The ASE management traffic flows through the enterprise virtual network. This traffic should be routed directly to the dedicated IP addresses outside the virtual network, avoiding the firewall. This is achieved by creating a user-defined virtual network route table. The article App Service Environment management addresses lists these IP addresses. This list can get too long to be configured in the firewall manually. This implementation shows how this can be populated programmatically. The following line in the deploy_std.sh obtains this list using Azure CLI and jq, a command line JSON parser:
Top Firewall for Differently Populated Enterprises
2ff7e9595c
Comments