Soru

Zorluk: OrtaCreate and Configure Azure Functions

You are configuring a V4 Azure Function App that needs to connect to an external service. The external service requires all incoming requests to originate from a single, static public IP address. The Function App is currently running on an Elastic Premium plan.

Which two actions should you perform to configure the Function App for static outbound IP addresses? (Select two.)

  1. Configure regional virtual network (VNet) integration for the Function App to a delegated subnet.Cevap
  2. Associate an Azure NAT Gateway with a public IP address to the integrated subnet.Cevap
  3. C
    Scale the Function App hosting plan down to a Consumption plan to allocate static outbound IPs.
  4. D
    Configure a user-assigned managed identity for the Function App to grant outbound firewall access.

Cevap

Configure regional virtual network (VNet) integration for the Function App to a delegated subnet, and associate an Azure NAT Gateway with a public IP address to the integrated subnet.
To route outbound traffic from a V4 Azure Function App through a static public IP address, you must first configure regional virtual network (VNet) integration. This places the outbound traffic of the Function App within a delegated subnet. Next, you associate an Azure NAT Gateway (which has an assigned static public IP address) with that delegated subnet. Any outbound internet-bound traffic from the subnet will use the NAT Gateway's static public IP.

Adım Adım Çözüm

1
Configure regional virtual network (VNet) integration for the Function App.
The Function App is connected to a delegated subnet, enabling outbound network traffic from the Function App to route into the VNet.
By default, Azure Functions route outbound traffic through a shared pool of dynamic public IP addresses. Integrating with a subnet is the necessary first step to control and route outbound network traffic.
2
Deploy an Azure NAT Gateway with a static public IP address and associate it with the delegated subnet.
All outbound internet-bound traffic originating from the subnet, including the Function App's outbound calls, is routed through the NAT Gateway.
The NAT Gateway translates all outbound traffic from the subnet to use its own assigned static public IP address, satisfying the external service's firewall requirement.

Anahtar Kavram

Configuring static outbound IP addresses for Azure Functions using virtual network integration and NAT Gateway.
Tahmini Süre:2m 0s
Bu soruyu puanla