Configure Azure to allow inbound traffic to only one port by IP address and the rest to domain name

Question

Hi all,

I apologize for the poorly-worded title. What I'm trying to accomplish is this: allow one port to be reached by IP address, but require all other ports to use the domain name for connection. We're using Chirpstack and are expecting inbound traffic from around the globe.

Currently, the Azure server can be reached by its public IP address for all ports. I want to restrict this traffic to the domain name so HTTPS can be used. However, because we have already sent out devices that are configured to upload to our public IP address, we are trying to keep this IP address and port reachable.

I plan to re-restrict access to most ports (except 1700) and whitelist IP addresses to restrict unintended visitors once I get the OK from management. We already have a DNS name (nottherealname.westus#.cloudapp.azure.com)

Any recommendations?