|
| 1 | += Configure Azure Private Link in the Cloud UI |
| 2 | +:description: Set up Azure Private Link in the Redpanda Cloud UI. |
| 3 | + |
| 4 | +NOTE: This guide is for configuring new clusters with Azure Private Link using the Redpanda Cloud UI. To configure and manage Private Link on an existing cluster, you must use the xref:networking:azure-private-link.adoc[Cloud API]. |
| 5 | + |
| 6 | +The Redpanda Azure Private Link service provides secure access to Redpanda Cloud from your own VNet. Traffic over Private Link does not go through the public internet because these connections are treated as their own private Azure service. While your VNet has access to the Redpanda virtual network, Redpanda cannot access your VNet. |
| 7 | + |
| 8 | +Consider using the endpoint service if you have multiple VNets and could benefit from a more simplified approach to network management: |
| 9 | + |
| 10 | +* Azure Private Link allows overlapping xref:networking:cidr-ranges.adoc[CIDR ranges]. |
| 11 | +* You control which Azure subscriptions are allowed to connect to the endpoint service. |
| 12 | +
|
| 13 | +== Requirements |
| 14 | + |
| 15 | +* Your Redpanda cluster and VNet must be in the same region. |
| 16 | +* Use the https://learn.microsoft.com/en-us/cli/azure/get-started-with-azure-cli?view=azure-cli-latest[Azure command-line interface (CLI)^] to create a new client VNet or modify an existing one to use the Private Link endpoint. |
| 17 | + |
| 18 | +TIP: In Kafka clients, set `connections.max.idle.ms` to a value less than 350 seconds. |
| 19 | + |
| 20 | +== Enable endpoint service for new clusters |
| 21 | + |
| 22 | +. In the Redpanda Cloud UI, create a new cluster. |
| 23 | +. On the *Networking* page: |
| 24 | +.. For *Connection type*, select *Private*. |
| 25 | +.. For *Azure Private Link*, select *Enabled*. |
| 26 | +.. For *Allowed subscriptions*, click *Add subscription*, and enter the Azure subscription ID that can access the cluster. You can add multiple subscriptions. |
| 27 | + |
| 28 | + |
| 29 | +== Access Redpanda services through VNet endpoint |
| 30 | + |
| 31 | +To access Redpanda services, follow the steps on the cluster's *Overview* page. In the *How to connect* section, click *Private Link*. |
| 32 | + |
| 33 | +image::shared:private-link-tab.png[Private Link tab in Overview page,align="left"] |
| 34 | + |
| 35 | +include::networking:partial$private-links-access-rp-services-through-vpc.adoc[] |
| 36 | + |
| 37 | +== Test the connection |
| 38 | + |
| 39 | +You can test the connection to the endpoint service from any VM or container in the consumer VNet. If configuring a client isn't possible right away, you can do these checks using `rpk` or cURL: |
| 40 | + |
| 41 | +include::networking:partial$private-links-test-connection.adoc[] |
| 42 | + |
0 commit comments