I am trying to move data from an Azure data lake instance in Azure Public cloud (East US) to an Azure SQL instance in Azure China cloud. In Dev environment I whitelisted incoming traffic from all IP addresses in target China Azure sql server and was able to migrate data.
In production I have to restrict the IP range so thought of whitelisting the Azure Integration Runtime East US IP range in SQL server but IP addresses are falling off from that range.
What I am seeing is the whole of Azure East US IP range has to be whitelisted from target system in order to make the pipeline work.
Is there any better way of doing this? I have been reading online and see 2 potential issues with this approach:
- IP range for Azure changes over time
- Whitelisting a lot of IP addresses.
Have tried creating a private endpoint in azure sql china cloud but that doesnt work across tenants.