Skip to content

Commit f356be3

Browse files
committed
refactor into the storage article
1 parent 564f3dc commit f356be3

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

articles/azure-functions/storage-considerations.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,10 @@ To limit the potential impact of any broadly scoped storage permissions, conside
8787

8888
[!INCLUDE [functions-shared-storage](../../includes/functions-shared-storage.md)]
8989

90+
### Consistent routing through virtual networks
91+
92+
Multiple function apps hosted in the same plan can also use the same storage account for the Azure Files content share (defined by `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`). When this storage account is also secured by a virtual network, all of these apps should also use the same value for `vnetContentShareEnabled` (formerly `WEBSITE_CONTENTOVERVNET`) to guarantee that traffic is routed consistently through the intended virtual network. A mismatch in this setting between apps using the same Azure Files storage account might result in traffic being routed through public networks, which causes access to be blocked by storage account network rules.
93+
9094
## Working with blobs
9195

9296
A key scenario for Functions is file processing of files in a blob container, such as for image processing or sentiment analysis. To learn more, see [Process file uploads](./functions-scenarios.md#process-file-uploads).

includes/functions-content-over-vnet-shared-storage-note.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,4 +7,4 @@ ms.author: glenga
77
---
88

99
> [!NOTE]
10-
> Multiple function apps hosted in the same plan can also use the same storage account for the content share (defined by `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE`). In such a scenario, all of these apps should also use the same value for `vnetContentShareEnabled` (formerly `WEBSITE_CONTENTOVERVNET`) to guarantee that traffic is consistently routed through the intended network. A mismatch in this setting between apps using the same content share might result in traffic being routed through public networks, which causes access to be blocked by storage account network rules.
10+
> You must take special care when routing to the content share in a storage account shared by multiple function apps in the same plan. For more information, see [Consistent routing through virtual networks](../articles/azure-functions/storage-considerations.md#consistent-routing-through-virtual-networks) in the Storage considerations article.

0 commit comments

Comments
 (0)