在 Azure ILB ASE 中部署 Azure 机器人时出现异常

Question

为确保监控到机器人的所有往返流量，我们需要将 Azure 机器人部署到 ILB ASE。但是，当我们尝试将 Azure bot 基本机器人 (OOBTB Azure web chatbot) 部署到 ILB ASE 的 ASP 中时，我们面临着 ResourceDeploymentFailure 异常。 ASE 的健康状况，ASP 很好，NSG 的都设置好了。有没有人遇到过类似的问题并解决了，求大神帮忙。或者在 ILB ASE 中部署 Azure bot 是否有任何限制，它在外部 ASE 中工作。 PFB 详细异常。 谢谢， 尼维迪塔

exception : {"code":"DeploymentFailed" ,"message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details." ,"details":[{"code":"Conflict" ,"message":"{
"status": "failed" , \"error\": { "code\": \"ResourceDeploymentFailure\" , \"message\": "The resource operation completed with terminal provisioning state 'failed'.\" , \"details\": [ { \"code\": \"Failed\" , \"message\": \"Failed to download package.
ARM-MSDeploy Deploy Failed: 'System.AggregateException: One or more errors occurred. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Authentication failed because
the remote party has closed the transport stream. at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult) at System.Net.PooledStream.EndWrite(IAsyncResult asyncResult) at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar) --- End of inner
exception stack trace --- at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult) at System.Net.WebClient.GetWebResponse(WebRequest request, IAsyncResult result) at System.Net.WebClient.DownloadBitsResponseCallback(IAsyncResult result) ---
End of inner exception stack trace --- at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions) at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout , CancellationToken cancellationToken) at System.Threading.Tasks.Task.Wait(TimeSpan
timeout) at Microsoft.Web.Deployment.WebApi.AppGalleryPackage.<Download>d__13.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Web.Deployment.WebApi.AppGalleryPackage.<Download>d__11.MoveNext() --- End of stack trace from previous location where exception was thrown
--- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Web.Deployment.WebApi.DeploymentController.<DownloadPackageAndSettings>d__26.MoveNext()
--- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Web.Deployment.WebApi.DeploymentController.<DownloadAndDeployPackage>d__25.MoveNext() ---> (Inner Exception #0) System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException:
Authentication failed because the remote party has closed the transport stream. at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult) at System.Net.PooledStream.EndWrite(IAsyncResult asyncResult) at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult
ar) --- End of inner exception stack trace --- at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult) at System.Net.WebClient.GetWebResponse(WebRequest request , IAsyncResult result) at System.Net.WebClient.DownloadBitsResponseCallback(IAsyncResult
result)<--- '\" } ] } }"}]}

Answer 1

外部 ASE 和内部 ASE 之间的最大区别在于 ILB ASE 中应用程序的发布端点无法通过 Internet 访问。如果您有 ILB ASE，则 ILB 地址的地址是 HTTP/S、FTP/S、Web 部署和远程调试的端点。有关详细信息，请阅读应用服务环境的网络注意事项。

ILB ASE 中应用程序的发布端点使用的域 ILB ASE 是用它创建的。您可以在应用程序的发布中看到它 个人资料和应用程序的门户窗格中（在概览 > 基础和 也在属性中）。

对于错误消息，它看起来像 SSL 连接或网络相关错误。在 Azure ILB ASE 中部署 Azure bot 时，可以验证 networking considerations for an App Service Environment。您可能需要Integrate your ILB App Service Environment with the Azure Application Gateway 才能从 Internet 访问。