Hi All I m working on getting a Linux VM in Azure to host a

Question

Hi All I m working on getting a Linux VM in Azure to host a prefect 2 0 server for POC Dev purposes I ve followed the tutorial I ve linked here but have gotten to a roadblock when trying to connect to the UI from my local computer I ve enabled Firewall rules successfully enough to allow SSH access into the vm via port 22 and have also added ports 8080 and 4200 as described in the tutorial My issue comes when trying to bind the server to the public IP address for the vm I ve added the config toml file as shown in the tutorial and have also tried to bind the IP using the prefect orion start host command Any thoughts on what I m missing Thanks Will <https mortimer xyz prefect on azure >

Kevin Kho · Answer

Did you set `PREFECT ORION UI API URL` from you local to point your local UI to the VM

Kevin Kho · Answer

Oh I see the image it s just failing

Kevin Kho · Answer

I don t know enough here but will try to find someone

Christopher Boyd · Answer

Hi Will There is a terraform azure vm recipe here I can t say I have tested running Orion locally just yet so I can certainly test that and see if I can reproduce this issue and get back to you <https github com PrefectHQ prefect recipes tree main azure prefect agent on avm>

Christopher Boyd · Answer

can you export PREFECT LOGGING LEVEL= DEBUG and try again to see if we get any more verbosity

Christopher Boyd · Answer

Also I was unaware of this tutorial but will be a great resource for expanding this terraform recipe I ll test it out and report back if I can address this issue

Zanie · Answer

You ll want to bind the host to `0 0 0 0`

Zanie · Answer

Then set the `PREFECT ORION UI API URL` to the public IP

Will Skelton · Answer

To be more clear The screen shot above is an ssh connection into the VM in azure not sure if that was understood or not

Will Skelton · Answer

< Christopher Boyd> I ve tried to enable Debug logging in the profile and when calling start but I don t seem to be getting any more info Is there a file getting created that I can t find

Kevin Kho · Answer

No file being created It would just have more verbose logs with Orion and the Flow potentially

Will Skelton · Answer

Didn t really get anything more than the first time assuming I enabled it correctly

Christopher Boyd · Answer

HI Will For setting the PREFECT ORION UI API URL it looks like you are blocking out your IP address presumably because it s the public but that should be listening on 0 0 0 0 to listen on all interfaces expose does this for 1 0 but this is for 2 0 as you mentioned

Christopher Boyd · Answer

I m checking the config toml setting as well because I believe that is also a 1 0 setting

Christopher Boyd · Answer

The apollo url would have been the 1 0 endpoint for 2 0 I believe this would be the orion url although I m confirming that

Will Skelton · Answer

Thanks < Christopher Boyd> Lots of different places it appears to apply settings Here is what I ve got going now Still no connection from my local PC into Azure

Christopher Boyd · Answer

Are you able to curl this endpoint locally through a 2nd ssh session That way we can verify it s actually running and returning data locally then move onto exposing it publicly

Will Skelton · Answer

so sudo curl <http publicip 8080> or port 4200

Will Skelton · Answer

sorry doing lots of learning today slightly smiling face

Christopher Boyd · Answer

All good from the azure ssh session something like ```curl I localhost 4200```

Christopher Boyd · Answer

If that s functioning we know it s listening and serving and we would just need to expose the public traffic at that point I might need a few minutes for a follow up

Christopher Boyd · Answer

Ok that s good give me a few moments to review and I can circle back

Will Skelton · Answer

10 4 Thank so much

Christopher Boyd · Answer

Sorry Will circling back from your localhost your actual desktop laptop assuming Mac based you can run ```curl <http ifconfig co|ifconfig co>```

Christopher Boyd · Answer

That will return your public IP address that s what you would want to allow as an inbound rule for 22 8080 and 4200

Christopher Boyd · Answer

With those inbound rules set you should be able to re run that curl command ```curl I azure public ip 8080 curl I azure public ip 4200```

Christopher Boyd · Answer

I m not 100 sure and can confirm but I don t believe 8080 is in use for 2 0

Will Skelton · Answer

I m using a Windows Desktop but I know what my IP is that gets presented when connected outside of our network Do I need to run those curl statements on the ssh or my local host

Christopher Boyd · Answer

You would run those commands from your localhost and test against the azure VM once the rule forwarding is in place for your public IP on the localhost

Will Skelton · Answer

I have rule forwarding in place and it is working successfully for ssh via port 22 I m connected via Windows cmd ssh Running curl against the public IP and port 22 returns a Received HTTP 0 9 when not allowed response port 4200 Fails with Connection refused The rule on port 22 is the same as port 4200

Christopher Boyd · Answer

I was able to get this working successfully in our Azure environment can you send me a screenshot of your inbound network rule

Christopher Boyd · Answer

Your source IP address should be your external IP address from your localhost The destination port range should be set to 4200 TCP and the action set to allow I currently have two inbound rules set one for SSH from localhost TO azure public IP and GraphQL from localhost to azure public IP

Christopher Boyd · Answer

Reaching it via browser is functional it s possible if this is still not working you might be behind some other firewalls or there is something else in the way

Will Skelton · Answer

Yes Looks like our corporate firewall isn t allowing traffic on those ports to Azure Forwarding works with traffic from my home network Thanks so much for your help