Azure Blob Storage is support use private network

[johnhk215]

Hi All,
Does it support use Azure Site to Site VPN private network backup to Azure Blob Storage?

Thanks.

[HannesK]

Hello,
and welcome to the forums.

Could you describe the use case? I mean, the communication with Azure Blob storage is already encrypted 1x or 2x (1x with HTTPS / TLS and 2x optional at backup level). What is the idea of encrypting it 3x?

Ah, and just to make sure: you are really talking about Veeam Backup for Azure? https://www.veeam.com/backup-azure.html (just because some customers accidentally wrote to this forum while using Azure Blob as capacity tier in Veeam Backup & Replication)

Best regards,
Hannes

[Andreas Neufert]

I think this is possible by leveraging the internal DNS name for the BLOB storage.

[Andreas Neufert]

Maybe I missunderstood you. Can you please explaing why you implement an additional VPN tunnel to speak within your Azure datacenter with blob storage. Or do the VPN relate to the Azure internal connection between sites that is automatically created for you by Azure ?

[johan.h]

Support for private endpoints depends on name resolution. Do you have this set up on your end? Feel free to DM me if you need help with anything.
https://docs.microsoft.com/en-us/azure/ ... -endpoints

[johnhk215]

We've consider to deploy 10Gbps site to site VPN to Azure network , so that we have question for Veeam backup software can leverage this private network or not.

So you mean we can use Azure Private DNS to enforce the traffic is use the 10Gbps VPN tunnel?

Thanks.

[johan.h]

This really has very little to do with how Veeam works.

Effectively what you need to do is set up a private endpoint for your Azure Storage so that traffic to Azure Blob stays within your VNet.
https://azure.microsoft.com/en-us/servi ... vate-link/

Then you would set up your VPN connectivity so that your on-premises site has access to this VNet via VPN. The last step is configuring DNS correctly so that requests to Azure Blob route internal to VPN traffic.

[HannesK]

We've consider to deploy 10Gbps site to site VPN to Azure network

I moved the question to the VBR object storage forum... that's what caused the confusion in my answer.