Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 19 additions & 13 deletions src/pages/docs/octopus-cloud/inbound-private-links.md
Original file line number Diff line number Diff line change
@@ -1,13 +1,15 @@
---
layout: src/layouts/Default.astro
pubDate: 2025-06-20
modDate: 2025-06-20
modDate: 2025-10-08
title: Azure Private Links
navOrder: 65
description: Guides users through the Azure Private Links feature, including how to access and configure it
---

Azure Private Links provide private connectivity from your virtual network to your Octopus Cloud instance.
## Inbound Azure Private Links

Inbound Azure Private Links provide private connectivity from your virtual network to your Octopus Cloud instance.
They simplify network architecture and secures the connection between endpoints in Azure by eliminating data exposure to the public Internet.

:::div{.hint}
Expand All @@ -16,13 +18,13 @@ They simplify network architecture and secures the connection between endpoints
Customers maintain configuration within their own network in order to use Azure Private Links. Octopus Deploy is not responsible for customer configuration. For issues with configuration, please contact Microsoft Support.
:::

## How to access this feature
### How to access this feature

Azure Private Links are available to Octopus Cloud customers on an Enterprise plan.
Inbound Azure Private Links are available to Octopus Cloud customers on an Enterprise plan.

If you would like to access this feature, please reach out to [our support team](mailto:support@octopus.com) so we can discuss how best to meet your private networking requirements.
If you would like to access this feature, please reach out to [our support team](https://octopus.com/support) so we can discuss how best to meet your private networking requirements.

## Configuring an Azure Private Endpoint
### Configuring an Azure Private Endpoint

Once you have the feature enabled for your account, you can start using your private link by getting your Azure Private Endpoint set up.
To do this, you'll need the following:
Expand Down Expand Up @@ -70,31 +72,35 @@ Retrieving this value can also be done through the Azure Portal by doing the fol
![A screenshot of a Private Endpoint's JSON View in the Azure Portal highlighting the ResourceGuid field](/docs/img/octopus-cloud/images/private-endpoint-json-resource-guid.png)
:::

With these details available, get in touch with [our support team](mailto:support@octopus.com) and ask that the Private Endpoint be approved.
With these details available, get in touch with [our support team](https://octopus.com/support) and ask that the Private Endpoint be approved.
Once approved, you will be able to begin accessing your Octopus Cloud instance using your new Azure Private Link Endpoint.

## Additional information
### Additional information

Configuring your Octopus Cloud instance to support Azure Private Links brings a higher degree of privacy and security to your networking.

Activating this feature introduces the following considerations:

### Static IP address change
#### Static IP address change

Depending on your requirements for Azure Private Links, we may need to change the IP address range your Octopus Cloud instance uses. This has an additional benefit of moving your instance to an exclusive set of IP addresses, rather than sharing an IP range with other customers.

### Dynamic workers
#### Dynamic workers

To avoid any possibility of unintentional access, Azure Private Links are not available on Dynamic Workers we provide to Octopus Cloud.

### Logged IP addresses
#### Logged IP addresses

When we configure your instance to allow access via Azure Private Links, client IP addresses displayed in internal logs will be replaced by the local IP addresses used by Azure’s Private Link Service. This ensures the IP address shown in your audit logs accurately identifies the Private Link Service infrastructure making the connection. Other information logged such as username, date, time, and action taken continues to be recorded for audit and verification purposes.

### Kubernetes cluster upgrades
#### Kubernetes cluster upgrades

As part of keeping your Octopus Cloud fully maintained, we upgrade the Kubernetes cluster your instance is hosted within approximately quarterly. To ensure minimal disruption during the Kubernetes cluster upgrade, for a few minutes, we will proxy the Private Link service traffic through a load balancer with an Azure public IP address. During this short period traffic does not leave Azure.

### Public access maintained
#### Public access maintained

Adding Azure Private Links makes it possible to privately and securely connect to your Octopus Cloud from your Azure virtual network without traversing the public internet. Access to your instance from the public internet is still permitted to ensure other use cases remain supported.

## Outbound Azure Private Links

Outbound Azure Private Links will provide private connectivity from your Octopus Cloud instance to your virtual network. This feature isn’t yet available. If you are interested in this feature, please indicate your interest and subscribe to progress updates via [our public roadmap](https://roadmap.octopus.com/c/231-outbound-azure-private-links-for-octopus-cloud).