Question

bourgoisrebel on Fri, 28 Jul 2017 07:53:55


Hello,

Is there any way to programmatically return the IP Address of the Data Factory by powershell or an ARM template output? I can't find a way, and can't even find it in the portal or resources.azure.com. It only becomes visible when we try to create connections to Azure SQL databases and an obscure error pops up when it tries to authenticate which includes the IP. App Services and other PaaS components of Azure make this visible in a number of ways.

We want to automate deployment of Azure SQL Databases and the DF, and need to be able to add the DF IP Address to the SQL Server firewall rules.

Follow on question, are there any plans to be able to configure this as a static IP, using perhaps a public IP as you can with Service Fabric?

Thanks



Sponsored



Replies

Jorg Klein on Tue, 01 Aug 2017 08:21:45


The ADF IP addresses are not available. There is only the full list of Microsoft Azure Datacenter IP Ranges that you could add but that gives the same result as setting the "Allow access to Azure servces" switch on your ASQLDB firewall and next to that this list changes every two weeks (if I am correct).

https://www.microsoft.com/en-us/download/details.aspx?id=41653

bourgoisrebel on Mon, 21 Aug 2017 08:01:20


The problem with that is it essentially opens up access to anything hosted in Azure as I understand it, which isn't really appropriate when you are talking about sensitive enterprise data. We are migrating data for core applications, so it needs to be properly secured. You can identify the IP Address from the error message that is displayed in DF when you try to create a pipeline, and then add it to the rules, but it's a bit messy. If the error message can display the IP Address, if we can find the IP Address of App Services, Service Fabric and Redis Cache etc, surely it's possible to display it in the portal or retrieve via powershell?

Jorg Klein on Tue, 22 Aug 2017 13:08:26


You are correct it opens up access to anything hosted in Azure. Most Azure components have dynamic IP ranges, so there is no easy solution here. The only thing you can do is vote here: https://feedback.azure.com/forums/270578-data-factory/suggestions/20565967-identify-ip-address-of-data-factory