---
title: "How to: Set Up Azure Private Link"
slug: "how-to-set-up-azure-private-link"
updated: 2025-11-10T16:55:16Z
published: 2025-11-10T16:55:16Z
canonical: "docs.unqork.io/how-to-set-up-azure-private-link"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unqork.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to: Set Up Azure Private Link

## Overview

**Set up Azure Private Link** to connect two VNets (Virtual Networks) in different Azure accounts. The first is a VNet in your Azure account, and the second is the dedicated VNet where your Unqork environment exists. If your Azure resources are connected to on-premises networks, Unqork services can also communicate services in your data center. Similarly, Unqork services can communicate with services in your other VNets, as long as they are peered.

Azure Private Link provides a secure transfer tunnel for data, keeping your traffic safe without traversing the public internet. Typically, services communicate by traveling the internet from one public endpoint to another. With Azure Private Link, communication travels between your endpoint service to a VNet endpoint in your hosted Unqork environment. The endpoint service using Private Link works with a NLB (Network Load Balancer). The endpoint service and NLB act as Unqork's entry point to your infrastructure. You do not need to use any special hardware or software to make this happen because you'll create the VNet endpoint in Azure.

## How Azure Private Link Works with Unqork

Unqork acts as the **service consumer** and your endpoint service acts as the **service owner**. Unqork initiates the connection to a resource in your cloud account. Then, the service provider can respond to requests from Unqork. To set up Azure Private Link for Unqork, you'll need the following:

1. Generate a private domain. In Azure, in your VNet (in the same region as your Unqork environment), you’ll set up the endpoint service. That endpoint service is then configured to forward traffic to the NLB.
2. In Unqork's [Services Administration](/v1/docs/services-administration), create an external service integration.
3. In the Module Builder, configure a [Plug-In](/v1/docs/plug-in-component) component calling the external service integration.

[![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Azure_Private_Link_03_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A56%3A53Z&se=2026-11-08T04%3A56%3A53Z&sr=c&sp=r&sig=Sc%2FkgXaQ1Ob2O4wSEgYh1nq34pCZj35BuLyk777RBk4%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Azure%20Private%20Link%2003.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A56%3A53Z&se=2026-11-08T04%3A56%3A53Z&sr=c&sp=r&sig=Sc%2FkgXaQ1Ob2O4wSEgYh1nq34pCZj35BuLyk777RBk4%3D)

## How to Set Up Azure Private Link

To set up Azure Private Link, you'll first need to configure settings in Azure. Then, you’ll set up a Plug-In component in Unqork and connect to the service.

### What You Need

In your Azure account, you need:

- IAM role privileges to create and manage VNets, endpoints, and endpoint services.
- A VNet in the same region as the Unqork environment.
- VNet subnets where the target resources reside.
- An endpoint service, or the **PrivateLink**.
- The endpoint service name from Azure.

In Unqork, you need:

- 1 [Initializer](/v1/docs/initializer-component) component.
- 1 [Plug-In](/v1/docs/plug-in-component) component.

### Create an Azure Private Link (In Azure)

First, you'll set everything up on the Azure side.

#### Create the VNet, NAT Gateway, load balancer, Private Link Service, and Private Endpoint

Set up the VNet, NAT gateway, load balancer, Private Link Service, and private endpoint.

1. In the Azure portal, select or create a VNet.
2. Configure the VNet to include subnet(s) in each Azure subscription.
3. Select or create the NAT gateway.
4. Select or create an Azure Virtual Machine (VM).

> [!NOTE]
> The VM must be in the same region as the VNet. The VM must be on the same network as the VNet and the subnet(s).
5. Select or create a load balancer.
6. Create the Private Link service.
7. Create the private endpoint.

### Copy the Azure Endpoint Service Name

Next, copy the Azure endpoint service name that you created. You'll need this to set up the Azure Private Link connection.

> [!NOTE]
> The endpoint service configuration makes the Private Link in Azure.

1. In Azure, go to the **Overview** tab.
2. Select the endpoint service that you created in the Create the VNet, NAT Gateway, NLB, the Private Link Service, and the Private Endpoint section.
3. Copy the **Alias**. This endpoint service acts as the Azure Private Link to the Unqork environment. You'll enter this service name in Unqork, in PrivateLink Administration.

[![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Azure_Private_Link_02_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A56%3A53Z&se=2026-11-08T04%3A56%3A53Z&sr=c&sp=r&sig=Sc%2FkgXaQ1Ob2O4wSEgYh1nq34pCZj35BuLyk777RBk4%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Azure%20Private%20Link%2002.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A56%3A53Z&se=2026-11-08T04%3A56%3A53Z&sr=c&sp=r&sig=Sc%2FkgXaQ1Ob2O4wSEgYh1nq34pCZj35BuLyk777RBk4%3D)

## Connecting to Azure Private Link from Unqork

Now, connect Unqork to Azure Private Link.

### Adding an Azure Private Link Service in PrivateLink Administration (In Unqork)

Next, you'll create the Azure Private Link service in Unqork. Your Unqork application connects to your Azure resource with Azure Private Link.

1. At the top-right of the Unqork Designer Platform, click **Administration**.
2. Under Integration, click **PrivateLink Administration**.
3. Click **Add PrivateLink**. The **Add PrivateLink** page displays.

[![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Azure_Private_Link_01_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A56%3A53Z&se=2026-11-08T04%3A56%3A53Z&sr=c&sp=r&sig=Sc%2FkgXaQ1Ob2O4wSEgYh1nq34pCZj35BuLyk777RBk4%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Azure%20Private%20Link%2001.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A56%3A53Z&se=2026-11-08T04%3A56%3A53Z&sr=c&sp=r&sig=Sc%2FkgXaQ1Ob2O4wSEgYh1nq34pCZj35BuLyk777RBk4%3D)
4. In the **PrivateLink Friendly Name** field, enter a name for your Private Link. For example, `myPrivateLinkService`.
5. In the **PrivateLink Service Name** field, enter the alias you copied in the [Copy the Azure Endpoint Service Name](/v1/docs/how-to-set-up-azure-private-link#copy-the-azure-endpoint-service-name) section.
6. In the **PrivateLink Internal Name** field, enter a name for your internal domain. For example, `my.private.link`.
7. Click **Add PrivateLink**.

### Finalizing the Azure Private Link Connection in Azure

You've set up the Azure Private Link Connection in Azure and Unqork. Now you’ll complete a couple more steps so the connection can transfer traffic.

1. In the Azure portal, in the **Private link service** section, click **Private Endpoint Connections**.
2. Next to the request you made through Unqork, select the checkbox.
3. Click **Approve**.

## Creating a Service Using Azure Private Link in Services Administration

The Azure Private Link configuration makes a connection, but you must connect the target resource or service. So, you’ll create a new integration in [Services Administration](/v1/docs/services-administration).

1. At the top-right of the Unqork Designer Platform, click **Administration**.
2. Under Integration, click **Services Administration**. The Services Administration page displays.
3. Click **+ Add a Service**.The Create New Service modal displays.
4. In the **Service Title*** field, enter a title. For example, `My Private API`.
5. In the **Service Name*** field, enter a name. For example, `my-private-api`. This value cannot include spaces or special characters.
6. Click **Next**.
7. From the **Share To** setting, choose to share with the environment or a specific workspace.
8. Click **Create**. The new service's configuration page displays.
9. Click **E****dit**.
10. In the **Service protocol + host** field, enter the DNS name. This is the URL under **Private Link DNS Name** in PrivateLink Administration that you entered in the [Adding an Azure Private Link Service in PrivateLink Administration](/v1/docs/how-to-set-up-azure-private-link#adding-an-azure-private-link-service-in-privatelink-administration-in-unqork) section. For example, `my.private.link`.
11. Click **Save Changes**. The Services Administration page displays.
12. Navigate to the new API service.

## Configuring a Plug-In Component to Call Your Azure Private Link Service

Next, let’s look at how to use a [Plug-In](/v1/docs/plug-in-component) component to call your Azure Private Link service using an external API. You’ll also set up an Initializer component to trigger the Plug-In component.

> To learn more about configuring an external API call, view our [External APIs](/v1/docs/external-apis) article.

How you choose to execute the Plug-In component depends on your use case’s needs. Common approaches include:

- Using a [Button](/v1/docs/button-component) component to trigger the Plug-In component on button-click.
- Using an [Initializer](/v1/docs/initializer-component) component to trigger the Plug-In component on page-load. This is a common option when using a remote execute to trigger an API module.

### What You Need

For this configuration, you’ll need:

- 1 API module
- 1 [Initializer](/v1/docs/initializer-component) component
- 1 [Plug-In](/v1/docs/plug-in-component) component

### Configure the Plug-In Component

Configure a [Plug-In](/v1/docs/plug-in-component) component that makes the [external API](/v1/docs/external-apis) call that runs your Azure Private Link service.

1. In the Module Builder, drag and drop a Plug-In component onto the canvas.
2. In the Property ID field, enter **pluginAzure**.
3. In the Canvas Label Text field, enter `pluginAzure`.
4. From the **Service Type** drop-down, select **External**..
5. From the **External Services** drop-down, enter or select your Azure Private Link service .
6. Complete the **Data Source URL** value based on the Azure resource.
7. From the **Request Type** drop-down, select an API method. The **Request Type** is based on the action you're performing.
8. Complete the **Inputs** table.

> [!NOTE]
> Your inputs are based on your Azure resource.

> To learn more about configuring a Plug-In component’s Inputs table, view our [Plug-In component](/v1/docs/plug-in-component) article.
9. Click **Save Component**.

### Configure the Initializer Component

You'll configure this Initializer component to trigger the Plug-In component.

1. Drag and drop an **I****nitializer** component onto your canvas, placing it above your **pluginAzure** Plug-In component.
2. In the **Property ID** field, enter **initPlugin**.
3. In the **Canvas Label Text** field, enter `initPlugin`.
4. From the **Trigger Type** drop-down, select an API method.

> [!TIP]
> The appropriate Trigger Type varies based on your use case needs. To trigger the Initializer component on page-load, select `New Submission` or `Edit Submission`. New Submission triggers on page-load when no submission is present. Edit Submission triggers on page-load when a submission is present.
5. Complete the **Outputs** table as follows, using your Plug-In component's Property ID.

|  | Source | Type | Value |
| --- | --- | --- | --- |
| 1 | pluginAzure | Trigger | GO |
6. Click **Save Component**.
7. Save your module.

You've successfully created an Azure Private Link connection between Unqork and your Azure resource.

## Resources

- [Services Administration](/v1/docs/services-administration)
- [AWS PrivateLink Setup](/v1/docs/how-to-set-up-aws-privatelink)
- [External APIs](/v1/docs/external-apis)

A VNet, or Virtual Network, is a fundamental building block for creating private networks in Azure cloud. It allows you to define your own isolated network environment within Azure, providing a secure space for your cloud resources to operate. VNets enable resources like virtual machines to communicate with each other, the internet, and even on-premises networks.

A network load balancer (NLB) is a tool that distributes network traffic across multiple servers, ensuring high availability and preventing any single server from being overloaded.

APIs (application programming interfaces) are a set of protocols and definitions developers use to build and integrate application software. APIs act as the connective tissue between products and services.

A Property ID is the unique field ID used by Unqork to track and link components in your module.

Canvas Label Text indicates the purpose of the corresponding field or component. For non-input components, the Canvas Label Text isn't end-user facing, and only appears in the .