I have a question while testing the configuration of LB-Private endpoint-PaaS DB.
Please add me!
I cropped the picture. Please forgive me.
All vnets and resource groups have only 2 subnets.
It is a structure that communicates from another subnet to that subnet.
Of course, the PaaS DB is in the same vnet.
subnet1) lb - app server
subnet2) lb - private endpoint
When the VM (MSSQL manual installation) was connected to the backend LB (display part) backend pool, communication was confirmed, but after configuring the backend as a private endpoint resource, communication through the LB is not possible.
(I set the backend pool to a private endpoint ip when configuring lb)
However, when I directly stabbed the SQL server, the communication check is working normally.
I don't understand. Why can't I communicate through lb? What am I missing?
1. I know that a standard LB is a prerequisite for a private endpoint, so I first configured it with a standard LB.
(LB Probe: TCP/1433, LB rule: port, backend 1433 configuration)
2. LB setting in the LB-Private Endpoint section: Configure the Backend Pool configuration as IP (Private Endpoint) instead of NIC.
1. If it is a VM that is not a private endpoint at the rear end of the LB, communication through LB is possible. If BUT Private Endpoint resource is connected, communication through LB is not possible.
2. When configuring Private Endpoint, communication is possible through server direct, but communication is not possible through VIP.
How can I configure LB in this configuration? Or do I need to configure additional settings related to private endpoints?
I know that a private link is used to connect a PaaS DB in Azure. Is it correct to use both a private link and a private endpoint?
I wonder if Private Endpoint and Private Link are resources that should always go together.
I'm not sure about the exact difference between private link and private endpoint.
I also tried configuring a private link, but the symptoms were the same.
I think that the architecture does not need a private link as the vnet is the same, did I misunderstand it?
Poor readability, verbose words, but please add!