{"id":486,"date":"2023-06-22T13:29:16","date_gmt":"2023-06-22T13:29:16","guid":{"rendered":"https:\/\/virtualall.sk.website.tuke.sk\/?p=486"},"modified":"2026-09-11T14:45:43","modified_gmt":"2026-09-11T14:45:43","slug":"azure-privatelink-to-point-to-site-vpn","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2023\/06\/azure-privatelink-to-point-to-site-vpn\/","title":{"rendered":"Azure Private Link VPN"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Azure VPN Gateway je slu\u017eba, ktor\u00e1 umo\u017e\u0148uje \u0161ifrovan\u00fa komunik\u00e1ciu medzi virtu\u00e1lnou sie\u0165ou Azure a lok\u00e1ciami mimo Azure cez verejn\u00fd internet. T\u00e1to slu\u017eba umo\u017e\u0148uje aj komunik\u00e1ciu medzi r\u00f4znymi virtu\u00e1lnymi sie\u0165ami Azure cez sie\u0165 Microsoft. VPN Gateway umo\u017e\u0148uje vytv\u00e1ranie viacer\u00fdch pripojen\u00ed, pri\u010dom v\u0161etky VPN tunely zdie\u013eaj\u00fa dostupn\u00fa \u0161\u00edrku p\u00e1sma br\u00e1ny.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">K<strong>\u013e\u00fa\u010dov\u00e9 Inform\u00e1cie:<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VPN Gateway je typ virtu\u00e1lnej siete, ktor\u00fd sa sklad\u00e1 z dvoch alebo viacer\u00fdch VM spravovan\u00fdch Azure, ktor\u00e9 s\u00fa automaticky konfigurovan\u00e9 a nasaden\u00e9 do \u0161pecifick\u00e9ho subnetu zvan\u00e9ho GatewaySubnet.<\/li>\n\n\n\n<li>M\u00f4\u017eete vytvori\u0165 r\u00f4zne typy VPN pripojen\u00ed, ako s\u00fa Point-to-Site, Site-to-Site a VNet-to-VNet, ka\u017ed\u00fd s r\u00f4znymi in\u0161trukciami a konfigura\u010dn\u00fdmi po\u017eiadavkami.<\/li>\n\n\n\n<li>VPN Gateway podporuje r\u00f4zne protokoly, ako s\u00fa Secure Sockets Tunneling Protocol (SSTP), OpenVPN a IPsec.<\/li>\n\n\n\n<li>M\u00f4\u017eete vybra\u0165 r\u00f4zne SKU br\u00e1ny pri vytv\u00e1ran\u00ed virtu\u00e1lnej siete, ktor\u00e9 sp\u013a\u0148aj\u00fa va\u0161e po\u017eiadavky na typy pracovn\u00fdch za\u0165a\u017een\u00ed, priepustnos\u0165, funkcie a SLA.<\/li>\n\n\n\n<li>Cena VPN Gateway z\u00e1vis\u00ed od hodinov\u00fdch v\u00fdpo\u010dtov\u00fdch n\u00e1kladov pre virtu\u00e1lnu sie\u0165ov\u00fa br\u00e1nu a od n\u00e1kladov na odch\u00e1dzaj\u00faci d\u00e1tov\u00fd prenos z virtu\u00e1lnej sie\u0165ovej br\u00e1ny.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u010co je Azure Private Link? <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Private Link umo\u017e\u0148uje pr\u00edstup k slu\u017eb\u00e1m Azure PaaS (napr. Azure Storage a SQL Database) a k slu\u017eb\u00e1m vlastnen\u00fdm z\u00e1kazn\u00edkom\/hosten\u00fdm partnermi cez s\u00fakromn\u00fd koncov\u00fd bod vo va\u0161ej virtu\u00e1lnej sieti. Doprava medzi va\u0161ou virtu\u00e1lnou sie\u0165ou a slu\u017ebou prebieha cez sie\u0165 Microsoft backbone, tak\u017ee nie je potrebn\u00e9 vystavova\u0165 va\u0161u slu\u017ebu verejn\u00e9mu internetu. M\u00f4\u017eete vytvori\u0165 vlastn\u00fa slu\u017ebu Private Link vo va\u0161ej virtu\u00e1lnej sieti a poskytn\u00fa\u0165 ju svojim z\u00e1kazn\u00edkom.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>K\u013e\u00fa\u010dov\u00e9 V\u00fdhody:<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>S\u00fakromn\u00fd Pr\u00edstup k Slu\u017eb\u00e1m:<\/strong> Pripojte svoju virtu\u00e1lnu sie\u0165 pomocou s\u00fakromn\u00fdch koncov\u00fdch bodov ku v\u0161etk\u00fdm slu\u017eb\u00e1m, ktor\u00e9 m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 ako komponenty aplik\u00e1cie v Azure.<\/li>\n\n\n\n<li><strong>Ochrana pred \u00danikom D\u00e1t:<\/strong> S\u00fakromn\u00fd koncov\u00fd bod je mapovan\u00fd na in\u0161tanciu slu\u017eby PaaS namiesto celej slu\u017eby, \u010do poskytuje ochranu pred rizikami \u00faniku d\u00e1t.<\/li>\n\n\n\n<li><strong>Glob\u00e1lny Dosah:<\/strong> S\u00fakromne sa pripojte k slu\u017eb\u00e1m be\u017eiacim v in\u00fdch regi\u00f3noch.<\/li>\n\n\n\n<li><strong>Dostupnos\u0165 a Monitorovanie:<\/strong> Integrovan\u00e9 s Azure Monitor a dostupn\u00e9 slu\u017eby s\u00fa uveden\u00e9 na str\u00e1nke dostupnosti Azure Private Link.<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Potrebn\u00e9 bloky azure infra\u0161trukt\u00fary:<\/strong><\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li>VPN server<\/li>\n\n\n\n<li>DNS server<\/li>\n\n\n\n<li>Vnet<\/li>\n\n\n\n<li>WEB server alebo in\u00e1 slu\u017eba<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"773\" height=\"386\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2023\/09\/azure-vpn-server.png\" alt=\"Potrebn\u00e9 bloky azure infra\u0161trukt\u00fary:\" class=\"wp-image-509\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2023\/09\/azure-vpn-server.png 773w, https:\/\/virtualall.sk\/wp-content\/uploads\/2023\/09\/azure-vpn-server-300x150.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2023\/09\/azure-vpn-server-768x384.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2023\/09\/azure-vpn-server-18x9.png 18w\" sizes=\"auto, (max-width: 773px) 100vw, 773px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Manu\u00e1l na in\u0161tal\u00e1ciu VPN servera:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-vlozit wp-block-embed-vlozit\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"h3zQF3jzOQ\"><a href=\"https:\/\/virtualall.sk\/2023\/04\/azure-1-vpn-endpoint-to-site\/\">Azure Point-to-Site VPN<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Azure Point-to-Site VPN&#8221; &#8212; \" src=\"https:\/\/virtualall.sk\/2023\/04\/azure-1-vpn-endpoint-to-site\/embed\/#?secret=qhr8OUZwjA#?secret=h3zQF3jzOQ\" data-secret=\"h3zQF3jzOQ\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Azure VPN umo\u017e\u0148uje konfigur\u00e1ciu volite\u013en\u00fdch nastaven\u00ed pre klienta VPN pre P2S (Point-to-Site) pripojenia. M\u00f4\u017eete konfigurova\u0165 DNS pr\u00edpony, vlastn\u00e9 DNS servery, vlastn\u00e9 trasy a vyn\u00faten\u00e9 tunelovanie na strane klienta VPN.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>K\u013e\u00fa\u010dov\u00e9 Inform\u00e1cie:<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>DNS:<\/strong> M\u00f4\u017eete prida\u0165 DNS pr\u00edpony a vlastn\u00e9 DNS servery, modifikovan\u00edm stiahnut\u00e9ho profilov\u00e9ho XML s\u00faboru a pridan\u00edm pr\u00edslu\u0161n\u00fdch tagov.<\/li>\n\n\n\n<li><strong>Smerovanie:<\/strong> Je mo\u017en\u00e9 konfigurova\u0165 split tunelovanie (predvolen\u00e9 pre klienta VPN) a vyn\u00faten\u00e9 tunelovanie, aby sa v\u0161etka prem\u00e1vka smerovala do VPN tunela.<\/li>\n\n\n\n<li><strong>Vyn\u00faten\u00e9 Tunelovanie:<\/strong> M\u00f4\u017ee by\u0165 konfigurovan\u00e9 bu\u010f reklamovan\u00edm vlastn\u00fdch tr\u00e1s.<\/li>\n\n\n\n<li><strong>Vlastn\u00e9 Trasy:<\/strong> M\u00f4\u017eete prida\u0165 vlastn\u00e9 trasy modifikovan\u00edm stiahnut\u00e9ho profilov\u00e9ho XML s\u00faboru a pridan\u00edm pr\u00edslu\u0161n\u00fdch tagov.<\/li>\n\n\n\n<li><strong>Blokova\u0165 Trasy:<\/strong> Klient Azure VPN nepodporuje \u00fapln\u00e9 blokovanie tr\u00e1s, ale m\u00f4\u017eete vyl\u00fa\u010di\u0165 trasy z VPN rozhrania modifikovan\u00edm stiahnut\u00e9ho profilov\u00e9ho XML s\u00faboru.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Pre dosiahnutie pr\u00edstupu na lok\u00e1lne slu\u017eby dostupn\u00e9 iba z privatn\u00fdch sieti je potrebn\u00e9 zadefinova\u0165 DNS server, ktor\u00fd zabezpe\u010d\u00ed prelo\u017eenie z\u00e1znamov z verejn\u00fdch IP subnetov na lok\u00e1lne IP adresy ktor\u00e9 s\u00fa pridelovan\u00e9 danej slu\u017ebe. Pre toto nastavenie je potrebn\u00e9 v pr\u00edslu\u0161nom s\u00fabore, ktor\u00fd nastavuje VPN server pozmenit nastavenie DNS servera. Teda je potrebn\u00e9 udat IP adresu DNS servera, ktor\u00fd zabezpe\u010duje preklad dom\u00e9nov\u00fdch n\u00e1zvov na ich IP adresy.  Po modifikovan\u00ed t\u00fdchto z\u00e1znamov je potrebn\u00e9 dan\u00fd profil z nastavenia klienta vymaza\u0165 a nanovo importova\u0165.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>  &lt;clientconfig&gt;\n   &lt;dnsservers&gt;\n      &lt;dnsserver&gt;10.1.254.4&lt;\/dnsserver&gt;\n   &lt;\/dnsservers&gt;\n  &lt;\/clientconfig&gt;<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">S\u00favisiace n\u00e1vody<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/virtualall.sk\/2023\/04\/azure-1-vpn-endpoint-to-site\/\">Azure Point-to-Site VPN<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2024\/05\/virtual-wan-vpn-server\/\">Virtual WAN VPN Server<\/a><\/li>\n\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Azure VPN Gateway je slu\u017eba, ktor\u00e1 umo\u017e\u0148uje \u0161ifrovan\u00fa komunik\u00e1ciu medzi virtu\u00e1lnou sie\u0165ou Azure a lok\u00e1ciami mimo Azure cez verejn\u00fd internet. T\u00e1to slu\u017eba umo\u017e\u0148uje aj komunik\u00e1ciu medzi r\u00f4znymi virtu\u00e1lnymi sie\u0165ami Azure cez sie\u0165 Microsoft. VPN Gateway umo\u017e\u0148uje vytv\u00e1ranie viacer\u00fdch pripojen\u00ed, pri\u010dom v\u0161etky VPN tunely zdie\u013eaj\u00fa dostupn\u00fa \u0161\u00edrku p\u00e1sma br\u00e1ny. K\u013e\u00fa\u010dov\u00e9 Inform\u00e1cie: \u010co je Azure Private Link?&#8230;<\/p>\n<p class=\"more-link-wrap\"><a href=\"https:\/\/virtualall.sk\/en\/2023\/06\/azure-privatelink-to-point-to-site-vpn\/\" class=\"more-link\">Read More<span class=\"screen-reader-text\"> &ldquo;Azure Private Link VPN&rdquo;<\/span> &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[86],"tags":[87,94,91],"class_list":["post-486","post","type-post","status-publish","format-standard","hentry","category-azure","tag-azure","tag-azure-dns","tag-azure-vpn"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=486"}],"version-history":[{"count":15,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/486\/revisions"}],"predecessor-version":[{"id":2457,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/486\/revisions\/2457"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}