Question

Your company operates a SaaS platform behind an Azure Standard internal Load Balancer. You publish it through a Private Link service so that customer tenants can connect via private endpoints. As the number of customer connections grows, some new private endpoint connections begin to fail while existing ones remain healthy. You confirm the Private Link service is configured with a single subnet for NAT IP allocation. What is the most likely cause and the correct remediation?

Accepted Answer

The NAT subnet has exhausted its available private IP addresses; add additional subnets or a larger subnet to the Private Link service NAT IP configuration to provide more SNAT capacity.

Answer

The Private Link service has reached its hard limit of 8 private endpoint connections; deploy a second Private Link service to serve additional consumers.

Answer

The internal Load Balancer must be upgraded to a cross-region Load Balancer to support more than 100 private endpoint connections.

Answer

Auto-approval is disabled, so connections beyond the approved list are rejected; enable auto-approval for all subscriptions.