search

Azure / AzureStack-QuickStart-Templates

Quick start ARM templates that deploy on Microsoft Azure Stack
http://aka.ms/AzureStackGitHub
MIT License
559 stars 717 forks source link

Network Security for WorkersSNG - appservice-fileserver-sqlserver-ha template #437

Open aisog opened 5 years ago

aisog commented 5 years ago

Hi after finish deployment you will struggle with ScaleSets of Workes, because Network Security for WorkersNSG block you any network connections to File Server.

When you go into app service management inside one of Controller you will see workers in Starting status, example of error for worker: Info 5/20/2019 3:09:30 PM Start exercise FileServer at 5/20/2019 3:09:30 PM Warning 5/20/2019 3:10:00 PM Failed exercise FileServer at 5/20/2019 3:10:00 PM Info 5/20/2019 3:11:00 PM Start exercise FileServer at 5/20/2019 3:11:00 PM

You have to change in template NSG definition, the rule which block connection is Outbound_Deny_VNet so you have to add by explicity with low pirority Outbound Allow for File Server Cluster of FIle Server Subnet.

Thanks

knithinc commented 5 years ago

@pappleby64 , could you please take a look at this?

pappleby64 commented 5 years ago

There is an App Service release note on this issue https://docs.microsoft.com/en-gb/azure-stack/operator/azure-stack-app-service-release-notes-update-six Unfortumnately nothing I can do from this template as the NSG in question isn't created in this template. It does not created until you run the AppService install itself - by which time this one is finished.