Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
App service traffic is not flowing to Keyvault through private endpoint
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 68%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Nikita
20
Reputation points
Hi team,
We have an Azure Keyvault and App service which accesses the keyvault.
We have:
- Created a VNET
- Created private endpoint to the KV
- Connected App service to the VNET
Expectation: App service traffic should flow through private endpoint
Current status: App service traffic is not flowing through private endpoint
KV still has public access allowed since we want to first test connectivity without any downtime.
For the same setup with Azure cosmos db, we are seeing traffic is flowing through private endpoint as expected.
Can you please help check what might be going wrong here?
Azure Private Link
-
TP 156.1K Reputation points Volunteer Moderator2026-05-06T12:48:09.81+00:00 Hi Nikita,
Please check if your web app is resolving FQDN of your key vault to private endpoint IP. For example, for Linux app service you would use Development tools -- SSH to connect, then run command similar to below:
nslookup mykeyvault.vault.azure.netFor windows app service you would use Development tools -- Console, then run command similar to below:
nameresolver mykeyvault.vault.azure.netIf it doesn't resolve to private IP, please confirm you have private dns zone configured properly for the private endpoint and linked to the VNet.
Thanks.
-TP
Sign in to comment
Sign in to answer