question

MSTechie-7364 avatar image
0 Votes"
MSTechie-7364 asked MartinJaffer-MSFT answered

Azure Datafactory to Azure SQL PaaS (Firewall inclusions)

How many IP addresses does the Azure SSIS Integration Runtime have ? what is it ?

From the Azure Datafactory V2 in West Europe , using Azure SSIS IR , if i want to connect to Azure SQL using Managed identity, what IP addresses should i open in the firewall of Azure SQL PaaS

Please help.

azure-data-factoryazure-sql-database
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @MSTechie-7364 and welcome to Microsoft Q&A.

I think the easiest way to resolve the issue is to enable Allow Azure Services and resources to access this server option.

Beyond that, might I recommend using Managed Private Endpoints to secure instead of IP addresses in firewall?

https://docs.microsoft.com/en-us/azure/data-factory/join-azure-ssis-integration-runtime-virtual-network

0 Votes 0 ·

Thank you @MartinJaffer-MSFT

In our company's security policy , it is not allowed to enable this option.-- Allow Azure Services and resources to access this server .. Any app service from any subscription can connect, if this option is selected.

Hence we need to specify the IP address of Azure SSIS IR.

i don't know if Azure SSIS IR will have 1 IP address or multiple address (like Azure ADF V2's Auto-Resolve IR).

Can you please help me with the list of IP address for Azure SSIS IR in "West Europe"

0 Votes 0 ·
MartinJaffer-MSFT avatar image
0 Votes"
MartinJaffer-MSFT answered

So I heard back, @MSTechie-7364 .

Static ip range does not only applies to ssis ir in public yet, refer to Azure Integration Runtime IP addresses - Azure Data Factory | Microsoft Docs. SSIS IR join VNet w/ static public ip is the way right now.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MartinJaffer-MSFT avatar image
0 Votes"
MartinJaffer-MSFT answered MSTechie-7364 commented

Excerpt from downloadable ranges as of 2021-05-18 :

       "name": "DataFactory.WestEurope",
       "id": "DataFactory.WestEurope",
       "properties": {
         "changeNumber": 3,
         "region": "westeurope",
         "regionId": 18,
         "platform": "Azure",
         "systemService": "DataFactory",
         "addressPrefixes": [
           "13.69.67.192/28",
           "13.69.107.112/28",
           "13.69.112.128/28",
           "40.74.24.192/26",
           "40.74.26.0/23",
           "40.113.176.232/29",
           "52.236.187.112/28",
           "2603:1020:206:1::480/121",
           "2603:1020:206:1::500/122",
           "2603:1020:206:1::700/121",
           "2603:1020:206:1::780/122",
           "2603:1020:206:402::330/124",
           "2603:1020:206:802::210/124",
           "2603:1020:206:c02::210/124"
         ],
         "networkFeatures": [
           "NSG"
         ]
       }
     },


@MSTechie-7364

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @MartinJaffer-MSFT


In Azure Datafactory, we have 3 different runtimes .
1) Azure SSIS IR
2) Azure Self Hosted IR
3) Azure AutoResolve IR, which is created by default whenever ADF V2 is created.

The IP Address range , you gave applies for Azure Auto-Resolve IR ... Does this IP range also apply for Azure SSIS IR ?



0 Votes 0 ·

For Azure SQL PaaS , we can enable private endpoint.

Can we connect to Azure SQL PaaS with private endpoint from Azure SSIS IR , which is VNet integrated ?

0 Votes 0 ·

I think the ranges include all Azure IR types, as I don't know where else they would go, but I am asking internally now, to be sure.
@MSTechie-7364

0 Votes 0 ·

Hi @MartinJaffer-MSFT

ok will wait.

Thank you

0 Votes 0 ·