Private Networking Overview

This page will provide an overview of the private networking setup for Turbo360.

Application Outbound Traffic

In private hosting mode, Turbo360 as an application will be talking to other Azure resources which make up the application infrastructure.

If you are configuring private networking then the outbound traffic from the core application components (Web App, Function Apps) will be coming through the App Service Plan.  This app service plan can be VNET Integrated into a subnet on your virtual network.

If you are hosting on a typical app service plan then each of the function apps and web app will have their networking configuration set to point to the same subnet.

Traffic from the App Service Plan hitting the subnet will then be routed to the appropriate places.

In the case of accessing other resources in the Turbo360 architecture it may access this will include the database and storage as shown below.  These PaaS resources can also be added to the network via Private Endpoints which is discussed in the next section.

Note - Azure Management API & Kovai License Activation

The Turbo360 services running on the App Service will also query the Azure Management API (Cost data and rightsizing) and also communicate with a Kovai API (License Activation).  These are not shown on the diagram so we can focus in the diagram on the private networking use cases but this traffic flow will go via the app service outbound subnet.

Application Inbound Traffic

The below picture shows the inbound traffic flow for components in the Turbo360 architecture when configured with private endpoints.

The key points here are:

• Traffic from an application user to the web application to access Turbo360 is via a Private Endpoint

• Traffic from an administrator who needs to access the function apps or web app for admin purposes is via a private endpoint

• Traffic coming into the SQL database is via a private endpoint

• Traffic coming into the storage account is via a private endpoint

• Traffic coming into the Azure monitor components (App Insights / Log Analytics) is via private link

• Outbound traffic from the App Service plan will hit the App Service outbound subnet and then may route to the PaaS resources such as the SQL database where it will access the database via the subnet with the private endpoint associated