SOBR - Azure Archive - SSH and IP

[Daithi]

Hi,

I understand we need to allow SSH from our onsite Veeam server to create the Proxy Helper Virtual Machines in Azure. These VMs get created and deleted so may have different IP addresses each time.

I want to harden our SSH outbound rule on the server so it will only be able to SSH into the Veeam appliances in Azure.

Is there anyway to set a static IP address or a DNS name for these virtual appliances, instead of relying on quite a large range from Microsoft?

[HannesK]

Hello,
not really, as there is one archiver proxy machine per per backup chain, that would still be up to 64 machines. If you have Azure Direct Connect, one could use internal instead of public IP addresses (but even then, it's multiple addresses)

Best regards,
Hannes

[Daithi]

Thanks. I guess a VPN connection could be a good way to go. It's a pity we can't limit/specify what the addresses would be as it seems a bit unwieldy now

[veremin]

I think you can create a dedicated subnet, select it in the appliance settings and create a rule for this specific IP range only.