What’s the Best Way to Connect to a Private AKS Cluster?

I'm currently using Azure Virtual Desktop along with a small VM in the hub. This setup lets me access tools like MobaXterm and PowerShell securely without any firewall openings since I have MFA and Azure AD in place. It's worked great for me!

I highly recommend setting up WireGuard on a VM using Opnsense. It's been a fantastic and inexpensive solution for securely accessing Azure’s private subnets. I’ve been using it for over two years now and have had a smooth experience with easy administration and regular secure updates.

Each option has its own pros and cons. It really boils down to your specific needs like security, uptime, and how many users will be connecting. Are you targeting human users, other servers, or machines? Is it a single connection or do you expect multiple users? Understanding these factors can really help narrow down the best choice.