| 1 | # Install Netdata on Azure |
| 2 | |
| 3 | Netdata is fully compatible with Azure. |
| 4 | You can install Netdata on cloud instances to monitor the apps/services running there, or use multiple instances in a [parent-child streaming](/src/streaming/README.md) configuration. |
| 5 | |
| 6 | ## Recommended installation method |
| 7 | |
| 8 | The best installation method depends on the instance's operating system, distribution, and version. For Linux instances, we recommend the [`kickstart.sh` automatic installation script](/packaging/installer/methods/kickstart.md). |
| 9 | |
| 10 | If you have issues with Netdata after installation, look to the sections below to find the issue you're experiencing, followed by the solution for your provider. |
| 11 | |
| 12 | ## Post-installation configuration |
| 13 | |
| 14 | ### Add a firewall rule to access Netdata's dashboard |
| 15 | |
| 16 | If you cannot access Netdata's dashboard on your cloud instance via `http://HOST:19999`, and instead get an error page |
| 17 | from your browser that says, "This site can't be reached" (Chrome) or "Unable to connect" (Firefox), you may need to configure your cloud provider's firewall. |
| 18 | |
| 19 | Cloud providers like AWS and Google Cloud use network-level firewalls called Virtual Private Cloud (VPC) networks, which apply even if the instance's firewall is disabled. Since these firewalls can only be modified through the cloud provider's web interface, they can be easily overlooked when configuring or accessing Netdata's dashboard. |
| 20 | |
| 21 | You can often confirm a firewall issue by querying the dashboard while connected to the instance via SSH: `curl |
| 22 | http://localhost:19999/api/v1/info`. If you see JSON output, Netdata is running properly. If you try the same `curl` |
| 23 | command from a remote system, and it fails, it's likely that a firewall is blocking your requests. |
| 24 | |
| 25 | Another option is to put Netdata behind web server, which will proxy requests through standard HTTP/HTTPS ports |
| 26 | (80/443), which are likely already open on your instance. We have a number of guides available: |
| 27 | |
| 28 | - [Apache](/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/Running-behind-apache.md) |
| 29 | - [Nginx](/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/Running-behind-nginx.md) |
| 30 | - [Caddy](/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/Running-behind-caddy.md) |
| 31 | - [HAProxy](/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/Running-behind-haproxy.md) |
| 32 | - [lighttpd](/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/Running-behind-lighttpd.md) |
| 33 | |
| 34 | Sign in to the [Azure portal](https://portal.azure.com) and open the virtual machine running Netdata. Click on the |
| 35 | **Networking** link beneath the **Settings** header, then click on the **Add inbound security rule** button. |
| 36 | |
| 37 | Add a new rule with the following options: |
| 38 | |
| 39 | ```text |
| 40 | Source: Any |
| 41 | Source port ranges: 19999 |
| 42 | Destination: Any |
| 43 | Destination port ranges: 19999 |
| 44 | Protocol: TCP |
| 45 | Action: Allow |
| 46 | Priority: 310 |
| 47 | Name: Netdata |
| 48 | ``` |
| 49 | |
| 50 | Click **Add** to apply your new inbound security rule. |