Home/ Questions/Q 6350219
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T21:46:13+00:00

We integrate with a third-party service where we can run queries which is right

  • 0

We integrate with a third-party service where we can run queries which is right now secured using HTTPS encryption and username/password. We send our queries from a service running on the Windows Azure cloud.

The third-party provider wants to migrate towards better security and they have asked us to either

  1. Setup a VPN – which is problematic because for we’d need to use Azure Connect and they’d have to install the client endpoint service on their part.

  2. Provide some IP address where the queries will come from so they can filter out anyone else at the firewall level – which is problematic because AFAIK you cannot fix the IP addresses of the Windows Azure Compute nodes.

  3. Suggest another secure alternative – the only thing I could think of is to set up the VPN with them on a non-Azure server and then tunnel the requests through using Azure Connect – which is obviously extra work for us and also defeats the point of hosting the service on a cloud if it depends on a non-cloud service.

Any ideas?

  • Can they install the Azure Connect endpoint on another server on their DMZ network? i.e. not the actual server which hosts their service?
  • Can we somehow provide them with static IPs for incoming queries?
  • Any other solution that is scalable?

Thanks

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If I understand the scenario correctly, your Azure service is a client to a 3rd party service. This scenario may be solved through the use of the Windows Azure AppFabric Service Bus. You would need to install a proxy app in the 3rd party’s datacenter that would be responsible for establishing the connection to the service bus. The connection comes from inside the 3rd party’s datacenter, so no new incoming holes in the firewall. The connection can handle WCF connections with all its security strengths, and users can be authenticated with ACS.

    Here is a starting point: http://msdn.microsoft.com/en-us/library/ee732537.aspx

    There is a hands on lab in the Windows Azure Platform Training Kit that explains most of the details that you’ll need.

    • 0