Reputation: 199
In Azure cloud services how do I block all public access with exception list ?
I am running Azure cloud service with Windows 2008 R2 instance.
Upvotes: 1
Views: 834
Reputation: 71091
You can set up access control list on the endpoints, specifying ranges of IP addresses to allow or block. Currently this is only exposed via PowerShell. You'd do something like this:
$acl = New-AzureAclConfig
Set-AzureAclConfig -AddRule Permit -RemoteSubnet "1.2.3.0/24" -Order 1
-ACL $acl -Description "my company IP range"
Set-AzureAclConfig -AddRule Deny -RemoteSubnet "5.6.7.0/24" -Order 2
-ACL $acl -Description "that evil hacker"
Get-AzureVM -ServiceName myservice -Name myvm |
Set-AzureEndpoint -Name http -Protocol tcp -PublicPort 80 -LocalPort 80 -ACL $acl |
Update-AzureVM
Upvotes: 1