Azure Arc Decision Tree

It can work with a Proxy and the Azure Arc Gateway, but it's not my prefered option. ms_edrusi​ you can take a look here in my https://hartiga.de/azure/best-connection-to-azure-arc-enable-a-server/for more details. 

🔹 Private Endpoints? Not Recommended (Q4/2024)
While Microsoft supports them, I would argue against using Private Endpoints due to added complexity and limited benefit. Critical services like Entra ID and Azure Resource Manager still use public routes, and tools like Windows Admin Center or SSH aren’t supported over private link.

🔹 Public Endpoint Options – 4 Scenarios
My article outlines four main connection strategies:

1. Proxy without Azure Arc Gateway – Suitable for environments with enterprise proxies and no direct internet access. However, managing URL whitelists can be a burden.
2. Proxy with Azure Arc Gateway – Adds flexibility and centralizes traffic, but still requires proxy configuration.
3. Azure Arc Gateway without Proxy – Ideal for environments that can route traffic directly through the gateway.
4. Direct Connection – Simplest setup, best for modern environments with full internet access and Zero Trust architecture.

Yes, I have written other blogs on how arc work with proxy or arc gateway. Please check out my profile. You can find it. Thank you

Azure arc needs to connect atleast once in 30 days with machines. There is an option of offline mode where you download certain data and upload to azure manually.  This functionality is depending on what level of services you need to use. 

https://learn.microsoft.com/en-us/azure/azure-arc/data/connectivity

https://learn.microsoft.com/en-us/azure/azure-local/manage/disconnected-operations-overview?view=azloc-24112