the virtual network you're integrated with.
39
+
During the integration, your app is restarted. When integration is finished, you see details on the virtual network you're integrated with.
> The command checks if the subnet is delegated to Microsoft.Web/serverFarms and applies the necessary delegation if it isn't configured. If the subnet was configured, and you don't have permissions to check it, or if the virtual network is in another subscription, you can use the *--skip-delegation-check* parameter to bypass the validation.
50
+
> The command checks if the subnet is delegated to Microsoft.Web/serverFarms and applies the necessary delegation if it isn't configured. If the subnet was configured, and you don't have permissions to check it, or if the virtual network is in another subscription, you can use the `--skip-delegation-check` parameter to bypass the validation.
> If the webapp is in another subscription than virtual network, you can use the *Set-AzContext -Subscription "xxxx-xxxx-xxxx-xxxx"* command to set the current subscription context. Set the current subscription context to the subscription where the web app was deployed.
0 commit comments