Private endpoint 从本质上来说是Azure 服务在Azure 虚拟网络中安插的一张带私有地址的网卡。
举例来说如果Storage account在没有绑定private endpoint之前,查询Storage account的DNS记录会是如下情况:
Seq Name Type Record Value
1 HOSTNAME.blob.core.windows.net CNAME blob.sn1prdstr01a.store.core.windows.net
2 blob.sn1prdstr01a.store.core.windows.net HOST (A) 20.38.104.164
首先, HOSTNAME.blob.core.windows.net 会被解析到CNAME blob.sn1prdstr01a.store.core.windows.net。
然后, blob.sn1prdstr01a.store.core.windows.net 会被解析到公网地址 20.38.104.164。
那么,当Storage account绑定了private endpoint之后,从公网的Storage account DNS记录解析顺序会变成如下情况:
Seq Name Type Record Value
1 HOSTNAME.blob.core.windows.net CNAME HOSTNAME.privatelink.blob.core.windows.net
2