Configuring firewall and proxy access for Azure

If you run Turbonomic behind a proxy or firewall, configure Turbonomic to allow unrestricted access to the following URLs to enable the full set of features for Azure targets.

Firewall and proxy access for the Azure service principal target

For global Azure:

  • ratecard.azure-api.net

  • management.core.windows.net

  • management.azure.com

  • login.microsoftonline.com

  • ratecard.blob.core.windows.net

  • api.loganalytics.io

For Azure Government:

  • ratecard.azure-api.net

  • management.core.usgovcloudapi.net

  • management.usgovcloudapi.net

  • login.microsoftonline.us

  • ratecard.blob.core.usgovcloudapi.net

  • api.loganalytics.us

Firewall and proxy access for the Azure Billing target

For global Azure:

  • api.loganalytics.io

  • login.microsoftonline.com

  • management.azure.com

  • For billing data:

    • Cost Details API

      *.blob.core.windows.net

    • Cost export

      • Less strict: *.blob.core.windows.net

      • Strict: [STORAGE_ACCOUNT].blob.core.windows.net

        Replace [STORAGE_ACCOUNT] with the name of the storage account containing the cost export.

For Azure Government:

  • {}api.loganalytics.io{}

  • login.microsoftonline.us

  • management.usgovcloudapi.net

  • For billing data:

    • Cost Details API

      *.blob.core.windows.net

    • Cost export

      • Less strict: *.blob.core.windows.net

      • Strict: [STORAGE_ACCOUNT].blob.core.windows.net

        Replace [STORAGE_ACCOUNT] with the name of the storage account containing the cost export.

Next step

Register Azure subscriptions with resource providers. For details, see this topic.