Azure Arc Decision Tree

It can work with a Proxy and the Azure Arc Gateway, but it's not my prefered option. ms_edrusi​ you can take a look here in my https://hartiga.de/azure/best-connection-to-azure-arc-enable-a-server/for more details. 

🔹 Private Endpoints? Not Recommended (Q4/2024)
While Microsoft supports them, I would argue against using Private Endpoints due to added complexity and limited benefit. Critical services like Entra ID and Azure Resource Manager still use public routes, and tools like Windows Admin Center or SSH aren’t supported over private link.

🔹 Public Endpoint Options – 4 Scenarios
My article outlines four main connection strategies:

1. Proxy without Azure Arc Gateway – Suitable for environments with enterprise proxies and no direct internet access. However, managing URL whitelists can be a burden.
2. Proxy with Azure Arc Gateway – Adds flexibility and centralizes traffic, but still requires proxy configuration.
3. Azure Arc Gateway without Proxy – Ideal for environments that can route traffic directly through the gateway.
4. Direct Connection – Simplest setup, best for modern environments with full internet access and Zero Trust architecture.