Can I connect a webhook from an external cloud platform to an Azure Durable Function app deployed in a private network?

Question

We have a usecase to deploy azure durable function app(HTTPStarter based) in private network and then provide its access endpoint to the webhook configuration in another product's cloud instance.

So, is it possible to send data to azure durable app through webhook configuration when function app is dpeloyed in private network?

If possible, what extra configurations are required from user's end?

Answer 1

Hi @Nirali Shah ,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Yes, you can connect a webhook from an external cloud platform to an Azure Durable Function app deployed in a private network, but it requires careful configuration to ensure secure and proper connectivity. Here are the steps and considerations you should take into account:

• First when deploying your Azure Durable Function, you can configure it to run in an Azure Virtual Network (VNet) to ensure it operates within a private network. This can be achieved using techniques like VNet integration for Azure Functions.
• You can use Azure API Management to expose your Durable Function securely. APIM can be integrated into your VNet, and it provides a gateway for outside requests to your Function app. Configure APIM to expose only the necessary endpoints and to perform authentication and authorization also these services can also help expose your Function securely to external requests without exposing your entire network.
• Ensure that the access to your Function App is secured using authentication mechanisms. Depending on your setup, this could be managed through Azure Active Directory (AAD), API keys, or mutual TLS and validate that appropriate roles and permissions are configured if using AAD, also configure NSGs to limit inbound and outbound traffic to only what is necessary for your application and the webhook.Firewalls and Route Tables: Utilize Azure Firewall or other firewall solutions to further govern and log the traffic to and from your network.

I hope this helps! Let me know if you have any further questions or need additional assistance.