Setting up VNet Integration on Azure Managed Grafana

Question

Setting up VNet Integration on Azure Managed Grafana

Dominic Leung 20

Im running a Clickhouse on Azure VM, exposed on a private IP on an Azure private network.

I would like to use the Clickhouse Plugin on Azure Managed Grafana to display statistics of the clickhosue. I don't think the managed grafana can use the private IP yet. Any solution on that please?

Anurag Rohikar 445 Reputation points Microsoft External Staff Moderator

2025-08-01T07:59:55.0866667+00:00
Hello Dominic Leung,

Jose Benjamin Solis Nolasco, Thanks for the input provided above. Just adding a few more details for others who might be working with similar scenarios involving private services like ClickHouse hosted on Azure VMs.

Azure Managed Grafana does not have native access to private IPs or VNets. However, there is now first-class support for secure private connectivity using Managed Private Endpoints, which eliminates the need to expose your service publicly.

If your ClickHouse instance is hosted on a private VM, the recommended approach is to use Azure Private Link with a Private Link Service, and then connect Azure Managed Grafana to it using a Managed Private Endpoint.

- Updated End-to-End Solution

1.Expose ClickHouse with a Private Link Service

Create a Private Link Service pointing to your VM’s IP and ClickHouse port (usually 8123).

Documentation: Quickstart: Create an Azure private link service - Azure PowerShell | Microsoft Learn

2.Create a Managed Private Endpoint in Azure Managed Grafana

Go to your Azure Managed Grafana resource in the portal.

Navigate to Settings > Networking > Managed Private Endpoints.

Click Add, select the Private Link Service, and submit the connection request.

How to connect to a data source privately in Azure Managed Grafana | Microsoft Learn

3.Approve and Validate the Connection

Approve the endpoint connection request in the Private Link Service's resource group.

Once approved, refresh Grafana’s networking page to confirm the status is "Approved".

4.Configure the ClickHouse Plugin

Add the ClickHouse plugin to Azure Managed Grafana and connect using the private IP or DNS name defined via Private Link.

ClickHouse Grafana Plugin (GitHub) GitHub - Altinity/clickhouse-grafana: Altinity Grafana datasource plugin for ClickHouse®

5.Review Network and Security Rules

Confirm NSGs, route tables, and firewall rules allow inbound traffic from the Grafana-managed VNet to your ClickHouse instance.

This approach allows secure, private, and Microsoft-supported access to your data source without requiring any public exposure.

Hope this helps clarify the full context. do let me know if you have any further questions.

Thank you!

Accepted answer

0 additional answers

Your answer

Answer 1

Jose Benjamin Solis Nolasco 5,216

@Dominic Leung I hope you are doing well,

Azure Managed Grafana doesn’t natively support direct access to private IPs across VNets without additional configuration

Options to Enable VNet Access for Azure Managed Grafana

Use Azure Private Link with a Public Endpoint

Expose ClickHouse via a public endpoint secured with Private Link.
This allows Managed Grafana to access the service securely without exposing it broadly to the internet.
You’ll need to configure DNS resolution and ensure the endpoint is reachable from Grafana’s VNet.

See more https://learn.microsoft.com/en-us/azure/private-link/private-link-overview

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

Jose Benjamin Solis Nolasco 5,216 Reputation points

2025-08-01T15:09:24.35+00:00

@Dominic Leung If all your concerns have been resolved, I would greatly appreciate it if you could mark the answer as "Accepted." This helps both us and others in the community.
Dominic Leung 20 Reputation points

2025-08-04T01:41:49.41+00:00

Thanks. I think your solution could work.

But since I don't want to change the network settings of my ClickHouse, I moved my Grafana to be hosted through Azure App Service, where VNet Integration is allowed.

Share via

Setting up VNet Integration on Azure Managed Grafana

0 additional answers

Your answer