Network Security for WorkersSNG - appservice-fileserver-sqlserver-ha template

[aisog]

Hi after finish deployment you will struggle with ScaleSets of Workes, because Network Security for WorkersNSG block you any network connections to File Server.

When you go into app service management inside one of Controller you will see workers in Starting status, example of error for worker:
Info 5/20/2019 3:09:30 PM Start exercise FileServer at 5/20/2019 3:09:30 PM
Warning 5/20/2019 3:10:00 PM Failed exercise FileServer at 5/20/2019 3:10:00 PM
Info 5/20/2019 3:11:00 PM Start exercise FileServer at 5/20/2019 3:11:00 PM

You have to change in template NSG definition, the rule which block connection is
Outbound_Deny_VNet so you have to add by explicity with low pirority Outbound Allow for File Server Cluster of FIle Server Subnet.

Thanks

[knithinc]

@pappleby64 , could you please take a look at this?

[pappleby64]

There is an App Service release note on this issue https://docs.microsoft.com/en-gb/azure-stack/operator/azure-stack-app-service-release-notes-update-six
Unfortumnately nothing I can do from this template as the NSG in question isn't created in this template. It does not created until you run the AppService install itself - by which time this one is finished.