Azure SQL Server (Edge)

Perform the following steps to create the firewall rules in your SQL database network settings to allowlist the Hevo IP addresses for your region:

1. Log in to the Azure Portal.

2. Under Azure services, select More services.

   

3. On the All services page, search for and select All resources.

   

4. On the All resources page, click the SQL database you want to connect to Hevo.

   

5. In the right pane of <Your Database Name> page, click Set server firewall.

   

6. On the Networking page, under the Public access tab, select the Selected networks option.

   

7. Under Firewall rules, click + Add a firewall rule.

   

8. In the Add a firewall rule dialog box, do the following to add your firewall rule:

   

   1. Specify the following:

      • Rule name: A name to identify the rule. For example, HevoIndia.

      • Start IP: The starting address of the IP range.

      • End IP: The ending address of the IP range.

      Note: As Hevo has specific IP addresses and not a range, the value in the Start IP and End IP fields is the same. For example, 13.235.131.126 for the India region.

   2. Click OK.

9. Repeat steps 7 and 8 to add all the IP addresses for your Hevo region.

10. Click Save to save the firewall rules.

    

You need to enable the public endpoint for your Azure SQL managed instance to allow connections to your SQL managed database over the internet. To keep your database secure, you can control access by allowlisting only trusted IP addresses, such as Hevo’s. This is done by creating inbound security rules in the network security group associated with your SQL managed instance. These rules ensure that only authorized connections can access your database.

1. Enable Public Endpoint for Azure SQL Managed Instance

Perform the following steps to enable the public endpoint for your SQL managed instance:

1. Log in to the Azure Portal.

2. Under Azure services, select More services.

   

3. On the All services page, search for and select All resources.

   

4. On the All resources page, click the SQL managed database you want to connect to Hevo.

   

5. In the right pane of <Your Database Name> page, Essentials section, click the link text under Managed instance.

   

6. In the left navigation pane, click Security, and then click Networking.

   

7. On the Networking page, enable the Public endpoint (data), and then click Save.

   

   After saving the changes, the status of Public endpoint (data) displays as Enable.

2. Create Inbound Security Rules for Azure SQL Managed Instance

Perform the following steps to create inbound security rules in the network security group associated with your SQL managed instance:

1. Log in to the Azure Portal.

2. Under Azure services, select More services.

   

3. On the All services page, search for and select All resources.

   

4. On the All resources page, click the SQL managed database you want to connect to Hevo.

   

5. In the right pane of <Your Database Name> page, Essentials section, click the link text under Managed instance.

   

6. In the right pane of <Your SQL managed instance Name> page, Essentials section, click the link text under Virtual network / subnet.

   

7. In the left navigation pane, click Subnets.

   

8. On the Subnets page, click the link text under Security group column corresponding to your SQL managed instance.

   

9. In the left navigation pane, click Settings, and then click Inbound security rules.

   

10. On the Inbound security rules page, click +Add.

11. In the Add inbound security rule slide-in page, do the following:

    

    1. Source: Select IP Addresses from the drop-down.

    2. Source IP addresses/CIDR ranges: Enter Hevo’s IP addresses for your region. You can enter multiple addresses, separating them with commas.

    3. Destination port ranges: Enter 3342.

    4. Protocol: Select TCP.

    5. Priority: Enter a priority number between 100 and 4095 as per your requirement.

       Azure processes security rules in order of priority, with lower numbers taking precedence over higher numbers.

       Note: Ensure that the security rule for allowlisting Hevo’s IP addresses has a higher priority than any existing restrictive rules, such as the deny_all_inbound rule. This ensures that connection to Hevo is allowed before any restrictive rules are applied.

    6. Name: Specify your rule name.

    7. Click Add to save the rule.

You can now view the new security rule on the Inbound security rules page of your network security group.

Note: Skip to the Grant privileges to the user section if you are using an existing database user.

Perform the following steps to create a database user in your Azure SQL Server database:

1. Connect to your Azure SQL Server database as a masteruser with any SQL client tool, such as sqlcmd.

2. Run the following commands:

   -- Select a database
   USE <database_name>;
       
   -- Create a login and a database user
   CREATE LOGIN <login_username> WITH PASSWORD = '<password>';
   CREATE USER <database_username> FOR LOGIN <login_username>;
   

   Note: Replace the placeholder values in the commands above with your own. For example, <login_username> with hevouser.

Perform the following steps to obtain the configuration details for your Azure SQL database:

1. Log in to the Azure Portal.

2. Under Azure services, select More services.

   

3. On the All services page, search for and select All resources.

   

4. On the All resources page, click the SQL database you want to connect to Hevo.

   

5. In the right pane of <Your Database Name> page, hover on the Server name and click the copy icon to copy it. Use this as the Database Host while configuring your Azure SQL Server Source in Hevo.

   

The default port number is 1433.

Perform the following steps to obtain the configuration details for your Azure SQL managed instance:

1. Log in to the Azure Portal.

2. Under Azure services, select More services.

   

3. On the All services page, search for and select All resources.

   

4. On the All resources page, click the SQL managed database you want to connect to Hevo.

   

5. In the right pane of <Your Database Name> page, Essentials section, click the link text under Managed instance.

   

6. In the left navigation pane, click Security, and then click Networking.

   

7. On the Networking page, under Endpoint, click the copy icon.

   

   The endpoint consists of the database host, followed by a comma and the port number. Remove the comma, and then save the database host and port number separately.

   For example, if exampledatabase.abc123xyz789.database.windows.net,3342 is the endpoint, use exampledatabase.abc123xyz789.database.windows.net as the database host and 3342 as the port number while configuring your Azure SQL Server Source in Hevo.