USER MANUALS


Connectivity Guidelines

This guide explains how to configure the network infrastructure in Azure to enable connections from the Agora Execution Plane to your data sources and also connections from external tools (consumers) such as Power BI or Tableau to the Agora Execution Plane to access data.

Azure Network Elements

The default network elements created by Agora comprise:

  • A Virtual Network in the selected region. Please see the Azure Virtual Network documentation for further details.

  • A private subnet to host the Agora servers.

  • A NAT Gateway to allow outbound connections to the internet from the private subnet. Please see the AWS NAT gateways documentation for further details.

  • A public IP address required by the NAT gateway.

Southbound Connections

How to Connect to Public Data Sources

The Agora Execution Plane servers have access to the Internet by default, so there is no further configuration needed to enable connectivity to data sources accessible via the Internet.

How to Connect to Private Azure Data Sources

private Azure Data Sources are not accessible through the internet, Agora Execution Plane servers need to be given network access to them. Depending on the type of Azure Data Source you are connecting to, you might have several ways of achieving network connectivity.

For example, to connect to an Azure SQL Server follow these steps:

  1. Give access to your Execution Plane:

    1. Connect to the Azure Portal to manage the Agora Execution Plane resources.

    2. Find your SQL server resource.

    3. Navigate to the left panel -> Security -> Networking.

    4. Here you can see tabs to configure public access and private access.

      Sql Server Networking
    5. If you want to configure public access:

      • Choose Selected Networks in the Public network access section.

      • Click Add a virtual network rule.

      • Choose a significant name, like AgoraExecutionPlaneVnetRule.

      • Select the subscription, vnet and subnet in which your Execution Plane is deployed.

      • Click Enable and then OK.

      • Check that, once created, the State column of the rule is Ready.

        Create Virtual Network rule
    1. By configuring private access Azure will deploy a private endpoint in a subnet and a private DNS zone. Please see the Azure private endpoint and the Azure private DNS zone documentation for further details. To configure it:

      • Navigate to the Private access tab.

      • Click Create a private endpoint.

        SQL Server Networking private access
      • In the Basics section, choose the subscription and resource group where your Execution Plane is deployed.

      • Choose a name for the resource connected to the private endpoint, like AzureSqlServer.

        SQL Server Networking private access
      • In the Resource section, every configuration will be autofilled.

      • In the Virtual Network section select the virtual network and subnet where your Execution Plane is deployed.

      • In the DNS section select the subscription and resource group where your Execution Plane is deployed and where the Private DNS zone will be deployed.

      • Fill the Tags section as you wish.

      • Review everything is configured correctly and Click Create.

        SQL Server Networking private access
  2. Create and test a new data source in Design Studio. You might have to wait a few minutes for the private endpoint to be active.

Create Datasource

If the Azure data source you want to connect to is hosted in a managed instance or a virtual machine, a Virtual Network Peering will be required. The creation of this peering is explained in the section How to Connect to Agora from Azure Clients.

How to Connect to Data Sources Running On-Premise or in Other Private Clouds

As the data sources are not public, network access must be configured for the Denodo servers. This scenario requires a VPN between the Virtual Network of the Denodo servers and the private network of the data sources.

Northbound Connections

How to Connect to Azure Agora From the Internet

The Agora Execution Plane servers are deployed in a private network and are not accessible by client tools running on the Internet by default.

To connect from the Internet to the Agora Execution Plane servers it is necessary to open the Agora load balancers to the Internet.

In this case, when creating the Agora Denodo server cluster, choose the Provisioning manually option and configure the option to enable the Internet Facing Load Balancer.

Connect to Agora From Azure Clients

The Agora Execution Plane servers are running in a private network and are not accessible by default to other applications running in Azure. Network access must be configured for any Azure client needing to connect to Agora. A Virtual Network peering connection can be used to communicate between the Agora Execution Plane servers and Azure client tools. Please see the Azure virtual network peering documentation for further details.

For example, to connect to an Agora VDP Server from a Tableau Desktop follow the steps below:

  1. Create a Virtual Network peering between Execution Plane’s Virtual Network and the Virtual Network where the Tableau Desktop is running:

    1. Connect to the Azure Portal.

    2. Navigate to the Virtual networks service.

    3. Search for the Virtual Network hosting Tableau.

    4. Go to Settings -> Peerings in the left panel.

    5. Click the Add button.

    6. The remote virtual network will be the Execution Plane’s.

    7. Select the subscription, the virtual network and check the Allow to recieve forwarded traffic checkbox on both ends.

    8. Press the Add button.

      Create Peering Connection
  2. Connect to the Agora Execution servers from Tableau Desktop:

    1. Obtain the name of the host to connect from the Agora Design Studio.

    Connected
    1. Configure Tableau Desktop to connect to the Agora Execution Plane server. Please review the document How to connect to Denodo from Tableau Desktop:

      1. Connect to the Agora Execution Plane server using your Agora credentials.

      Configure Agora credentials
      Agora connected

Connect From Client Tools Running On-Premise or in Other Private Clouds

The Agora Execution Plane servers are not accessible over the Internet. Network connectivity must be configured to allow the clients On-Premise or in Other Private Clouds to connect to Agora. A VPN between the Virtual Network of the Agora Execution Plane servers and the private network of the client tools should be configured for this purpose.

Add feedback