how to ensure only 1 active connection through private endpoint

Question

I have VMs, Databricks workspaces in same subnet accessing azure storage and azure sql hosted in azure private endpoints.

How can I restrict to only one active connection through private endpoint. Say VM1 and VM2 using the same private endpoint. then at any of time, only 1 should connection

Is there any setting to achive the same in azure

Answer 1

Hello @Venkata Rajendra Regulavalasa ,

I understand that you would like to know if it is possible to ensure that only 1 active connection is allowed through private endpoint at any given time.

As of today, there is no setting/feature in Azure private endpoint which would help you to allow a single VM connection via private endpoint at any given time. Network connections can be initiated by any client which is connecting to the private endpoint.

Refer: https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview

https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview#network-security-of-private-endpoints

NSGs on private endpoint can help you to restrict a client or range completely but it would be a manual process.

Refer: https://azure.microsoft.com/en-us/updates/general-availability-of-network-security-groups-support-for-private-endpoints/

https://learn.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy?tabs=network-policy-portal

Kindly let us know if the above helps or you need further assistance on this issue.

---

Please close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.