Merge pull request #299590 from mbender-ms/lb-cross-sub-update-ps

virtual network manager | Public Preview | high scale private endpoint point connected group

Author: AnnaMHuff

articles/virtual-network-manager/concept-connectivity-configuration.md

@@ -36,8 +36,35 @@ By default, the mesh is a regional mesh, therefore only virtual networks in the
 When you create a mesh topology or direct connectivity in the hub and spoke topology, a new connectivity construct is created called *Connected group*. Virtual networks in a connected group can communicate with each other just like manually connected virtual networks. When you look at the effective routes for a network interface, you'll see a next hop type of *ConnectedGroup*. Virtual networks connected together in a connected group don't have a peering configuration listed under *Peerings* for the virtual network.
 
 > [!NOTE]
-> - If you have conflicting subnets in two or more virtual networks, resources in those subnets *can't* communicate with each other even if they're part of the same mesh network.
-> - A virtual network can be part of up to **two** mesh configurations.
+> If you have conflicting subnets in two or more virtual networks, resources in those subnets *can't* communicate with each other even if they're part of the same mesh network.
+> A virtual network can be part of up to **two** mesh configurations.
+
+### Enable high scale private endpoints connected groups in Azure Virtual Network Manager
+
+[!INCLUDE [virtual-network-manager-high-scale-preview](../../includes/virtual-network-manager-high-scale-preview.md)]
+
+Azure Virtual Network Manager's high scale connected group feature allows you to extend your network capacity. Use the following steps to enable this feature to support up to 20,000 private endpoints across the connected group:
+
+#### Prepare each virtual network in the connected group
+
+1. Review [Increase Private Endpoint virtual network limits](../private-link/increase-private-endpoint-vnet-limits.md) for detailed guidance on increasing Private Endpoint virtual network limits. Enabling or disabling this feature initiates a one-time connection reset. It's recommended to perform these changes during a maintenance window.
+
+2. Register the feature flag of `Microsoft.Network/EnableMaxPrivateEndpointsVia64kPath` for each subscription containing an Azure Virtual Network Manager instance or a virtual network in your connected group.
+
+   > [!IMPORTANT]
+   > This registration is essential for unlocking the extended private endpoint capacity. For more information, see [How to enable Azure preview features documentation](../azure-resource-manager/management/preview-features.md).
+
+3. In each virtual network within your connected group, configure the **Private Endpoint Network Policies** to either `Enabled` or `RouteTableEnabled`. This setting ensures your virtual networks are ready to support the high scale private endpoints functionality. For detailed guidance, see [Increase Private Endpoint virtual network limits](..//private-link/increase-private-endpoint-vnet-limits.md).
+
+#### Configure mesh connectivity for high scale private endpoints
+
+In this step, you configure the mesh connectivity settings for your connected group to enable high scale private endpoints. This step involves selecting the appropriate options in the Azure portal and verifying the configuration.
+
+1. In your mesh connectivity configuration, locate and select the checkbox for **Enable private endpoints high scale**. This option activates the high scale feature for your connected group.
+
+1. Verify every virtual network in your connected group is configured with high scale private endpoints. The Azure portal validates the settings across the entire group. If a virtual network without the high scale configuration is added later, it can't communicate with private endpoints in other virtual networks.
+
+1. After verifying all virtual networks are properly configured, deploy the settings. This finalizes the setup of your high scale connected group.
 
 ## Hub and spoke topology
 

includes/virtual-network-manager-high-scale-preview.md

@@ -0,0 +1,23 @@
+---
+ title: Include file
+ description: Include file
+ services: virtual-network-manager
+ author: mbender
+ ms.service: virtual-network-manager
+ ms.topic: include
+ ms.date: 05/09/2025
+ ms.author: mbender-ms
+ ms.custom: include-file, references_regions
+---
+
+> [!IMPORTANT]
+> Azure Virtual Network Manager's high scale private endpoint connected group feature is in preview. It's available in the following regions during preview:
+>
+> - East US 2 EUAP
+> - Central US EUAP
+> - West US Central
+> - East Asia
+> - UK South
+> - East US
+> 
+> This preview version is provided without a service-level agreement, and we don't recommend it for production workloads. Certain features might not be supported or might have constrained capabilities. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).