Private endpoints for Azure Arc-enabled servers enable you to manage your Windows and Linux servers from Azure without sending network traffic over the public internet for enhanced security. Servers can be configured to use a private endpoint by associating them with an Azure Arc Private Link Scope and connecting your on-premises network to an Azure virtual network using a site-to-site VPN or Express Route.
Learn more in our documentation Use Azure Private Link to securely connect servers to Azure Arc and get hands-on experience in a sandbox environment with the Azure Arc Jumpstart.