Azure PrivateLink Setup

groundcover's BYOC comes with VPC service endpoint (PrivateLink) built in. The PrivateLink endpoint lets you ingest data through private network and reduce data transfer costs.

Setup PrivateLink connection

• Create private endpoint on your network pointing the new private link service

• Create private DNS zone <backend endpoint> with a record to the private endpoint IP

• Link the private DNS to the same vNet as the private endpoint

Troubleshooting

Open shell on the monitored workload on the same VPC

Use nslookup to determine if DNS configured correctly, if the endpoint returns IPs that are not from your VPC CIDRs, double check the DNS configuration

• nslookup <groundcover backend endpoint>

Use netcat to test the security groups configured correctly, if you get timeout to the VPC endpoint double check the inboud rules on the VPC endpoint and the outbound rule on the workload security groups

• nc -vz <groundcover backend endpoint> 443