All Questions

Filter by
Sorted by
Tagged with
12 votes
5 answers
12k views

How to change VNet and Subnet of an existing Azure Application Gateway?

Is it possible to move an already setup app gateway from one subnet to another? As of now haven't seen any way from the portal to do so.
Anuj Shankar's user avatar
7 votes
4 answers
11k views

Azure WebApp Static Outbound IP

I am trying to solve a problem. I have to access APIs that are hosted on my on premises server (on-prem) from Azure hosted Web API. The problem is that my on-prem server only allows white listed IPs....
Shabir jan's user avatar
  • 2,357
4 votes
2 answers
6k views

Azure network security group and Application Gateway

I have the next azure setup: Application gateway balancer with it's own vnet . Two vms in Application gateway backend pool which have their own vnet and a network security group applied to the vms. ...
Claudiu's user avatar
  • 227
4 votes
1 answer
4k views

Azure App Service with WAF

I'm looking for some Azure security best practice advice. I've seen some articles around on how to do it, but not if its necessarily required. I have a customer who would like to move to Azure and ...
ColinRobertson's user avatar
4 votes
2 answers
2k views

Azure Multiple Public IPs on a Virtual Machine Scale Set with Resource Manager

We try to migrate our Platform from classical IIS hosting to a service fabric micro service architecture. So fare we learned that a service fabric lives in a virtual machine scale set and uses Load ...
Serge's user avatar
  • 276
3 votes
3 answers
5k views

Configure WAF Application Gateway in front of App Services [closed]

I have a VNET with two App Services and one Windows VM in Azure. They are in the same VNET using VPN point-to-site. I want to protect this environment with a WAF and have read that I can use ...
asgautm's user avatar
  • 49
3 votes
2 answers
2k views

Can't Access Azure Application Gateway through peered VNET

I have two peered VNETs in Azure and I also have an Application Gateway in one of them. I have a couple VMs inside both VNETs and I want to access the Application Gateway from the VMs by its private ...
roast's user avatar
  • 129
2 votes
1 answer
2k views

Azure Load Balancing Solution - Application Gateway or Azure Load Balancer

Note: I'm still in learning phase. Question: For the scenario described below, in the Load Balancing Settings for the two VMs for the FrontEnd subnet should I choose Application Gateway or Azure Load ...
nam's user avatar
  • 23k
2 votes
1 answer
3k views

Denylist client IP in Azure Application Gateway

We are using Azure Application Gateway for our site, and we are getting few people scraping our site. We want to block their IP at gateway level, as we don't want to configure the same blocks in every ...
Adrià Navarro Redó's user avatar
2 votes
1 answer
2k views

Understanding Outbound Data Transfer for Azure App Service Plan

For the purpose of migrating a very small business web application from on-premise to Azure PAAS service environment, We have identified the below tentative solution.. Use Azure Storage Account to ...
anuu_online's user avatar
1 vote
1 answer
1k views

Error in adding subnet while creating WAFV2 application gateway in azure

While adding subnet for creating a WAFV2 application gateway in azure, I tried to use the subnet used in WAFV1 gateway. But it is showing an error "Subnet does not support application gateway ...
NVJ's user avatar
  • 39
1 vote
1 answer
525 views

Digital Certificate CN Name and Hostname in App Service Listener

I am using a Digital Certificate and storing it in a KV. I have a front end web app behind a private endpoint. I want to associate a friendly name to the web app and use that name with an App Gateway, ...
Pallab's user avatar
  • 2,099
1 vote
1 answer
5k views

How to use azure application gateway for outbound traffic of a vnet

I am looking for a way to expose a virtual networks (VNET) outbound IP in Azure to use a static outbound IP without attaching a public facing network interface directly to a specific Virtual Machine ...
jens's user avatar
  • 534
1 vote
1 answer
2k views

Azure private DNS zone resolving

We have a private DNS zone setup for the zone project.local. For app service instances living in an app service environment, each service has its own record pointing to the load balancer in front of ...
Jasper's user avatar
  • 1,747
1 vote
1 answer
2k views

Integrating an Azure web app and Azure OpenAI with a virtual network

I'm trying to secure my Azure OpenAI web app as much as possible, but I can't figure out how to keep traffic behind the application gateway inside my virtual network. Here's what I have so far: ...
edo's user avatar
  • 1,809
1 vote
1 answer
902 views

Azure Application Gateway redirects http instead of https for backend redirections

I have a blazor app that redirects to the login page using 302 redirection. If open it from the local network, it returns in http headers: Status Code: 302 http://myvm/Identity/Account/Login?returnUrl=...
kokokok's user avatar
  • 1,050
1 vote
1 answer
2k views

Azure Application Gateway API Management probe cannot connect to back end

I hope somebody can help to understand what I am doing wrong here because I am totally confused and lost. I am trying to build an API Management in internal mode, and have in front of it a application ...
Nayden Van's user avatar
  • 1,357
1 vote
1 answer
2k views

Why Azure recommend not to deploy azure application gateway in hub network

As a best practice of Azure Networking: Don't deploy Layer-7 inbound NVAs, such as Azure Application Gateway, as a shared service in the central-hub virtual network. Instead, deploy them together with ...
ccshih's user avatar
  • 1,210
1 vote
1 answer
784 views

Azure: Add existing Virtual Machines to new Application Gateway in same region

We already have created two virtual machines in the North Europe region. Now, I want to add these two machines in Application Gateway, but as per Azure documents while creating an Application gateway ...
Abhaya Ghatkar's user avatar
0 votes
1 answer
1k views

Azure Container Group behind application gateway with public IP

I have an application gateway with frontend public IP address, connected to a VNET via its subnet and using a single backend pool that points to a container group in the same VNET but different subnet....
Mirek's user avatar
  • 4,305
0 votes
1 answer
5k views

Azure Application Gateway : 502 error

I am trying to figure out 502 error on my application gateway. My VM is configured to use https and I am able to connect to it directly but when the same is connected through app gateway I am getting ...
BlindSniper's user avatar
  • 1,771
0 votes
2 answers
3k views

Configure active-passive web app server in Azure

I have an application which I need to set up in active-passive mode behind the load balancer such that all connections should go to the active instance. If the active instance go down, it should start ...
Ani's user avatar
  • 463
0 votes
1 answer
197 views

Azure Web Application Gate (w/WAF) public IP opening/redirecting Azure App Services on port 80 instead of actual Web App

I have a App Gateway WAF V2 configured for both public and private IP for my Azure Web Application (this uses Azure AD Authentication to access also), when I try to access the Web App through the App ...
Metel Stairs's user avatar
0 votes
1 answer
1k views

Not able to access the container app via UI:Azure

I created the Container App where i would like to access from its website using host url My container app into the vnet and it is having specific resource groups and and it contains specific NSG ...
mohan's user avatar
  • 11
0 votes
1 answer
2k views

How to check is subnet allocated with another resource in azure using Fluent API or management API?

I am creating Application gateway using ARM templete now I want to check after select the virtual network subnet should not be allocated any other resource if allocated then show the message like ...
DnyaneshSurya's user avatar
0 votes
1 answer
779 views

Need to authenticate azure function app against Azure AD with configured application gateway

I Have configured a azure function app with authentication enabled to Azure Ad and placed behind the application gateway. Now this function app should be access only through application gateway public ...
satish's user avatar
  • 61
0 votes
4 answers
675 views

Is there a way to put a Public LB in front of Application Gateay?

I want to use an Azure Application Gateway with a static IP address. Since Application Gateway doesn't support public IP, I thought I'd try using a private Application Gateway and putting a public LB ...
null_pointer's user avatar
  • 1,819
0 votes
0 answers
4 views

When to use Azure Network interfaces' application_gateway_backend_address_pools

I went through Azure documentation on Application gateway & network interfaces but couldn't find information about when to use application_gateway_backend_address_pools I have a usecase where I ...
ArigatoManga's user avatar
0 votes
1 answer
38 views

Ask about IP address exhaustion

I am using openVPN with azure vpn P2S. I would like to ask about IP address exhaustion. The configuration of azure vpn is set up as follows. I would like to use about 5000 for ip address usage. In ...
Fuma Kimishima's user avatar
0 votes
1 answer
1k views

How to access the Application gateway standard v2 ip in private using azure virtual network gateway?

I need to host my application to limited trusted audience. I'm using application gateway standard v2 as my load balancer. I want to provide access to the application gateway those who are connected to ...
Debugger's user avatar
  • 732
0 votes
1 answer
258 views

Azure switch application gateway by frontdoor because bandwidth is not enough is a good idea?

We have deployed our website recently using an application gateway but the bandwidth (125 CU) isn't enough to handle the very high traffic of the website. We are thinking about switching the ...
Tony Tran's user avatar
0 votes
0 answers
575 views

Azure Application Gateway Redirection from empty hostname

I have created an Application Gateway that needs to fulfill the working of my previous Resource (F5). As a listener I use a hostname: hostname.stackoverflow.com that listens on 443 As a Http Setting ...
achahbar's user avatar
  • 961
0 votes
2 answers
581 views

Azure ASE v2 - restrict network access for app services

I have an ILB ASE v2 with WAF (public IP). The ASE has its subnet where all web apps reside. For obvious security reasons I think I need to lock down access from Internet and leave only HTTPS open. ...
AlexB's user avatar
  • 4,383
0 votes
1 answer
408 views

Is it possible to create a application gateway without backend address pool in azure?

While creation of azure application gateway using ARM template is it possible to create a application gateway without backend address pool, request routing rules, health probes and listeners. If so ...
Mohamed Meeran's user avatar
0 votes
1 answer
4k views

Application Gateway Configuration - passthrough to server

My application gateway/WAF is setup end to end ssl, does any one know if it can just passthrough requests to like an app server for a desktop client if the Public FQDN is resolving to the app gateway ...
xysoconnor's user avatar
-2 votes
1 answer
304 views

Azure Multi region DR : Custom Routing Policies in APIM[Premium) Vs Traffic Manager behind APIM

We have APIM premium, which comes with internal Traffic Manager for performance base routing . If APIM is integrated externally with the vnet in which we have our fnapp integrated, for multiregional ...
Reshma's user avatar
  • 29