# Azure PrivateLink Setup groundcover's BYOC comes with VPC service endpoint (PrivateLink) built in.\ The PrivateLink endpoint lets you ingest data through private network and reduce data transfer costs. ## Setup PrivateLink connection * Create private endpoint on your network pointing the new private link service * Create private DNS zone `` with a record to the private endpoint IP * Link the private DNS to the same vNet as the private endpoint ## Troubleshooting Open shell on the monitored workload on the same VPC Use nslookup to determine if DNS configured correctly, if the endpoint returns IPs that are not from your VPC CIDRs, double check the DNS configuration * `nslookup ` Use netcat to test the security groups configured correctly, if you get timeout to the VPC endpoint double check the inboud rules on the VPC endpoint and the outbound rule on the workload security groups * `nc -vz 443` --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.groundcover.com/architecture/byoc/setup-byoc-with-azure/azure-privatelink-setup.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.