Integrate storage, database, webapp, and databricks into one VNET

Question

We are hardening our ML platform in Azure. Basically, we want to put all the Azure services ( ADLS, PostgreSQL DB, Web App, and Databricks cluster) in one virtural network so all the traffic will be inside the Azure network whenever possible (except the ingress collected data from on-premise network etc)

We plan to create different subnets for each services if needed:

two subnets for databrick cluster (VNET injection)
one subnet for the webapp service (VNET integration for outbound traffic)

The questions are:

Do we need to create dedicated subnet for ADLS storage and Database?

If not, how to route traffic between different Azure services? will the private endpoint be enough?

Thanks!

Answer

Hello,

if you want all the resources to be in their own subnet but allow communication you can use private endpoints to specific resources.

Another technique you may consider using is vnet peering as described here : https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

so that all the traffic will still go over Microsoft’s private network only, but you can access the resources as if they where part of the same network.

Share via

Integrate storage, database, webapp, and databricks into one VNET

1 answer

Your answer