Comments (2)
Having a parameter that allows traffic from a single IP to go through does not seem to be a flexible enough solution. Because of NAT, and as the developer is changing location, the IP that Azure SQL "sees" as the source of traffic might change unpredictably.
Here is what the baseline should be IMO:
- In production the allowed traffic should come only from a set of well-known hosts that are part of the application. This is usually done via vnet settings.
- In development the server should accept all properly authenticated traffic.
I am going to follow up with the Azure SQL team to see if they think the above is valid and what are their general thoughts on the use of the SQL firewall during development vs production.
If the above holds, our problem is not so much the firewall configuration for SQL Azure, but the fact that we haven't really embraced the idea of production-vs-development deployments. @jongio @markweitzel do we have a (design) issue for that?
from azure-dev.
Closing this in favor of #1142
from azure-dev.
Related Issues (20)
- Honor system env vars as first option for compiling bicep when running on CI/CD
- azd provision segfault with bicep extension microsoftGraph HOT 1
- [Issue] azd pipeline config should also check if azure-dev.yaml
- azd init -t is not compatible with Aspire templates w/o azure.yaml on the root HOT 6
- Support MI for azd pipeline config + rg deployment
- Create azd videos for getting started
- [Issue] HOT 1
- [AzureTools][Aspire] Fail to publish the project using azd with the location "East US STG (eastusstg)" or "South Central US STG (southcentralusstg)" HOT 2
- pipeline config failing to validate remote with alias ssh hostnames HOT 3
- [AspireDeployment] Unsupported Azure Location are listed in AzDev CLI HOT 1
- [Issue] AZDO failure: Invalid use of relative path during infrastructure creation step of CI/CD pipeline HOT 2
- [pipeline config] Add one-time confirmation for the remote HOT 2
- [Issue] Persist current custom domain fails HOT 1
- Bicep parameters with default values are always passed as null HOT 2
- [Issue] Can't run azd down on RG with OpenAI instance HOT 2
- [Issue] azd deploy excludes node modules by default for zip deployment of node.js projects HOT 3
- [WebToolsE2E][Aspire Deployment] aspire-dashboard takes too long and errors HOT 5
- [Issue] SWA app no longer building successfully in GitHub actions HOT 6
- Add support for `args` field in `container.v0` and `container.v1` Aspire resource types HOT 1
- [Issue] azd up stuck on aspire dashboard HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from azure-dev.