PrivateLink provides a secure communication method between Unqork and an organization's resources by keeping traffic on a private network. Unqork integrates with two PrivateLink services: AWS PrivateLink and Azure Private Link. While both services perform the same function, they use different terminology and technology to do so.
For simplicity, AWS PrivateLink and Azure Private Link are referred to as PrivateLink in this article.
Benefits of AWS and Azure PrivateLink
AWS and Azure PrivateLink offer the following benefits:
Enhanced Security: Removes attack vectors to the public internet by eliminating public endpoints to services.
Private Cloud Connectivity: Provides a secure communication method between Unqork and an organization's resources by preventing traffic from leaving the private network.
Improved Application Performance: Keeps communication in the same region and the cloud provider's private network.
Differences and Similarities Between AWS and Azure PrivateLink Patterns
AWS and Azure PrivateLink both establish private connections between an organization's resources and cloud services. The patterns each service uses are similar, but the underlying technology differs. Each service uses unique methods and terminology to achieve the same result.
The table below maps equivalent AWS and Azure terminology.
Amazon Web Services Terminology | Azure Terminology | Description |
|---|---|---|
Establishes private, stable, and secure connections between VPCs (virtual private clouds) and Unqork services. | ||
Dictates endpoint permissions for a service's API calls. | ||
A network interface that uses a private IP address from the virtual network to connect to AWS or Azure. | ||
Distributes incoming network traffic across multiple targets. Monitors target health and routes traffic to healthy targets only. | ||
A private network that provides access to AWS or Azure resources. | ||
Creates private connections between AWS or Azure data centers and corporate data centers. |
AWS and Azure PrivateLink Patterns
AWS and Azure PrivateLink patterns are used when private connections are required for Unqork to consume a private service without a public interface.
AWS PrivateLink:
Azure PrivateLink:
AWS VPC and Azure VNet PrivateLink Patterns
The AWS VPC and Azure patterns extend PrivateLink to let Unqork consume a private service in a different region. Use peering when capacity limits or regional constraints prevent alignment on a single region footprint.
AWS PrivateLink with VPC Peering:
Azure PrivateLink with VNet:
AWS Direct Connect and Azure ExpressRoute PrivateLink Patterns
The AWS Direct Connect and Azure ExpressRoute patterns are used when Unqork must consume a service on a corporate network or data center.
AWS PrivateLink with Direct Connect:
Combined Patterns
All three patterns from each service can be combined to connect Unqork to services anywhere in the world.
AWS PrivateLink with VPC Peering and Direct Connect:
Azure PrivateLink with Express Route:
Frequently Asked Questions
Can a single PrivateLink service cover multiple services?
Yes. Multiple services can run behind a single private API gateway. This is a common pattern that reduces the number of PrivateLinks and security policies to manage.
Can end-users initiate traffic over PrivateLink?
No. End-user traffic and traffic initiated by third parties goes over the public internet.
Are there additional hosting costs involved with PrivateLink?
Yes. There are minimal costs for PrivateLink services and network data transfers.
Are there performance limitations on connections, bandwidth, or transactions per second?
Performance depends on many factors that must be tested and measured for each deployment. In general, private connections perform better than connections that traverse the public internet.
Can existing Unqork customers use PrivateLink?
Yes, though some environments might require migration to the Kubernetes-based architecture. Contact a Customer Success Manager to learn more.
Changelog
Date | Change |
|---|---|
2026-09-21 | Imported and updated for UnqorkAI documentation. |