David

My feedback

  1. 23 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    started  ·  17 comments  ·  SQL Server » Bugs  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    David commented  · 

    Hi

    I am just using a standard RDBMS data source pointing to another Azure SQL database on the same SQL server and I get the error described

    CREATE EXTERNAL DATA SOURCE [DataSource] WITH (TYPE = RDBMS, LOCATION = N'***.database.windows.net', CREDENTIAL = [BICred], DATABASE_NAME = N'Automation')

    Cheers

    David shared this idea  · 
  2. 1,955 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    91 comments  ·  Data Factory  ·  Flag idea as inappropriate…  ·  Admin →

    Great news – static IP range for Azure Integration Runtime is now available in all ADF regions! You can whitelist specific IP ranges for ADF as part of firewall rules. The IPs are documented here: https://docs.microsoft.com/en-us/azure/data-factory/azure-integration-runtime-ip-addresses#azure-integration-runtime-ip-addresses-specific-regions. Static IP ranges for gov cloud and China cloud will be published soon!

    Please refer to this blog post on how you can use various mechanisms including trusted Azure service and static IP to secure data access through ADF:
    https://techcommunity.microsoft.com/t5/azure-data-factory/azure-data-factory-now-supports-static-ip-address-ranges/ba-p/1117508

    Service tag support will be made available in next few weeks. Please stay tuned!

    If your network security requirement calls for ADF support for VNet and cannot be met using Trusted Azure service (released in Oct 2019), static IP range (released in Jan 2020), or service tag (upcoming), please vote for VNet feature here: https://feedback.azure.com/forums/270578-data-factory/suggestions/37105363-data-factory-should-be-able-to-use-vnet-without-re

    David supported this idea  · 
    An error occurred while saving the comment
    David commented  · 

    This is definitely a minimum requirement from my perspective and I can't believe it is the third most popular idea and it seems it hasn't even been reviewed yet. We can't possibly go into production by opening up our key vault and blob storage to the whole of a data centre where the ADF service resides. We have even had issues with this approach where our data factory was created in Southeast Asia and it was running on IP addresses in an Australian data centre. How about service endpoints for ADF?

Feedback and Knowledge Base