Manage relay service endpoints through Reverse Tunnel

Add or update the service endpoints assigned to a private relay to control which data sources are accessible through Reverse Tunnel.

Before you begin

The private relay must be deployed, registered, and connected. The registration status in the Relay [sn_zc_tunnel_relay] table must be Successful.

Role required: sn_zc_tunnel.relay_manager

Service endpoints specify the hostname and port of each data source routed through the relay.

Navigate to All > Private Relay > Relays.
Open the relay record.
In the relay record, select Unlock Services to unlock the Services field.
Select Lookup using list to open the Service Endpoints list.
Select New.
Enter a name for the service endpoint and the FQDN and port number of the data source.

For example: acme.snowflakecomputing.com:443.

When creating a Zero Copy Connectors connection, the connection URL hostname must exactly match the fully qualified domain name (FQDN) registered as a service endpoint.
Select Submit.
Save the relay record.

The new service endpoint is reported to the gateway, which routes incoming traffic from Zero Copy Connectors to the correct relay.

If the backend data source has an IP allowlist restriction, verify that the relay is running on a machine whose IP address is on the allowlist.