
Storing credentials within Data Factory means they are always stored and encrypted on the Self-hosted IR machine. On-premise data store credentials can either be stored within Data Factory or be referenced by Data Factory via Key Vault at runtime. An ADF pipeline run sends commands to the Azure SSIS IR which executes the SSIS Packages.Īre Integration Runtimes Secure? Data Store Credentials You can natively execute SSIS Packages by creating an Azure-SSIS Integration Runtime which creates an Integration Services Catalog in Azure SQL Database where the packages are stored.For that you need to install a Self-hosted IR behind your corporate firewall in your on prem environment. You can also perform data integration securely in an on prem environment.The self-hosted integration runtime only makes outbound HTTP-based connections to open internet. For that you need to install a self-hosted IR inside your virtual private network. You can perform data integration securely in a private network environment, shielded from the public cloud environment.Azure automatically provisions an integration Runtime which can connect to Azure resources (Azure SQL, Azure Synapse Analytics, Storage Accounts) without any issues.The IR can access resources in both public and private networks. As a result, all the patching, scaling and maintenance is taken care of. The IR can access resources in both public and private networks.Īzure-SSIS Integration Runtimes are VMs running the SSIS engine which allow you to natively execute SSIS packages. You’ll need to address all the patching, scaling and maintenance.

Self-hosted Integration Runtimes use infrastructure and hardware managed by you. The IR can only access data stores and services in public networks. All the patching, scaling and maintenance of the underlying infrastructure is taken care of. Integration Runtimes are specified in each Linked Service, under Connections.Īzure Integration Runtime is managed by Microsoft. It has access to resources in either public networks, or hybrid scenarios (public and private networks). An Integration Runtime (IR) is the compute infrastructure used by Azure Data Factory to provide data integration capabilities such as Data Flows and Data Movement.
