# Azure App Service Windows Site Extension automatic upgrade without internet

**URL:** <https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654>\
**Category:** Cloud platforms\
**Tags:** azure, extensions\
**Created:** [July 12, 2023, 11:20am UTC](https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654 "2023-07-12T11:20:02Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![g\_kat](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/g_kat/32/34573_2.png) [@g\_kat](https://community.dynatrace.com/u/g_kat)\
**Post date:** [July 12, 2023, 11:20am UTC](https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654/1 "2023-07-12T11:20:02Z")

</div>

Hi,

We are using the OA site extension for Windows App Services and we are facing the following challenge:

There are app services that have no direct connectivity to the interne. They are isolated in a subnet with the only external point being an Environment ActiveGate. In order to install the extension, we had to specifically allow external connectivity to internet through firewall rules and once installation completed we removed the rules.

In order to manually upgrade we still need internet connectivity, because when we try to update when there isn’t one, the extension update not only fails but it first deletes itself, creating inconsistency in the App Service.

The idea is to find a way to automate the update procedure for the Site Extension (for the OA we use the Kudu REST API provided by the extension and by directing the upgrade call through the AG it works).

Is there a way to direct the Kudu REST API call that installs/updates the Site Extension through the AG?

Thank you,

George

---

<div class="post-metadata">

**Author:** ![ChadTurner](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/chadturner/32/161_2.png) [@ChadTurner](https://community.dynatrace.com/u/ChadTurner)\
**Post date:** [February 12, 2024, 6:28pm UTC](https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654/2 "2024-02-12T18:28:26Z")

</div>

[@g\_kat](https://community.dynatrace.com/user/34133)&nbsp;were you able to get a work around for this? I would suspect your could point to a local repository where the upgrade lives to do the update. We do something similar with aspects that do not have internet access.

---

<div class="post-metadata">

**Author:** ![g\_kat](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/g_kat/32/34573_2.png) [@g\_kat](https://community.dynatrace.com/u/g_kat)\
**Post date:** [February 13, 2024, 9:22am UTC](https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654/3 "2024-02-13T09:22:14Z")

</div>

Hi Chad,

Well, this issue lies inherently with the Extensions Gallery being hosted on [nuget.org](http://nuget.org), where it’s not accessible to the App Services without internet access. It was simpler to enable connectivity for the short period of time needed to update the extension, than go through the hoops of setting up a local repo for the Azure Extensions(I’m not even sure how to direct the App Services to look there).

---

<div class="post-metadata">

**Author:** ![ryan\_s](https://avatars.discourse-cdn.com/v4/letter/r/65b543/32.png) [@ryan\_s](https://community.dynatrace.com/u/ryan_s)\
**Post date:** [June 4, 2024, 5:14pm UTC](https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654/4 "2024-06-04T17:14:07Z")

</div>

This should be possible but you wouldn’t use an ActiveGate to pull the extension. You would need two things:

1. private nuget registry with&nbsp;[dynatrace site extension package](https://www.nuget.org/packages/Dynatrace#versions-body-tab)
2. In app service app settings provide link to your private registry using SCM\_SITEEXTENSIONS\_FEED\_URL variable

---

<div class="post-metadata">

**Author:** ![g\_kat](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/g_kat/32/34573_2.png) [@g\_kat](https://community.dynatrace.com/u/g_kat)\
**Post date:** [June 5, 2024, 9:12am UTC](https://community.dynatrace.com/t/azure-app-service-windows-site-extension-automatic-upgrade-without-internet/40654/5 "2024-06-05T09:12:08Z")

</div>

Hi Ryan,

This sounds very promising, I will give it a try!!!
