How-To : Logic App with On-Premises Data Gateway Connector through IPSEC Tunnel

Question

Is it possible to design an Azure Logic App with an On-Premises Data Gateway Connector (supported On-Premises Data Base for instance) and ensure that the whole data stream from On-Premises to Azure Logic App is using IPSEC Tunnel, including the Service Bus part of On-Premises Data Gateway software?

Which

Answer 1

Hi @Generic - Since Logic Apps runs on a public cloud, it won't work unless you configure a VNET & IPsec against your on-prem environment. That can be done by putting your Logic Apps app inside a VNET using the ISE environment, and you should be able to establish an IPsec tunneling.

Also, note that the Logic Apps team announced a new capability recently that enables running Logic Apps on on-prem. for more info, please review: What is Azure Arc enabled Logic Apps?

Answer 2

Hi,

I believe you will have to follow these steps.
1- Integrate Logic App with VNET.
2- set up IPsec VPN with on-prem firewall using local network gateway and virtual network gateway.
3- enable routing in local network gateway.
4- configure vnet subnet as a point-to-site address in virtual network gateway.