Integrating Azure Logic Apps with on-premises data sources requires securely connecting your cloud-based workflows to resources within your local network. Here’s how you can achieve this:
1. Use the On-Premises Data Gateway (Recommended)
The On-Premises Data Gateway acts as a secure bridge between your on-premises environment and Azure Logic Apps.
Steps to Set Up the Gateway :
-
Install the Gateway
- Download and install the On-Premises Data Gateway on a machine within your network.
- The machine must have access to the on-premises database or resource.
-
Sign in and Register the Gateway
- Sign in with your Azure account and register the gateway in Azure Portal.
-
Configure the Gateway in Azure
- In the Azure Logic Apps designer, add a connector (e.g., SQL Server, SAP, or File System).
- Select "Use an on-premises data gateway" and choose the registered gateway.
-
Grant Access and Test the Connection
- Ensure that the Logic App has the necessary permissions to access the data source.
- Test the connection to verify successful integration.
Supported Connectors with On-Premises Gateway :
- SQL Server
- SAP
- File System (local file shares)
- Oracle Database
- IBM DB2
- SharePoint (on-premises)
2. Use Hybrid Connections (For Web Apps and APIs)
For web-based services running on-premises, you can use Hybrid Connections.
How Hybrid Connections Work :
- Azure Relay is used to connect Azure services with on-premises APIs securely.
- Works best for HTTP-based APIs running on IIS, Tomcat, or custom web servers.
Steps to Configure Hybrid Connections :
- Set Up Hybrid Connection Manager (HCM) on an on-prem server.
- Register the connection in Azure App Service (which Logic Apps can call).
- Use the Logic App HTTP connector to interact with the on-prem service.
* Best for : Web services, APIs, and application endpoints.
3. Use VPN or ExpressRoute (For Large-Scale Secure Access)
If your on-prem resources are extensively used by cloud applications, consider VPN Gateway or ExpressRoute.
Comparison :
| Method |
Best For |
Latency |
Security |
| VPN Gateway |
Moderate workloads |
Higher |
Encrypted over public internet |
| ExpressRoute |
High-speed, large-scale workloads |
Lower |
Private, dedicated fiber |
How to Integrate :
- Set up an Azure Virtual Network (VNet).
- Create a VPN Gateway or ExpressRoute circuit.
- Deploy a private endpoint or service endpoint for your Logic App to access on-prem data securely.
* Best for : Enterprise-grade secure integration with databases, file servers, and custom applications.
4. Use Direct API Calls (If Exposed Securely)
- If your on-premises service has a publicly accessible API, you can call it directly using the HTTP connector.
- Secure it with OAuth, API keys, or firewall rules.
* Best for : Simple integrations with web APIs that don’t require a gateway.
Choosing the Right Approach :
| Requirement |
Recommended Approach |
| Connect to SQL Server, SAP, or file shares |
On-Premises Data Gateway |
| Connect to on-prem APIs (HTTP-based) |
Hybrid Connections |
| Secure, high-performance data access |
VPN or ExpressRoute |
| Call publicly available APIs |
Direct API Calls (HTTP connector) |
