Traffic Manager Failover Issue in Active/Passive Mode for Internal Servers on Azure

Hello everyone,

I'm facing difficulties with configuring Azure Traffic Manager for active/passive failover between two internal web servers that are only accessible through private IP addresses. Here’s a summary of my setup:

Current Infrastructure:

• A hub-and-spoke environment on Azure with internal web servers.
  • A Traffic Manager profile set to Priority (Active/Passive) mode, configured to monitor two Debian 12 web servers with a private DNS configuration to route internal users.
  Traffic Manager Configuration:

  - Each server is configured with an endpoint in Traffic Manager, and the health probe is enabled.
  
     - A private DNS is used to allow internal users to access the websites hosted on these servers through Traffic Manager.
  
     **Issue Encountered:**
  
        - The Traffic Manager health probe shows a **degraded status** on the endpoints.
  
           - When I test failover by stopping one of the servers, Traffic Manager does not automatically switch to the active server. Access fails as it keeps trying to route to the inactive server.
  
              - I’ve checked my private DNS settings, firewall, and security rules, but there’s no obvious indication of a blockage.
  
              **Additional Tests:**
  
                 - I tried using Windows servers (IIS), but encountered the same degraded health probe issue.
  
                    - I’ve also reviewed the logs in the Azure storage account, but no specific errors seem to indicate the cause of the problem.
  

Question:

Are there any specific configurations required for Traffic Manager to properly handle active/passive failover with internal servers (private IP only) on Azure? Are there particular prerequisites regarding private DNS, firewall rules, or probe configurations? Any help to diagnose and resolve this issue would be greatly appreciated.

Thank you in advance for your help!