Azure Web App in a Private VPN?

Question

I'm simply wondering if it is possible to create a private network on Azure and place a web app there? I know I can put VM's, SQL instances etc, but my question concern Web Apps specifically. Seems like such basic thing, but can't seem to make any progress on this...

My goal is to setup a Dev, Test and Prod environment in Azure. I setup a VPN for each environment. Each VPN has three subnets (Public Web Front End, Private App Service, and a private Data sub net)

I want Dev, and Test environments to be completely private, but Prod should have the "Web Front End" subnet open to the Internet.

I cannot find a way to put the Web App in the subnet? If this is not possible, then does that mean I can't use Web Apps, and must instead use a VM with IIS? Is my approach using VPN's and subnets incorrect?

Thanks,

Per

Answer 1

You need to create an App Service Environment (ASE) and deploy your web app there. Instructions on how to do this is available here.

Also, be advised that at this time, ASE can only be created in a v1 virtual network.

Answer 2

Absolutely - you need to set up Virtual Network or Hybrid Connection:

Reference #1: Connect to on-premises SQL Server from a web app in Azure App Service using Hybrid Connections

Reference #2: Integrate your app with an Azure Virtual Network

Reference #3: How to place your Web App into the existing Virtual Network (your situation, i guess)

And you will have the VPN/Virtual Network that will give your solution the continuous IPs space.

Answer 3

Earlier this was possible only for azure VM connected via private peering via expressroute.This is now possible with azure private link