Dibyendu Dawn

My feedback

  1. 414 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  Networking » IP addresses  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote which allows us to effectively prioritize your request against our existing feature list and also gives us insight into the potential impact of implementing the suggested feature

    An error occurred while saving the comment
    Dibyendu Dawn commented  · 

    This is absolute required when we have lock-down environment. Specially in healthcare industry we have such security requirements where we need to lock-down all the storage account, other internal service endpoints (service fabric, AKS, event hub, service bus etc) etc internally to only our org IP range. This way azure hosted agents are not able to communicate with azure resources. Currently only 2 option are there: regularly ingest the whole geography data-center IPs or self-hosted devops agents. We need better solution for this. As both the solution are inconvenience for us. Updating MS published new IP ranges to hundred of our project specific resources not possible every week. Also we need different OS version for azure self hosted VM agents as we have both Linux + different versions of windows containers. Maintaining this agents, lock down all security aspect, patching etc again required lot of effort.

    Dibyendu Dawn supported this idea  · 

Feedback and Knowledge Base