Azure App Service Deploy返回(403)受IP限制禁止 [英] Azure App Service Deploy returns (403) Forbidden with IP restriction

问题描述

在Azure中，我为以下项启用了IP限制:

In Azure, I turned on IP restrictions for:

• Web应用(网络>访问限制)
• SQL服务器(防火墙和虚拟网络>添加客户端IP)
• SQL数据库(设置服务器设置)

该解决方案仍在本地和DevOps(也称为Team Foundation Server)中构建.

The solution still builds locally and in DevOps (aka Team Foundation Server).

但是，Azure App Service部署现在失败:

However, Azure App Service Deploy now fails:

##[error]Failed to deploy App Service.
##[error]Error Code: ERROR_COULD_NOT_CONNECT_TO_REMOTESVC
More Information: Could not connect to the remote computer 
("MYSITENAME.scm.azurewebsites.net") using the specified process ("Web Management Service") because the server did not respond. Make sure that the process ("Web Management Service") is started on the remote computer.
Error: The remote server returned an error: (403) Forbidden.
Error count: 1.

如何通过防火墙进行部署?

How can I deploy through the firewall?

我需要一个虚拟网络来将Azure资源隐藏在列入白名单的IP后面吗?

Do I need a Virtual Network to hide Azure resources behind my whitelisted IP?

推荐答案

REST站点 scm.azurewebsites.net 必须具有 Allow All ，即没有限制.此外，与***.azurewebsites.net 相同的限制应未选中.

The REST site scm.azurewebsites.net must have Allow All, i.e. no restriction. Also, Same restrictions as ***.azurewebsites.net should be unchecked.

它不需要其他限制，因为URL访问已经需要Microsoft凭据.如果添加了限制，则部署将使防火墙失效，因此会遇到很多麻烦.

It does not need additional restriction because url access already requires Microsoft credentials. If restrictions are added, deploy will fail the firewall, hence the many complications I encountered.

这篇关于Azure App Service Deploy返回(403)受IP限制禁止的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！