Seeking Advice: Private Link and VNet Data Gateway Issues in Microsoft Fabric

[QuintinC_HKG]

My company have been exploring Microsoft Fabric and have a few questions based on the scenario where Private Link is properly configured and Block public Internet access is enabled:

1. When Private Link is properly configured and Block public Internet access is enabled, will the data pipeline fail to load data?
2. Since the On-Premises Data Gateway does not support Private Link, can I use the VNet Data Gateway instead?
3. If I use the VNet Data Gateway instead of the On-Premises Data Gateway to load data from an on-premises data source, what impact will this have?
4. "When capacity is newly created, it won't support Private Link until its endpoint is reflected in the private DNS zone. This can take up to 24 hours." Does this mean we need to manually set the record in the private DNS zone for immediate use?
5. Given that the Microsoft Fabric Capacity Metrics app does not support Private Link, how can I monitor the capabilities of Microsoft Fabric capacities?

Thanks in advance for your help!

[v-tsaipranay · Accepted solution]

Hi @QuintinC_HKG ,

Thank you for reaching out to the Microsoft Fabric Community.

1. When Private Link is configured correctly and Block public Internet access is enabled, communication will occur over private IPs, ensuring no exposure to the public internet. If any endpoint in the data pipeline is not configured for Private Link, you may encounter failures when attempting to load data. Ensure that all involved endpoints, both source and destination, are set up for Private Link to avoid these issues.
2. Since the On-Premises Data Gateway does not support Private Link, you can use the VNet Data Gateway as an alternative. The VNet Data Gateway is fully compatible with Private Link, ensuring that your on-premises data sources can be securely connected within your Virtual Network.
3. Switching to the VNet Data Gateway offers enhanced security by ensuring that all traffic remains within your private network. However, this setup may require additional configuration to ensure that both the on-premises data sources and the gateway are accessible through your Virtual Network. Additionally, ensure that your network bandwidth and latency meet the requirements for optimal data transfer performance.
4. When a new capacity is created in Microsoft Fabric, its endpoint may not be immediately reflected in the Private DNS Zone, and this can take up to 24 hours. If immediate access is required, you can manually add the necessary DNS records to the Private DNS Zone to expedite the process. Alternatively, you may want to automate this as part of your resource provisioning process.
5. The Microsoft Fabric Capacity Metrics app does not currently support monitoring for environments that utilize Private Link. However, you can monitor your Fabric capacities using other Microsoft Fabric monitoring tools, such as Power BI Workspaces  to track performance, health, and usage metrics for your resources.

For further reading and detailed instructions, please refer to the specific documentation links below for better understanding: 

About private Links for secure access to Fabric - Microsoft Fabric | Microsoft Learn

Private endpoints for secure access to Power BI for on-premises clients - Power BI | Microsoft Learn

What is a virtual network (VNet) data gateway | Microsoft Learn

Workspace monitoring overview - Microsoft Fabric | Microsoft Learn

Hope this information helps clarify your questions, please feel free to reach out. 

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thankyou.

[v-tsaipranay]

Hi @QuintinC_HKG  ,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.

Thank you.

[QuintinC_HKG]

Hi @v-tsaipranay 

Thank you for you answer. your information almost answer my questions.