Azure Private Link advantages over Azure Service Endpoint

Private Link — Azure PaaS service receive a private IP from your networks used for communication with your VNET

Service Endpoint — Azure PaaS public IP it is still used, the trafic between VNET and the public IP of Azure PaaS service goes over Azure backbokne network

Private Link — ExpressRoute and VPN tunnels provide support to extend the private Azure PaaS connectivity to the OnPrem networks

Service Endpoint — No native support for OnPrem integrations. Build mainly for Azure VNETs.

Private Link — The cost is based on inboud, outbound traffic and no. of endpoints. Depending on the total traffic, the total cost can grow easilty

Service Endpoint — No additional cost (free of use)

Private Link — Build-in data protection

Service Endpoint — Needs to be integrated with a Network Virtual Appliance/Firewall of exfiltration protection is required

Private Link — The no. of Azure PaaS services supported by Private Link is high and is grow each month — full list of Azure PaaS Services available here.

Service Endpoint — Well supported by core Azure PaaS Services — full list of Azure PaaS Services available here.

Private Link — The traffic can bypass the Private Endpoint of you use UDRs and NSGs. Special configuration might be required

Service Endpoint — No specific overlaps exists

Private Link — Involves updates to DNS (Azure Private DNS) and where the service will attach to your VNET.

Service Endpoint — Easy to configure and setup from Azure Portal

Private Link — Has full support for access resources across regions and across Azure AD tenants

Service Endpoint — No native support for cross-region support

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store