You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-functions/configure-networking-how-to.md
+5-3Lines changed: 5 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -68,7 +68,9 @@ Set up a secured storage account for your function app:
68
68
69
69
*[Create a private endpoint](../storage/common/storage-private-endpoints.md#creating-a-private-endpoint). As you set up your private endpoint connection, create private endpoints for the `file` and `blob` subresources. For Durable Functions, you must also make `queue` and `table` subresources accessible through private endpoints. If you're using a custom or on-premises Domain Name System (DNS) server, [configure your DNS server](../storage/common/storage-private-endpoints.md#dns-changes-for-private-endpoints) to resolve to the new private endpoints.
70
70
71
-
*[Restrict traffic to specific subnets](../storage/common/storage-network-security.md#grant-access-from-a-virtual-network). Ensure your function app is network integrated with an allowed subnet and that the subnet has a service endpoint to `Microsoft.Storage`. If your app is in a different region than your virtual network, use `Microsoft.Storage.Global` instead. Note, a storage account cannot have both.
71
+
*[Restrict traffic to specific subnets](../storage/common/storage-network-security.md#grant-access-from-a-virtual-network). Ensure your function app is network integrated with an allowed subnet and that the subnet has only one of these service endpoints defined:
72
+
*`Microsoft.Storage`: use when your app is in the same region as your virtual network.
73
+
*`Microsoft.Storage.Global`: use when your app is in a different region than your virtual network.
72
74
73
75
1. Copy the file and blob content from the current storage account used by the function app to the newly secured storage account and file share. [AzCopy](../storage/common/storage-use-azcopy-blobs-copy.md) and [Azure Storage Explorer](https://techcommunity.microsoft.com/t5/azure-developer-community-blog/azure-tips-and-tricks-how-to-move-azure-storage-blobs-between/ba-p/3545304) are common methods. If you use Azure Storage Explorer, you might need to allow your client IP address access to your storage account's firewall.
74
76
@@ -88,7 +90,7 @@ You're now ready to route your function app's traffic to go through the virtual
88
90
89
91
1. In the new page, under **Application routing**, select **Outbound internet traffic**.
90
92
91
-
1. If you're using an Azure Files connection, enable [content share routing](../app-service/overview-vnet-integration.md#content-share)to enable your function app to communicate with Azure Files through its virtual network. In the same page as the previous step, under **Configuration routing**, select **Content storage**.
93
+
1. If your app uses an Azure Files share, enable [content share routing](../app-service/overview-vnet-integration.md#content-share)by selecting **Content storage** under **Configuration routing**. This allows your app to communicate with Azure Files using the virtual network.
@@ -105,7 +107,7 @@ Finally, you need to update your application settings to point to the new secure
105
107
|[`WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`](./functions-app-settings.md#website_contentazurefileconnectionstring)| Storage connection string | Use the connection string for your new secured storage account, which you saved earlier. Only relevant if your app is using Azure Files. |
106
108
|[`WEBSITE_CONTENTSHARE`](./functions-app-settings.md#website_contentshare)| File share | Use the name of the file share created in the secured storage account where the project deployment files reside. Only relevant if your app is using Azure Files. |
107
109
108
-
1. Select **Apply**, and then **Confirm** to save the new application settings in the function app. This will cause the function app to restart.
110
+
1. Select **Apply**, and then **Confirm** to save the new application settings in the function app. This causes the function app to restart.
109
111
110
112
After the function app finishes restarting, it connects to the secured storage account.
Copy file name to clipboardExpand all lines: articles/azure-functions/storage-considerations.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -166,7 +166,7 @@ Creating your function app resources using methods other than the Azure CLI requ
166
166
167
167
## Create an app without Azure Files
168
168
169
-
The Azure Files service provides a shared file system that supports high-scale scenarios. When your function app runs in an Elastic Premium or Windows Consumption plan, an Azure Files share is created by default in your storage account. That share is used by Functions to enable certain features, like log streaming. It is also used as a shared package deployment location, which guarantees the consistency of your deployed function code across all instances.
169
+
The Azure Files service provides a shared file system that supports high-scale scenarios. When your function app runs in an Elastic Premium plan or on Windows in a Consumption plan, an Azure Files share is created by default in your storage account. That share is used by Functions to enable certain features, like log streaming. It is also used as a shared package deployment location, which guarantees the consistency of your deployed function code across all instances.
170
170
171
171
By default, function apps hosted in Premium and Consumption plans use [zip deployment](./deployment-zip-push.md), with deployment packages stored in this Azure file share. This section is only relevant to these hosting plans.
172
172
@@ -185,13 +185,13 @@ You should also note the following considerations:
185
185
186
186
* The app can't use version 1.x of the Functions runtime.
187
187
* Your app can't rely on a shared writeable file system.
188
-
* Portal editing will not work.
188
+
* Portal editing isn't supported
189
189
* Log streaming experiences in clients such as the Azure portal default to file system logs. You should instead rely on Application Insights logs.
190
190
191
-
If the above requirements suit your scenario, you can proceed to create a function app without Azure Files. You can do this by creating an app without the `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE` app settings.
191
+
If the above requirements suit your scenario, you can proceed to create a function app without Azure Files. You can do this by creating an app without the `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE` app settings in one of these ways:
192
192
193
-
-If you are creating function apps via ARM templates: remove the two app settings and then deploy the modified template.
194
-
-If you are creating function apps in the Azure portal: unselect the "Add an Azure Files connection" checkbox in the Storage tab.
193
+
-Bicep/ARM templates: remove the two app settings from the ARM template or Bicep file and then deploy the app using the modified template.
194
+
- Azure portal: unselect the **Add an Azure Files connection** checkbox in the **Storage** tab when you create the app in the portal.
195
195
196
196
Since Azure Files is used to enable dynamic scale-out for Functions, scaling could be limited when running your app without Azure Files in the Elastic Premium plan and Consumption plans running on Windows.
0 commit comments