On-prem Data Gateway vs setup VPN Gateway with Private Link

[nduc4nk]

I'm struggling to differentiate traffic security pattern between On-prem Data Gateway and Site-to-site setup with VPN Gateway and Private Link.

As refer to the doc, Private Link offer a secure traffic over Azure Vnet + Then I setup site-to-site to On-prem to have secure connection. What about On-prem Data Gate Way, and how is It difference?

[nduc4nk]

Hi @GilbertQ ,

Thanks for your answer, It's clearer now for me to see how traffic securely go through internet. But to make it even more clearer, the concern of choice for these two approach when setting secure connection from on-prem to powerBI. It seems to me that Azure Private Link's approach is more protected than solely On-prem gateway right?

[GilbertQ]

Hi @nduc4nk 

Yes, that is correct, because it is going via azure private backbone network.

[GilbertQ · Accepted solution]

Hi @nduc4nk 

The easiest way to explain it is that the on premise data gateway will go through the public Internet where it is secured using HTTPS. But if you are using the gateway with private link, it does not travel through the public Internet but travels through Microsoft Azure infrastructure, which is also secured with HTTPS.