Connecting to MySQL VM remotely (Azure Resource Manager)
After a bit of head banging I have found that changing the bind-address on mysql to the ip address of the node connecting to mysql makes mysql refuse to restart

So instead set the bind-address = 0.0.0.0

Then let the firewall and mysql handle allowing the hsot.

Create a firewall rule on the mysql node like below:



Then create a remote mysql user limiting the host to the internal/private ip address above.