Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
May I ask what exactly is your requirement here?
- Let's say you have 2 AppServices, AppService1 and AppService2 and AppService2 has the third party tool
- Now, do you want the AppService2 to connect to AppService1's endpoint via Public internet? - Former
- Or do you want AppService2 to connect to AppService1 via Private Network itself (within Azure backbone) - Latter
Observation,
- The former is possible
- Provided that you whitelist the AppService2's Outbound IP Addresses in AppService1's access restrictions
- Here, the traffic from AppService2 to AppService1 is flowing via Public Internet
- The latter is, however, not possible with just VNET Integration.
- Note that Virtual network integration is used only to make outbound calls from your app into your virtual network and not vice versa.
- i.e., Services in VNET cannot make calls to the App Service via Private Network itself
- These calls should go via Internet
- You should consider private endpoint for inbound private access.
- Network traffic between a client on your private network and the app traverses over the virtual network and a Private Link on the Microsoft backbone network, eliminating exposure from the public Internet.
- See : Integrate your app with an Azure virtual network
Hope this helps.
Thanks,
Kapil
Please Accept an answer if correct.
Original posters help the community find answers faster by identifying the correct answer.