Skip to content

Commit ee87f74

Browse files
authored
Merge pull request #102837 from malopMSFT/patch-156
Update private-endpoint-overview.md
2 parents 4527761 + 4d9eb95 commit ee87f74

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

articles/private-link/private-endpoint-overview.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -126,9 +126,7 @@ The following table includes a list of known limitations when using private endp
126126

127127
|Limitation |Description |Mitigation |
128128
|---------|---------|---------|
129-
|Network Security Group (NSG) rules and User Defined Routes do not apply to Private Endpoint |NSG is not supported on private endpoints. While subnets containing the private endpoint can have NSG associated with it, the rules will not be effective on traffic processed by the private endpoint. You must have [network policies enforcement disabled](disable-private-endpoint-network-policy.md) to deploy private endpoints in a subnet. NSG is still enforced on other workloads hosted on the same subnet. Routes on any client subnet will be using an /32 prefix, changing the default routing behavior requires a similar UDR | Control the traffic by using NSG rules for outbound traffic on source clients. Deploy individual routes with /32 prefix to override private endpoint routes |
130-
| Peered Virtual Network with Private endpoints only are not supported | When connecting to private endpoints on a peered Virtual Network without any other workload is not supported | Deploy a single VM on the peered Virtual Network to enable the connectivity |
131-
|Specialized workloads cannot access private endpoints | The following services deployed into your virtual network cannot access any private link resource using private endpoints:<br>App Service Plan</br>Azure Container Instance</br>Azure NetApp Files</br>Azure Dedicated HSM<br> | No mitigation during preview. |
129+
|Network Security Group (NSG) rules and User Defined Routes do not apply to Private Endpoint |NSG is not supported on private endpoints. While subnets containing the private endpoint can have NSG associated with it, the rules will not be effective on traffic processed by the private endpoint. You must have [network policies enforcement disabled](disable-private-endpoint-network-policy.md) to deploy private endpoints in a subnet. NSG is still enforced on other workloads hosted on the same subnet. Routes on any client subnet will be using an /32 prefix, changing the default routing behavior requires a similar UDR | Control the traffic by using NSG rules for outbound traffic on source clients. Deploy individual routes with /32 prefix to override private endpoint routes. NSG Flow logs and monitoring information for outbound connections are still supported and can be used |
132130

133131

134132
## Next steps

0 commit comments

Comments
 (0)