how to public web in azure for security ?

[Tien Ngo Thanh]

Hello

      current i created one vnet with these subnet with below

     - Database Subnet : contain VM database server

     - Web Subnet : contain VM IIS web 

      - 1 NSG for level subnet assign for database subnet

     - 1 NSG for level subnet assign for web subnet

     after I create 1 VM database in Database SUbnet and 1 VM Web in Web subnet . Configure web connected to database and from VM Web I can  open browser and access web ok 

       now I want public web site to outsite (Internet) can access this web then I should how ? 

       I am reading on web then see more way but as need add more subnet as DMZ or add NVA or Azure load balancer ....very more option 

       please recommend help me best practice and security about this case

Best Regards,

Thanks

[#2]

Hi,

I don’t understand your question, please tell me more.

Regards,
Hannes

[#3]

@Hannes_LG : i just updated my question detail .thanks

[#4]

Your welcome, I guess I can help you, but I want to understand your situation in detail.

[#5]

My situation only want out site can access url as http://testweb.com .

[#6]

@Tien Ngo Thanh 

Quick question. Why are you not using app services and Azure SQL for your site? Why are you using VM's?

If you need to use VM's then your web server will need to have a public IP address. you would then configure your NSG to allow port 443 (secure web) to the web server. As you only have one web server you will not need a load balancer etc.

[#7]

@Richard_Hooper : i want migrate to vm after that then move later . I will try configure , thanks

[#8]

@Tien Ngo Thanh Let me know how you get on. If you need any help etc let me know.