adding an existing vm/nic to Internal load balancer

[pattisanta]

I have created a new bicep to deploy internal standard load balancer. The problem I am having I tried to add the ip address from an existing vm/nic I don't get any errors in my deployment. however, loadBalancerBackendAddresses never show up in the portal. what am I missing?

Thanks,
Patti

[levimatheri]

@pattisanta Would you please share a snippet of your bicep?

[pattisanta]

import { subnetType } from 'br:crshrdtfa01.azurecr.io/bicep/modules/type/type-subnet:1-latest'
import { tagsType } from 'br:crshrdtfa01.azurecr.io/bicep/modules/type/type-tags:1-latest'
import { externalResourceType } from 'br:crshrdtfa01.azurecr.io/bicep/modules/type/type-externalresource:1-latest'

@description('Location for resource. -> Optional')
param location string = resourceGroup().location

@description('Tags for resource.')
param tags tagsType

@description('The name of Load Balancer. -> Required')
param name string

@description('Array of Object representing the frontend IPs to be used for the load balancer. -> Required')
@export()
type frontendIPConfigurationType = {
@description('Frontend name')
name: string
@description('The private IP address of the IP configuration.')
privateIPAddress: string?
@description('Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.')
privateIPAddressVersion: 'IPv4' | 'IPv6'?
@description('The Private IP allocation method.')
privateIPAllocationMethod: 'Dynamic' | 'Static'?
@description('The name of the exisitng subnet')
subnet:subnetType
@description('The name the of the public ip address')
publicipAddressName: string?
@description('The reference to the Public IP resource.')
publicIPAddress: string?
}

param frontendIPConfigurations frontendIPConfigurationType[]

@description('Name of a load balancer SKU. -> Optional')
@Allowed([
'Basic'
'Gateway'
'Standard'
])
param skuName string = 'Standard'

@description('Tier of a load balancer SKU. -> Optional')
@Allowed([
'Global'
'Regional'
])
param skuTier string = 'Regional'
@description('(Optional) An array of backend addresses.')
@export()
type loadBalancerBackendAddressType = {
name: string?
@description('Name of the backend address.')
properties: {
@description('A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections')
adminState: 'Down' | 'None' | 'Up'?
@description('IP Address belonging to the referenced virtual network.')
ipAddress: string?
@description('Reference to the frontend ip address configuration defined in regional loadbalancer.')
loadBalancerFrontendIPConfiguration: {
id: string
}?
subnet: {
@description('Reference to an existing subnet.')
id: string
}?
virtualNetwork: {
@description('Reference to an existing virtual network.')
id: string
}?
}?
}

@export()
type tunnelInterfaceType = {
@description('Identifier of gateway load balancer tunnel interface.')
identifier: int?
@description('Port of gateway load balancer tunnel interface.')
port: int?
@description('Protocol of gateway load balancer tunnel interface.')
protocol: 'Native' | 'None' | 'VXLAN'
@description('Traffic type of gateway load balancer tunnel interface.')
type: 'External' | 'Internal' | 'None'
}
@description('An array of references to pool of DIPs. -> Optional')
@export()
type backendAddressPoolType = {
@description('name of the backend pool')
name: string
tunnelInterfaces: tunnelInterfaceType[]?
@description('The name of the existing virtual network')
virtualNetwork: externalResourceType?
@description('Amount of seconds Load Balancer waits for before sending RESET to client and backend address.')
drainPeriodInSeconds: int?
@description('An array of backend addresses.')
loadBalancerBackendAddress:loadBalancerBackendAddressType[]

}

param backendAddressPools backendAddressPoolType[]

@description('(Array)(Optional)Object collection representing the load balancing rules Gets the provisioning.')
@export()
type loadBalancingRuleType = {
@description('The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource')
name: string
@description('An array of references to pool of DIPs.')
backendAddressPools: string[]?
@description('Backend pool name')
backendAddressPoolName: string
@description('Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.')
disableOutboundSnat: bool?
@description('''Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoin''')
enableFloatingIP: bool?
@description('Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.')
enableTcpReset: bool?
frontendIPConfigurationName: string
@description('The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables "Any Port".')
frontendPort: int
@description('The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.')
idleTimeoutInMinutes: int
@description('The load distribution policy for this rule.')
loadDistribution: 'Default' | 'SourceIP' | 'SourceIPProtocol'
@description('The reference to the load balancer probe used by the load balancing rule')
probeName: string
protocol: 'All' | 'Tcp' | 'Udp'
loadbalancerName: string
@description('The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables "Any Port".')
backendPort: int
}

param loadBalancingRules loadBalancingRuleType[]

@description('(Optional)Collection of probe objects used in the load balancer.')
@export()
type probeType = {
@description('The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.')
name: string
@minValue(5)
@description('The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5')
intervalInSeconds: int
@description('The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.')
numberOfProbes: int
@minValue(1)
@MaxValue(65535)
@description('The port for communicating the probe. Possible values range from 1 to 65535, inclusive.')
port: int
@description('The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.')
probeThreshold: int?
@description('The protocol of the end point. If Tcp is specified, a received ACK is required for the probe to be successful. If Http or Https is specified, a 200 OK response from the specifies URI is required for the probe to be successful')
protocol: 'Http' | 'Https' | 'Tcp'
@description('The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value')
requestPath: string?
}

param probes probeType[]
@export()
type outboundRuleType = {
@description('The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.')
name: string
@description('The number of outbound ports to be used for NAT.')
allocatedOutboundPorts: int?
@description('A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.')
backendAddressPoolName: string
@description('Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.')
enableTcpReset: bool?
@description('The timeout for the TCP idle connection.')
idleTimeoutInMinutes: int?
@description(')The name of the load balancerbackendAddressPoolName')
loadbalancerName: string
@description('Reference to the front end name on the load balancer.')
frontendIPConfigurationName: string
@description('The protocol for the outbound rule in load balancer.')
protocol: 'All' | 'Tcp' | 'Udp'
}

param outboundRules outboundRuleType[]

resource lb 'Microsoft.Network/loadBalancers@2023-11-01' = {
name: name
location: location
tags: tags
sku: {
name: skuName
tier: skuTier
}
properties: {
backendAddressPools: [
for backendAddress in backendAddressPools: {
name: backendAddress.name
properties: {
drainPeriodInSeconds:backendAddress.?drainPeriodInSeconds != -1 ? backendAddress.?drainPeriodInSeconds : null
loadBalancerBackendAddresses:backendAddress.loadBalancerBackendAddress
tunnelInterfaces: backendAddress.?tunnelInterfaces ?? []
virtualNetwork:contains(backendAddress,'virtualNetwork')? {
id: resourceId(
'${backendAddress.?virtualNetwork.resourceGroup}',
'Microsoft.Network/VirtualNetworks',
'${backendAddress.?virtualNetwork.name}'
)
}:null

    }
  }
]
frontendIPConfigurations: [
  for fip in frontendIPConfigurations: {
    name: fip.name
    properties: {
      privateIPAddress: fip.?privateIPAddress ?? null
      privateIPAddressVersion: fip.?privateIPAddressVersion ?? 'IPv4'
      privateIPAllocationMethod: fip.?privateIPAllocationMethod ?? 'Dynamic'

      publicIPAddress: !contains(fip, 'publicIPAddress')
        ? null
        : {
            #disable-next-line use-resource-id-functions
            id: az.resourceId(
              'Microsoft.Network/publicIPAddresses',
              '${fip.publicipAddressName}-${fip.publicIPAddress}'
            )
          }

      subnet: {
        id: resourceId(
          '${fip.subnet.resourceGroup}',
          'Microsoft.Network/VirtualNetworks/subnets',
          '${fip.subnet.virtualNetwork}',
          fip.subnet.subnet
        )
      }
    }
  }
]

loadBalancingRules: [
  for lbRule in loadBalancingRules: {
    name: lbRule.name
    properties: {
      backendAddressPool: {
        #disable-next-line use-resource-id-functions
        id: resourceId(
          'Microsoft.Network/loadBalancers/backendAddressPools',
          lbRule.loadbalancerName,
          lbRule.backendAddressPoolName
        )
      }
      backendPort: lbRule.?backendPort
      disableOutboundSnat: lbRule.?disableOutboundSnat ?? true
      enableFloatingIP: lbRule.?enableFloatingIP ?? false
      enableTcpReset: lbRule.?enableTcpReset ?? false
      frontendIPConfiguration: {
        #disable-next-line use-resource-id-functions
        id: az.resourceId(
          'Microsoft.Network/loadBalancers/frontendIPConfigurations',
          lbRule.loadbalancerName,
          lbRule.frontendIPConfigurationName
        )
      }

      frontendPort: lbRule.?frontendPort
      idleTimeoutInMinutes: lbRule.?idleTimeoutInMinutes ?? 4
      loadDistribution: lbRule.?loadDistribution ?? 'Default'

      probe: {
        #disable-next-line use-resource-id-functions
        id: resourceId('Microsoft.Network/loadBalancers/probes', lbRule.loadbalancerName, lbRule.probeName)
      }

      protocol: lbRule.?protocol ?? 'Tcp'
    }
  }
]

outboundRules: [
  for outRule in outboundRules: {
    name: outRule.name
    properties: {
      allocatedOutboundPorts: outRule.?allocatedOutboundPorts ?? 63984
      backendAddressPool: {
        #disable-next-line use-resource-id-functions
        id: az.resourceId(
          'Microsoft.Network/loadBalancers/backendAddressPools',
          outRule.loadbalancerName,
          outRule.backendAddressPoolName
        )
      }
      enableTcpReset: outRule.?enableTcpReset ?? true
      frontendIPConfigurations: [
        {
          #disable-next-line use-resource-id-functions
          id: az.resourceId(
            'Microsoft.Network/loadBalancers/frontendIPConfigurations',
            outRule.loadbalancerName,
            outRule.frontendIPConfigurationName
          )
        }
      ]
      idleTimeoutInMinutes: outRule.?idleTimeoutInMinutes ?? 4
      protocol: outRule.?protocol ?? 'All'
    }
  }
]

probes: [
  for probe in probes: {
    name: probe.name
    properties: {
      intervalInSeconds: probe.?intervalInSeconds ?? 15
      numberOfProbes: probe.numberOfProbes
      port: probe.port ?? 1
      protocol: probe.protocol
      requestPath: toLower(probe.protocol) != 'tcp' ? probe.requestPath : null
    }
  }
]

}
}

output loadBalancerName string = lb.name
output loadBalancerId string = lb.id