You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-network/virtual-network-service-endpoints-overview.md
-19Lines changed: 0 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -74,25 +74,6 @@ Service endpoints provide the following benefits:
74
74
75
75
- A virtual network can be associated with up to 200 different subscriptions and regions by each supported service with active virtual network rules configured.
76
76
77
-
## Service Endpoint vs Private Endpoint
78
-
79
-
The following table compares Azure Service Endpoints and Private Endpoints across key features:
80
-
81
-
| Feature | Service Endpoints | Private Endpoints |
| Connectivity | Uses Azure PaaS public IP; traffic goes over Azure backbone | PaaS resource gets a private IP in your VNET; traffic stays within the VNET |
85
-
| Data Security | Traffic leaves VNET to Azure backbone | No data exfiltration; traffic remains private |
86
-
| On-Premises Connectivity | Not supported natively; requires public IP added to allow list. | Supported via ExpressRoute and VPN |
87
-
| UDRs and NSGs | No specific overlaps; traffic can bypass endpoint | May require special configuration to avoid bypass |
88
-
| Data Protection | Requires integration with firewall/NVA for exfiltration protection | Built-in data protection |
89
-
| Cost | No additional cost | Charged based on traffic and number of endpoints |
90
-
| Complexity | Easy to configure via Azure Portal | Requires DNS updates and endpoint placement decisions |
91
-
| Cross-Region Support | Not supported | Fully supported |
92
-
| DNS Configuration | Not required | Required (often via Azure Private DNS) |
93
-
| Access Control | Broad access to service from VNET | Granular access to specific resource instances |
- A virtual network service endpoint provides the identity of your virtual network to the Azure service. Once you enable service endpoints in your virtual network, you can add a virtual network rule to secure the Azure service resources to your virtual network.
0 commit comments