Azure Data Factory - Azure Managed Vnet Runtime

Question

If we use Azure Managed Vnet Runtime, then connection between the Vnet ( azure Managed ) and Azure Data Factory is over a public IP of Data Factory which is not secured ( how the internal arrangement is done ) . So Self IR is the only way to get that security correct?. We can form a private end point of ADF from the Vnet hosting our Self IR.

Thanks!

Answer 1

Hello anonymous user and welcome to Microsoft Q&A.

In the interest of truth, I feel I must question your assertion that the connection to Managed Vnet is over a public IP. The Managed Vnet feature relies on Private Endpoints to keep all traffic inside Azure.

A Private Endpoint (not to be confused with Service Endpoint) connects the resource provider with your vnet securely. Networking is not my specialty, so I can't explain very well. It is kinda like peering, but not.

One key point when using a Managed Vnet enabled Data Factory, is to use a Managed Vnet Integration Runtime. If you use a different runtime, then it may go over public IP.