Conneting in house SQL server to cloud web app

hriday sharma 21 Reputation points
2021-03-09T04:20:17.367+00:00

Hi,

We are in process of migrating our web servers to cloud but want to keep databases in private infrastructure.

Previously, connection between databases and web servers were made using an SQL users.

Is this still safe to use the SQL login or we need to use something more secure? If yes, please suggest best ways to connect private db to cloud web app.

Thanks,

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
669 questions
SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,215 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Olaf Helper 42,841 Reputation points
    2021-03-09T07:10:40.84+00:00

    You should consider how to store the password for the SQL Login in a safe way.

    One further option is to use a Azure => on-premise data gateway to secure the connection, see

    0 comments
  2. CarrinWu-MSFT 6,866 Reputation points
    2021-03-10T09:56:03.297+00:00

    Hi @hriday sharma ,

    I agree with Olfa's suggetion with install an on-premises data gateway. And also, SQL Server and SQL Azure support encryption for database connections (encryption in motion). TLS and SSL are provide communications security, and the current best capability supported to talk to the SQL engine is TLS 1.2. SQL Server 2016, SQL Server 2017, and SQL Server 2019 support TLS 1.2 without the need for an update. Please refer to KB3135244 - TLS 1.2 support for Microsoft SQL Server. So it is probably safe if you have encrypt for your connection and configure other security rules. Please refer to Windows Azure SQL Database Connection Security to get more information.

    Best regards,
    Carrin

    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments