Skip to content

Commit 170c227

Browse files
Merge pull request #249218 from lrtoyou1223/vnetirbranch42
Update some notes
2 parents f0be8d5 + cd7e6d5 commit 170c227

File tree

2 files changed

+14
-11
lines changed

2 files changed

+14
-11
lines changed

articles/data-factory/data-factory-private-link.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -276,7 +276,7 @@ If you want to restrict access for Data Factory resources in your subscriptions
276276

277277
You're unable to access each PaaS resource when both sides are exposed to Private Link and a private endpoint. This issue is a known limitation of Private Link and private endpoints.
278278

279-
For example, A is using a private link to access the portal of data factory A in virtual network A. When data factory A doesn't block public access, B can access the portal of data factory A in virtual network B via public. But when customer B creates a private endpoint against data factory B in virtual network B, then customer B can't access data factory A via public in virtual network B anymore.
279+
For example, customer A is using a private link to access the portal of data factory A in virtual network A. When data factory A doesn't block public access, customer B can access the portal of data factory A in virtual network B via public. But when customer B creates a private endpoint against data factory B in virtual network B, then customer B can't access data factory A via public in virtual network B anymore.
280280

281281
## Next steps
282282

articles/data-factory/tutorial-managed-virtual-network-on-premise-sql-server.md

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -217,22 +217,25 @@ the page.
217217
**sudo ./ip_fwd.sh -i eth0 -f 1433 -a <FQDN/IP> -b 1433**<br/>
218218
<FQDN/IP> is your target SQL Server IP.<br/>
219219

220-
> [!Note]
220+
> [!NOTE]
221221
> FQDN doesn't work for on-premises SQL Server unless you add a record in Azure DNS zone.
222222
223223
3. Run below command and check the iptables in your backend server VMs. You can see one record in your iptables with your target IP.<br/>
224224
**sudo iptables -t nat -v -L PREROUTING -n --line-number**
225225

226226
:::image type="content" source="./media/tutorial-managed-virtual-network/command-record-1.png" alt-text="Screenshot that shows the command record.":::
227227

228-
>[!Note]
228+
> [!NOTE]
229229
> If you have more than one SQL Server or data sources, you need to define multiple load balancer rules and IP table records with different ports. Otherwise, there will be some conflict. For example,<br/>
230230
>
231-
>| |Port in load balancer rule|Backend port in load balance rule|Command run in backend server VM|
232-
>|------------------|---------|--------|---------|
233-
>|**SQL Server 1**|1433 |1433 |sudo ./ip_fwd.sh -i eth0 -f 1433 -a <FQDN/IP> -b 1433|
234-
>|**SQL Server 2**|1434 |1434 |sudo ./ip_fwd.sh -i eth0 -f 1434 -a <FQDN/IP> -b 1433|
235-
231+
> | |Port in load balancer rule|Backend port in load balance rule|Command run in backend server VM|
232+
> |------------------|---------|--------|---------|
233+
> |**SQL Server 1**|1433 |1433 |sudo ./ip_fwd.sh -i eth0 -f 1433 -a <FQDN/IP> -b 1433|
234+
> |**SQL Server 2**|1434 |1434 |sudo ./ip_fwd.sh -i eth0 -f 1434 -a <FQDN/IP> -b 1433|
235+
236+
> [!NOTE]
237+
> It's important to be aware that the configuration within the virtual machine (VM) is not permanent. This means that each time the VM restarts, it will require reconfiguration.
238+
236239
## Create a Private Endpoint to Private Link Service
237240

238241
1. Select All services in the left-hand menu, select All resources, and then select your
@@ -246,8 +249,8 @@ data factory from the resources list.
246249

247250
:::image type="content" source="./media/tutorial-managed-virtual-network/private-endpoint-6.png" alt-text="Screenshot that shows the private endpoint settings.":::
248251

249-
> [!Note]
250-
> When deploying your SQL Server on a virtual machine within a virtual network, it is essential to enhance your FQDN by appending **privatelink**. Otherwise, it will be conflicted with other records in the DNS setting. For example, you can simply modify the SQL Server's FQDN from **sqlserver.westus.cloudapp.azure.net** to **sqlserver.privatelink.westus.cloudapp.azure.net**.
252+
> [!NOTE]
253+
> When deploying your SQL Server on a virtual machine within a virtual network, it is essential to enhance your FQDN by appending **privatelink**. Otherwise, it will be conflicted with other records in the DNS setting. For example, you can simply modify the SQL Server's FQDN from **sqlserver.westus.cloudapp.azure.net** to **sqlserver.privatelink.westus.cloudapp.azure.net**.
251254
252255
8. Create private endpoint.
253256

@@ -268,7 +271,7 @@ data factory from the resources list.
268271

269272
:::image type="content" source="./media/tutorial-managed-virtual-network/linked-service-3.png" alt-text="Screenshot that shows the SQL server linked service creation page.":::
270273

271-
> [!Note]
274+
> [!NOTE]
272275
> If you have more than one SQL Server and need to define multiple load balancer rules and IP table records with different ports, make sure you explicitly add the port name after the FQDN when you edit Linked Service. The NAT VM will handle the port translation. If it's not explicitly specified, the connection will always time-out.
273276
274277
## Troubleshooting

0 commit comments

Comments
 (0)