Azure Cloud Service extended support - apply IP filtering rules

Aleks G

1/5/24, 2:27 PM

I'm configuring Azure Cloud Service (extended support). Part of the requirements is to apply certain IP security rules, e.g. RDP only from a whitelist of addresses, and some others. With individual VMs, I have used network security groups in the past, however this doesn't seem to work for the cloud service (extended support).

Specifically, I associated a network security group with the subnet in a virtual network, from which role instances get their addresses, yet this NSG's rules don't seem to be adhered to. For example, my inbound rules look like this:

(shaded sources contain allowed 2 IP addresses). Yet I am able to connect to RDP from any other IP address over the internet.

So, the question is how do I apply IP security rules on the cloud service? Whether this is NSG or something else.

1 + 0

azure

network-security-group

cloud-service

Score:0

Server

Sam Cogan

1/9/24, 1:26 PM

Cloud services are a "classic" resources and use a classic vnet, and classic NSG's. You need to make sure that you create a "classic" nsg and apply it to the right vNet.

Edit: You are correct, this should support an ARM NSG. What you have listed in your diagram looks correct from the NSG perspective. I am wondering if the allow rule for the Azure load balancer is allowing this traffic in, given that RDP traffic to cloud services is proxied via a load balancer. Can you try configuring your NSG as documented here to see if that helps?

+ 2

Aleks G

1/9/24, 3:06 PM

I'm afraid you're not correct. "Cloud Service" is a classic resource, but "Cloud Service (Extended Support)" is a new type ARM resource, which was introduced in 2021 as a logical replacement for Cloud Service (Classic).

Sam Cogan

1/12/24, 9:28 AM

Sorry, you are correct, I should pay more attention! Please see edit.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Azure Cloud Service extended support - apply IP filtering rules

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.