Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have two virtual machines in my Azure deployment. The first is my frontend web VM instance and the second is a VM instance with a mysql database. Is it possible to define a network topology such that only my frontend instance can connect to my database instance? Adding an endpoint on the instance seems to open the port to the world.
If you add the VMs to a Virtual Network you don’t need to add an endpoint on the MySQL instance, just open up the necessary ports on the firewall for that particular instance. It won’t expose any external endpoints.
I cover a similar scenario involving Couchbase in a few blog posts here and here.
EDIT:
With Linux VMs in the current preview phase, using a Virtual Network is not supported. The option to do so is blocked in the portal, but achievable with PowerShell cmdlets. It’s unclear at this point if that’s sufficient to achieve the same result as you can with Windows VMs.