The rapidly growing adoption of Azure, customers need to get right of entry to the facts and offerings privately and securely from their networks grow exponentially. To help with this, microsoft announce the preview of Azure Private Link
Azure Private Link is a secure and scalable manner for Azure clients to devour Azure Services like Azure Storage or SQL, Microsoft Partner Services or their very own services privately from their Azure Virtual Network (VNet). The era is based totally on a provider and purchaser version where the company and the patron are both hosted in Azure. A connection is established using a consent-based totally call go with the flow and as soon as established, all facts that flows among the service provider and service customer is isolated from the internet and stays at the Microsoft network. There is no need for gateways, network address translation (NAT) devices, or public IP addresses to speak with the service.
Azure Private Link brings Azure services in the customer’s private VNet. The provider resources can be accessed using the personal IP deal with just like another resource inside the VNet. This drastically simplifies the community configuration by retaining access rules non-public.
Key highlights of Azure Private Link
- Private on-premises access: Since PaaS resources are mapped to personal IP addresses within the customer’s VNet, they may be accessed through Azure ExpressRoute personal peering. This efficaciously way that the statistics will traverse a totally private path from on-premises to Azure. The configuration in the company firewalls and direction tables can be simplified to allow access only to the personal IP addresses.
- Data exfiltration protection: Azure Private Link is precise with recognize to mapping a selected PaaS resource to non-public IP cope with as opposed to mapping an entire carrier as other cloud vendors do. This essentially means that any malicious rationale to exfiltrate the records to a distinctive account using the same non-public endpoint will fail, accordingly presenting built-in data exfiltration protection.
- Simple to setup: Azure Private Link is straightforward to setup with minimal networking configuration needed. Connectivity works on an approval name float and once a PaaS aid is mapped to a non-public endpoint, the connectivity works out of the box without any additional configurations on direction tables and Azure Network Security Groups (NSGs).
- Overlapping address space: Traditionally, clients use VNet peering because the mechanism to connect multiple VNets. VNet peering calls for the VNets to have non-overlapping deal with space. In organization use cases, its often common to locate networks with an overlapping IP deal with space. Azure Private Link affords an alternative way to privately connect packages in different VNets which have an overlapping IP deal with space.