Issue Creating Private Endpoint with Azure Application Gateway's Private Link Enabled

suraj solanki 0 Reputation points
2025-01-28T13:34:55.8033333+00:00

Hello Azure Community,

We are facing an issue while creating a private endpoint in Azure, and we need some assistance to resolve this.

Scenario:

  • We have created an Azure Application Gateway with the private link feature enabled.
  • Now, we are trying to create a private endpoint in another subscription.
  • During the private endpoint setup, we provided the following reference details for the Application Gateway:
    • Resource Reference: /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.Network/applicationGateways/<application-gateway>/private-link-gateway
      • Sub-resource: The private IP configuration name.
      • We also specified a private subnet during the creation of the private endpoint.

Issue:

  • After a few seconds, the private endpoint creation fails with the following error message: "An error occurred. Failed to create remote connection for private endpoint /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.Network/privateEndpoints/<private-endpoint-name> (Code: InternalServerError)."

We are unsure of what might be causing this issue. Could it be related to permissions, misconfigurations, or a known bug?

Request:

  • Could you please help us understand why this might be failing?
  • Are there any specific troubleshooting steps we can follow to identify the root cause?

Thank you in advance for your guidance!Hello Azure Community,

We are facing an issue while creating a private endpoint in Azure, and we need some assistance to resolve this.

Scenario:

  • We have created an Azure Application Gateway with the private link feature enabled.
  • Now, we are trying to create a private endpoint in another subscription.
  • During the private endpoint setup, we provided the following reference details for the Application Gateway:
    • Resource Reference:
      /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.Network/applicationGateways/<application-gateway>/private-link-gateway
      • Sub-resource:
        The private IP configuration name.
      • We also specified a private subnet during the creation of the private endpoint.

Issue:

  • After a few seconds, the private endpoint creation fails with the following error message:
    "An error occurred. Failed to create remote connection for private endpoint /subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.Network/privateEndpoints/<private-endpoint-name> (Code: InternalServerError)."

We are unsure of what might be causing this issue. Could it be related to permissions, misconfigurations, or a known bug?

Request:

  • Could you please help us understand why this might be failing?
  • Are there any specific troubleshooting steps we can follow to identify the root cause?

Thank you in advance for your guidance!

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,613 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,120 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
530 questions
Azure Load Balancer
Azure Load Balancer
An Azure service that delivers high availability and network performance to applications.
470 questions
Microsoft Entra Private Access
Microsoft Entra Private Access
Microsoft Entra Private Access provides secure and deep identity-aware, Zero Trust network access to all private apps and resources.
80 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.