Question

Your company hosts a multi-tier application behind a Standard internal Load Balancer in a VNet. You want to offer this application privately to several customer Azure tenants using Azure Private Link Service so that consumers connect via private endpoints without VNet peering. During setup, you must specify a NAT IP configuration for the Private Link service. What is the primary purpose of the NAT subnet you designate for the Private Link service?

Accepted Answer

It provides source NAT for consumer traffic so that connections from private endpoints appear to originate from IPs in that subnet, avoiding IP overlap with consumer VNets

Answer

It hosts the private endpoint network interfaces created in the provider VNet for each consumer connection

Answer

It is used to assign public IP addresses to the Private Link service frontend for internet-facing access

Answer

It stores the private DNS zone records that resolve the Private Link service alias for consumers