#SQL MI - On-Premise Instance Link through NVA on Hub and Spoke

1 messages · Page 1 of 1 (latest)

placid tapir
#

Hello! We have some databases we want to replicate to SQL MI in Azure. We are interested in doing Instance Link and utilizing those benefits but I am confused about the connectivity. We have a hub and spoke architecture with a Fortigate NVA in our Hub. We have a IPSEC from onprem to the hub in Azure and we want to use a Private Link to SQL MI and connect this way. It seems this is not supported but how would you be able to connect to SQL MI using Instance Link with a Hub NVA?

fluid finch
#

Here it says this Customer applications can connect to SQL Managed Instance and can query and update databases inside the virtual network, peered virtual network, or network connected by VPN or Azure ExpressRoute. https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/connectivity-architecture-overview?view=azuresql

Connectivity architecture - Azure SQL Managed Instance

Learn about Azure SQL Managed Instance communication and connectivity architecture and how the components direct traffic for a managed instance.

#

Specific to instance link almost the same Network connectivity between your SQL Server instance and your managed instance. If SQL Server is running on-premises, use a VPN link or Azure ExpressRoute. If SQL Server is running on an Azure virtual machine (VM), either deploy your VM to the same virtual network as your managed instance or use virtual network peering to connect the two separate subnets.
An Azure SQL Managed Instance deployment, provisioned to any service tier.

#

So you can connect over an azure vpn or expressroute using instance link. So you can integrate sql mi into a Vnet and create a vpn into that vnet or create a vnet peering and let it land in the hub where the vpn comes in. That way there should be connectivity for instance link