Azure Data Factory Not Communicating via Private Endpoint

Anon4343 426 Reputation points
2022-11-22T17:07:25.323+00:00

After following the instructions to create a Private Endpoint and disable public access to the Azure Data Factory, the self-hosted Integration Runtime is unable to connect. What configuration am I missing?

Instructions followed: https://learn.microsoft.com/en-us/azure/data-factory/data-factory-private-link

Error: The access to data factory from public network is blocked.

263173-blocked.png

263118-networking.png

The VM can resolve the private link. The private link is associated with Data Factory sub resource not portal. There are no NSGs blocking between the VM VNet and the Private Link VNet.

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,159 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
469 questions
Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
9,600 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. BhargavaGunnam-MSFT 26,306 Reputation points Microsoft Employee
    2022-11-23T23:53:19.94+00:00

    Hello @Anon4343 ,

    Welcome to the MS Q&A platform.

    The issue is, your SHIR VM is unable to connect to ADF associated with the private endpoint.

    You can use one of the following options to configure your DNS settings for private endpoints:

    1) Use the host file. You can use the host file on a virtual machine to override the DNS.

    2) Use a private DNS zone. You can use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone can be linked to your virtual network to resolve specific domains.

    3) Use your DNS forwarder (optional). You can use your DNS forwarder to override the DNS resolution for a private link resource. Create a DNS forwarding rule to use a private DNS zone on your DNS server hosted in a virtual network.

    Reference document: https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns

    I hope this helps. Please let me know if you have any further questions.


    • Please don't forget to click on 130616-image.png and upvote 130671-image.png button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification
    • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators
    1 person found this answer helpful.