UiPath Documentation
test-cloud
latest
false

Test Cloud admin guide

Connecting to UiPath using private link

Use Azure Private Link to route traffic from your Azure Virtual Network (VNet) to Automation Cloud services through a private network path, keeping traffic off the public internet. This configuration is ideal when your organization requires network isolation for traffic originating from your Azure environment. The connection to cloud.uipath.com stays on a private network path through your private endpoint, though other UiPath subdomains may still resolve to public IP addresses depending on your DNS configuration.

Important:

Azure Private Link is currently available in the Europe region only. Support for additional regions will be announced as the rollout expands.

Traffic flow

Traffic follows this path:

  1. Client devices or VMs (for example, Robots, Task Mining devices, browsers)
  2. Customer VNet
  3. Customer private endpoint
  4. UiPath regional gateway (private connectivity entry point)
  5. UiPath backend services

Available regions

When you create the private endpoint, connect to the correct regional gateway:

LocationRegionResource IDSubresource
EuropeWest Europe (Primary)/subscriptions/05f74eb7-7054-4e72-a744-2ce5d7180bd7/resourceGroups/plt-prd-gate-we-01-g-rg/providers/Microsoft.Network/applicationGateways/plt-prd-gate-we-01-g-appgwplt-prd-gate-we-01-g-appgw-fip-config1
EuropeNorth Europe (Secondary)/subscriptions/05f74eb7-7054-4e72-a744-2ce5d7180bd7/resourceGroups/plt-prd-gate-ne-01-g-rg/providers/Microsoft.Network/applicationGateways/plt-prd-gate-ne-01-g-appgwplt-prd-gate-ne-01-g-appgw-fip-config1

High availability and disaster recovery (HADR)

If you use two data centers, create a private endpoint for each region:

  • Connect your primary data center to the West Europe gateway.
  • Connect your secondary data center to the North Europe gateway.

Failover handling

UiPath does not automatically update which private endpoint is used if an application gateway experiences issues. Creating two private endpoints upfront makes it easier to switch between primary and failover configurations — the only change required is updating the cloud.uipath.com DNS record to the IP address allocated to the respective private endpoint.

Note:

Setting a low TTL (for example, 60 seconds) for the cloud.uipath.com DNS record minimizes disruption during failover.

Was this page helpful?

Connect

Need help? Support

Want to learn? UiPath Academy

Have questions? UiPath Forum

Stay updated