Microsoft Previews Azure Private Link Over IPv6 for Azure PaaS Services
Organizations can connect Azure Storage, SQL Database, and other services through private IPv6 endpoints.
Key Takeaways:
- Azure Private Link over IPv6 enables private access to Azure PaaS services using IPv6 endpoints.
- The preview supports both Azure-native and ExpressRoute-connected hybrid environments.
- Azure Storage, Azure SQL, Key Vault, and Azure Data Explorer are among the supported services.
Microsoft has announced the public preview of Azure Private Link over IPv6, expanding private connectivity options for organizations adopting IPv6. The new capability allows customers to securely connect to Azure Platform-as-a-Service (PaaS) resources via private IPv6 endpoints, reducing their reliance on IPv4-based connectivity.
According to Microsoft, many organizations are increasingly adopting IPv6 networks, but Azure Private Link has historically been centered on IPv4 connectivity. This creates difficulties for enterprises that want to maintain end-to-end private IPv6 communication between on-premises environments, Azure virtual networks, and Azure PaaS services without relying on public internet access or implementing complex workarounds.
Azure Private Link over IPv6 allows organizations to securely connect to Azure PaaS services using private IPv6 endpoints, which eliminates the need to route traffic over the public internet. The new capability also supports businesses that are expanding IPv6 adoption across their on-premises and cloud environments. It enables consistent, private, and secure connectivity to Azure services while helping modernize network infrastructure.
“Azure Private Link over IPv6 enables you to privately access Azure PaaS services, such as Azure Storage and Azure SQL Database, over IPv6-based connectivity. You use IPv6 private endpoints to connect from IPv6 clients in an Azure virtual network or from on-premises networks over ExpressRoute,” Microsoft explained.
Native and hybrid IPv6 connectivity scenarios
The public preview supports two key deployment scenarios. The first is native Azure connectivity, where IPv6-enabled virtual machines within Azure access PaaS services through IPv6 private endpoints, which allows traffic to remain on Microsoft’s private network. The second is a hybrid connectivity model, which enables IPv6 clients in on-premises environments to securely reach Azure services through ExpressRoute and supporting Azure networking components. It creates a seamless private connection between on-premises infrastructure and Azure resources.
The feature is currently available only in selected Azure regions, including West Central US, East Asia, UK South, Central US, and North Europe. This public preview supports various services such as Azure Storage, Azure SQL, Azure Key Vault, and Azure Data Explorer.
Deployment requirements for IPv6 private endpoints
To use this feature, administrators must register their Azure subscription for the preview and deploy a dual-stack virtual network that supports both IPv4 and IPv6. They will also need to configure IPv6-enabled private endpoints and set up appropriate DNS configurations so service names resolve to private IPv6 addresses.
For on-premises connectivity through ExpressRoute, Microsoft recommends using a Virtual Network Routing Appliance (VNRA) along with user-defined routing. This architecture forwards IPv6 traffic from on-premises networks to the target private endpoints hosted in Azure.
Rabia has a master's degree in Software Engineering and she has years of experience writing professionally about Microsoft products and other technologies. Rabia has also written for OnMSFT.com as well as Windows Report. She is always up to date on t...
