Skip to content

Commit 106f77a

Browse files
committed
removed table per PM request
1 parent 927c7ec commit 106f77a

File tree

1 file changed

+0
-19
lines changed

1 file changed

+0
-19
lines changed

articles/virtual-network/virtual-network-service-endpoints-overview.md

Lines changed: 0 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -74,25 +74,6 @@ Service endpoints provide the following benefits:
7474

7575
- A virtual network can be associated with up to 200 different subscriptions and regions by each supported service with active virtual network rules configured.
7676

77-
## Service Endpoint vs Private Endpoint
78-
79-
The following table compares Azure Service Endpoints and Private Endpoints across key features:
80-
81-
| Feature | Service Endpoints | Private Endpoints |
82-
|----------------------------------|----------------------------------------------------------------------------------|-----------------------------------------------------------------------|
83-
| Scope | Per service | Per instance |
84-
| Connectivity | Uses Azure PaaS public IP; traffic goes over Azure backbone | PaaS resource gets a private IP in your VNET; traffic stays within the VNET |
85-
| Data Security | Traffic leaves VNET to Azure backbone | No data exfiltration; traffic remains private |
86-
| On-Premises Connectivity | Not supported natively; requires public IP added to allow list. | Supported via ExpressRoute and VPN |
87-
| UDRs and NSGs | No specific overlaps; traffic can bypass endpoint | May require special configuration to avoid bypass |
88-
| Data Protection | Requires integration with firewall/NVA for exfiltration protection | Built-in data protection |
89-
| Cost | No additional cost | Charged based on traffic and number of endpoints |
90-
| Complexity | Easy to configure via Azure Portal | Requires DNS updates and endpoint placement decisions |
91-
| Cross-Region Support | Not supported | Fully supported |
92-
| DNS Configuration | Not required | Required (often via Azure Private DNS) |
93-
| Access Control | Broad access to service from VNET | Granular access to specific resource instances |
94-
| On-Premises & Peered VNET Access| Not supported | Supported |
95-
9677
## Secure Azure services to virtual networks
9778

9879
- A virtual network service endpoint provides the identity of your virtual network to the Azure service. Once you enable service endpoints in your virtual network, you can add a virtual network rule to secure the Azure service resources to your virtual network.

0 commit comments

Comments
 (0)