question

HarishThota-9357 avatar image
0 Votes"
HarishThota-9357 asked AnkitGirgas-3718 commented

Azure APIM Service (Basic Tier) to connect VNET

Can someone please help how to configure APIM Azure Service which is on Basic Tier to connect with a Azure Virtual Network. This is required since we have few services running on Private IP with in a Private subnet of Azure Virtual Network. So the APIM (which is configured with Basic Tier) is not able to talk to Private IP's of Private subnet.

I see only Developer Tier and Premium Tier is allowed the APIM to configure with Azure Virtual Network. But Basic Tier is not allowed, so can someone please help if I can have a workaround for this problem instead of using Premium Tier since it is very expensive and can't go with Developer Tier since it is Production.

azure-virtual-networkazure-kubernetes-serviceazure-api-management
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@HarishThota-9357 Just following up here to see if my response clears things up

0 Votes 0 ·

1 Answer

PramodValavala-MSFT avatar image
1 Vote"
PramodValavala-MSFT answered AnkitGirgas-3718 commented

Unfortunately, there is no way to deploy the APIM Basic Tier in a VNET. You will have to upgrade to the Premium Tier for now. There is a feature request that you could up vote for adding support for this.

One way to approach this would be to expose the private services if possible. You could leverage Azure Application Gateway or Azure Internal Load Balancer + Azure Firewall.

For both, you can set up IP Restrictions to control who can call these services (APIM in this case).

Another option would be to leverage Azure Function Proxies with the Premium Plan that supports VNET Integration. You could restrict traffic to this function app using IP Restrictions, using the static IP of APIM.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@PramodValavala-MSFT
could you please elaborate on the option of using Azure Function proxies with Premium plan ?
Since the API gateway will be exposed to consumers how will VNET integration on Azure function help ?

0 Votes 0 ·