0
Securely access Azure private resources and homelab services without expensive VPN Gateways or complex DNS configuration
Added Dec 19, 2025
7 signals
Azure developers managing multiple projects waste hundreds monthly on VPN Gateways just for private database access, while manually editing host files that don't scale. Homelabbers struggle with complex port forwarding and security risks from exposed services. Both face DNS resolution challenges and security flags from publicly accessible endpoints.
Detailed solution approach available for premium members.
Market timing analysis available for premium members.
I have 7 active projects in Azure, each having at least two environments (env + prd). They all have different infrastructures; most must have a database and an Azure function at least. I'd like to remove public database access by putting the DB in a VNET. The PoC worked fine; the function can access it via VNET integration. The problem is that my workflow includes checking the databases regularly. Not only myself, but other people as well. I learned that I could use a VPN Gateway, but it's kind of costly (>20 USD), and I would need one per VNET. Different people have different access levels to these projects, so I want strictly separated infrastructure. There is no option to put all the projects in the same VNet or something like that. So the only way I found was having one VPN Gateway per environment, resulting in like 200USD per month. Am I missing something? Is there a better, especially cheaper way of connecting locally to VNETs? (We are all using Macbooks if that matters). Am Thanks for your insights!
I come from an AWS background, and just learned that Azure App Functions have an endpoint for inbound access. There's no such concept in AWS lambdas, as you never call or make request to a function. I've gone through the documentation and it's still not clear what's the purpose of such endpoint (to trigger the function? To make requests to the function while it is running?). These endpoints are publicly accessible by default, and are raising red flags in our security scans. https://preview.redd.it/k1i6hz7mql7g1.png?width=975&format=png&auto=webp&s=6981c027cbf5f2e497925788f5afb42282f6183b Any help is appreciated!
I come from an AWS background, and just learned that Azure App Functions have an endpoint for inbound access. There's no such concept in AWS lambdas, as you never call or make request to a function. I've gone through the documentation and it's still not clear what's the purpose of such endpoint (to trigger the function? To make requests to the function while it is running?. These endpoints are publicly accessible by default, and are raising red flags in our security scans. https://preview.redd.it/db59zrdpql7g1.png?width=1013&format=png&auto=webp&s=add95dbef537b79862a44e46143fd29cae417a04 Any help is appreciated!
I'm currently using Netbird installed on OpenWrt Nano Pi R6C acting as gateway between internet and external network. What i'm looking for 1. Internal network apps like Plex , Samba via External network 2. Use internal network adblocking when outside of network 3. Provide access to local services from outside like its internal i,e even if im outside i should be able to login on [192.168.1.1](http://192.168.1.1) using the same address. 4. Use as exit node to get home ip in some cases. I wasn't able to get all working with tailscale but with netbird it works then someone told me its much easier with pangolin but it requires a VPS as i was trying to self host and it requires me to open 80 port and without cloudflare protection on domain name. Any thoughts or suggestions where i could have dont incorrectly in pangolin or tailscale ?
I am facing this problem asked in the support forum: https://learn.microsoft.com/en-us/answers/questions/2286100/azuresql-error-executing-a-cross-database-query-on Basically, I have two databases in a single Azure server,but when I create external table it is created but select query on it from other database gives error: Connection denied because Public network access is disabled.
+11 more signals