Lesson Learned #175: Connecting to Private EndPoint of Azure SQL Database from Managed Instance

Published Jun 15 2021 10:20 AM 1,467 Views

Today, I worked on a very interesting case when our customer wants to connect to the Private EndPoint/Link of Azure SQL Database from Azure SQL Managed Instance. In this article, I would like to share with an example how to do it. 

 

Basically, once you have created the Private Endpoint on the VNET/SUBNET of your Azure SQL Managed Instance. The most important thing is to resolve the IP. For this reason, it is important to add your DNS server resolution if you don't have this please add in your DNS server the resolution for your Azure SQL Database Private Endpoint IP. 

 

For example, servername.database.windows.net points to 10.1.2.5. If you have already deployed you Azure SQL Managed Instance before creating this Private Endpoint in order to update the DNS resolution of your Azure SQL Manage Instance nodes, I would like to suggest to scale up/down your Azure SQL Managed Instance in order to refresh the DNS servers.

 

Enjoy!

 

1 Comment
Occasional Contributor

Hi Jose,

 

Thank you for the insights. I have a question regarding private endpoint/link with Azure SQL Managed Instance.

AzSQL MI is already deployed with private IP address and can be accessible either over VNet peering (access on Azure) or S2S VPN (access from on premises). 

 

Where does private link/endpoint fits?

%3CLINGO-SUB%20id%3D%22lingo-sub-2449836%22%20slang%3D%22en-US%22%3ELesson%20Learned%20%23175%3A%20Connecting%20to%20Private%20EndPoint%20of%20Azure%20SQL%20Database%20from%20Managed%20Instance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2449836%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EToday%2C%20I%20worked%20on%20a%20very%20interesting%20case%20when%20our%20customer%20wants%20to%20connect%20to%20the%20Private%20EndPoint%2FLink%20of%20Azure%20SQL%20Database%20from%20Azure%20SQL%20Managed%20Instance.%20%3C%2FSPAN%3E%3CSPAN%3EIn%20this%20article%2C%20I%20would%20like%20to%20share%20with%20an%20example%20how%20to%20do%20it.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EBasically%2C%20once%20you%20have%20created%20the%20Private%20Endpoint%20on%20the%20VNET%2FSUBNET%20of%20your%20Azure%20SQL%20Managed%20Instance.%20The%20most%20important%20thing%20is%20to%20resolve%20the%20IP.%20For%20this%20reason%2C%20it%20is%20important%20to%20add%20your%20DNS%20server%20resolution%20if%20you%20don't%20have%20this%20please%20add%20in%20your%20DNS%20server%20the%20resolution%20for%20your%20Azure%20SQL%20Database%20Private%20Endpoint%20IP.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EFor%20example%2C%20servername.database.windows.net%20points%20to%2010.1.2.5.%20If%20you%20have%20already%20deployed%20you%20Azure%20SQL%20Managed%20Instance%20before%20creating%20this%20Private%20Endpoint%20in%20order%20to%20update%20the%20DNS%20resolution%20of%20your%20Azure%20SQL%20Manage%20Instance%20nodes%2C%20I%20would%20like%20to%20suggest%20to%20scale%20up%2Fdown%20your%20Azure%20SQL%20Managed%20Instance%20in%20order%20to%20refresh%20the%20DNS%20servers.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EEnjoy!%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2449836%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EToday%2C%20I%20worked%20on%20a%20very%20interesting%20case%20when%20our%20customer%20wants%20to%20connect%20to%20the%20Private%20EndPoint%2FLink%20of%20Azure%20SQL%20Database%20from%20Azure%20SQL%20Managed%20Instance.%20%3C%2FSPAN%3E%3CSPAN%3EIn%20this%20article%2C%20I%20would%20like%20to%20share%20with%20an%20example%20how%20to%20do%20it.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2619787%22%20slang%3D%22en-US%22%3ERe%3A%20Lesson%20Learned%20%23175%3A%20Connecting%20to%20Private%20EndPoint%20of%20Azure%20SQL%20Database%20from%20Managed%20Instance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2619787%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Jose%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20the%20insights.%20I%20have%20a%20question%20regarding%20private%20endpoint%2Flink%20with%20Azure%20SQL%20Managed%20Instance.%3C%2FP%3E%3CP%3EAzSQL%20MI%20is%20already%20deployed%20with%20private%20IP%20address%20and%20can%20be%20accessible%20either%20over%20VNet%20peering%20(access%20on%20Azure)%20or%20S2S%20VPN%20(access%20from%20on%20premises).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhere%20does%20private%20link%2Fendpoint%20fits%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Jul 07 2021 09:28 AM
Updated by: