Questions tagged [azure-application-gateway]
The azure-application-gateway tag has no usage guidance.
azure-application-gateway
876
questions
4
votes
6
answers
6k
views
Azure Traffic Manager with Application Gateway backends
We have an architecture whereby we have a traffic manager in front of two Azure application gateways and configured based on Priority (closer proximity has higher priority). We are using Application ...
4
votes
1
answer
729
views
Client IP is not preserved using Azure Application Gateway and Nginx ingress controller
I have an app which runs on AKS, using nginx ingress and is exposed through Azure Application Gateway.
When I access the app through the gateway, the client IP is replaced with the Application Gateway ...
4
votes
2
answers
8k
views
Azure Traffic Manager monitoring status is 'degraded' for Azure Application Gateway
Azure Traffic Manager monitoring status for Endpoints(Azure Application Gateway/WAF)is degraded. Web app behind the Application gateway is healthy and able to access through Traffic Manager.
Any help ...
3
votes
2
answers
10k
views
Azure Application Gateway file upload limits
Recently I'm working with the Azure Application Gateway and when I try to upload a file I got the response 413 Entity Too Large. I read about it and the limit for the file upload is 2GB but I'm very ...
3
votes
1
answer
973
views
Terraform Removes Configurations/Resources Created by the Application Gateway Ingress Controller (AGIC)
I have some Terraform code which deploys AKS behind an Application Gateway along with other infrastructure unrelated to the issue. The code is based on https://learn.microsoft.com/en-us/azure/...
3
votes
3
answers
2k
views
Why Azure takes so long to setup a Load Balancer?
I have set up an application gateway in almost five different regions in Azure and every time Azure take around 15-20 mins to complete the setup.
Whereas AWS will do it in a couple of minutes, why ...
3
votes
3
answers
9k
views
How to check current number of instances for Azure Application Gateway
I currently have an Azure Application Gateway that is configured for a minimum of 2 instances and a maximum of 10 instances. It's Tier is "WAF V2" and autoscaling is enabled.
If autoscaling is ...
3
votes
2
answers
414
views
How can I require SSL when I offload at an Azure application gateway?
I am transitioning my ASP.Net web site to Azure hosting. I am using an application gateway with SSL offload, so my individual load balanced web servers do not have the SSL cert installed. Since SSL is ...
3
votes
3
answers
5k
views
Configure WAF Application Gateway in front of App Services [closed]
I have a VNET with two App Services and one Windows VM in Azure. They are in the same VNET using VPN point-to-site.
I want to protect this environment with a WAF and have read that I can use ...
3
votes
4
answers
5k
views
two frontend ports of application gateway are using the same port 443 - Azure application gateway in terraform
I am configuring azure application gateway using terraform.
Following is the module that i wrote:
locals {
backend_address_pool_name = format("appgwbeap-%[1]s-%[2]s%[3]sweb-gw",var....
3
votes
1
answer
5k
views
Azure Application Gateway with App Service Web App
I have created an application gateway with WAF (default detection mode) in an Azure Resource Group (no ASE) with an App Service Web App backendPool member/target MS link (followed instructions to the ...
3
votes
1
answer
3k
views
App Gateway configuration with Private Endpoint enabled web apps
I am trying to expose my Front End and Function Web Apps using App Gateway. Both of those apps belong to one app service plan.
They are also private endpoint enabled and VNET integrated.
I have ...
3
votes
4
answers
11k
views
Azure Application Gateway: Cannot connect to backend server in
Due to a recent layoff I got bombarded to azure admin out of the blue. I am pretty new to this and haven't yet got the chance to follow an admin course.
Facing the following issue: We host a couple of ...
3
votes
2
answers
1k
views
Azure application gateway - Routing based on cookie value
All of the examples I can find in the internet talk mostly about routing based on path. I have a scenario where I need to read a cookie and based on that cookie, route the request to a particular ...
3
votes
1
answer
7k
views
SSL certificate for Azure Application Gateway for SSL offload
I'm trying to implement SSL offload in Azure Application Gateway as described in documentation:
https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-portal
It requires ...
3
votes
3
answers
811
views
Azure Load Balancing Solutions. Direct Traffic to Specific VMs
We are having difficulties choosing a load balancing solution (Load Balancer, Application Gateway, Traffic Manager, Front Door) for IIS websites on Azure VMs. The simple use case when there are 2 ...
3
votes
1
answer
2k
views
Application Gateway - 502 error
I have set up a new application Gateway following the MS document. I have configured the back end pool .it is connected to an App Service via FQDN. Somehow I receive 502 immediately every time I ...
3
votes
1
answer
930
views
Azure Kubernetes Service (AKS) uses Application Gateway Ingress Controller (AGIC) : How to implement HSTS header in ASP.Net Core 6.0?
An action item from the security scan is to implement HSTS header in ASP.Net Core 6.0 WebAPI.
A WebAPI application is deployed on AKS using Application Gateway Ingress Controller. SSL termination ...
3
votes
1
answer
2k
views
Cross-origin resource sharing error: PreflightInvalidstatus in Azure Application API
I have backend Springboot API service which is running behind the Azure Application Gateway. The APIs are getting used in a Single page application. Spring boot APIs are well configured for CORS and ...
3
votes
1
answer
902
views
PFX size limit error on Azure application gateway configuration
I am trying to configure azure application gateway. I provided .pfx file for https listener configuration. But when i tried to create Azure application gateway, I am getting below error
{
&...
3
votes
1
answer
2k
views
Azure Application Gateway is Redirecting request to App Service
I have application gateway sitting in front of Azure App Service (Standard) . I have .Net Core 3.1 basic MVC web app hosted on App Service.
Problem
The problem is when I hit Application Gateway URL (...
3
votes
1
answer
2k
views
Retrieve/recover cert pfx from Azure Application Gateway
I want to retrieve/download the original pfx certificate that was uploaded onto our Application Gateway.
So far I have done the following in PowerShell:
$appGw = Get-AzApplicationGateway -Name "...
3
votes
2
answers
4k
views
Two-Way SSL Authentication with Azure Application Gateway
Is it possible to configure two-way SSL authentication with certificates with Azure Application gateway? I have one way SSL working with a public IP but I'd like to restrict who can access this ...
3
votes
2
answers
2k
views
Can't Access Azure Application Gateway through peered VNET
I have two peered VNETs in Azure and I also have an Application Gateway in one of them. I have a couple VMs inside both VNETs and I want to access the Application Gateway from the VMs by its private ...
3
votes
3
answers
9k
views
How do I show "Down for maintenance" for site hosted behind Application gateway
We have a website hosted behind Azure Application gateway load balancer. When we take site down for maintenance it shows 502 error to end users, which isn't nice. Even if we put App_offline.htm, it ...
3
votes
1
answer
4k
views
Azure Application gateway cannot upload pfx certificate
For Application gateway all documentation says to upload pfx certificate but when I go to http settings for backend pool it only allows ".cer" certificate and it wont allow ".pfx" file to be uploaded, ...
3
votes
1
answer
682
views
Connect Azure Application Gateway with Internal AKS managed loadbalancer
I am trying to implement AKS Baselines with terraform, but I can't get my Application Gateway connect to the internal load balancer created by AKS.
My AKS config contains of a solr instance and a ...
3
votes
1
answer
2k
views
Azure Application Gateway Ingress Controller - The number of BackendHttpSettings exceeds the maximum allowed value 100
We are using Azure Application Gateway as the ingress controller to our AKS cluster and we have been hitting this issue occasionally.
"The number of BackendHttpSettings exceeds the maximum ...
3
votes
1
answer
678
views
How does Application Gateway prevent requests being sent to recently terminated pods?
I'm currently researching and experimenting with Kubernetes in Azure. I'm playing with AKS and the Application Gateway ingress. As I understand it, when a pod is added to a service, the endpoints are ...
3
votes
2
answers
4k
views
Data length larger than configured limit with Azure Application Gateway WAF
we have the WAF in the Application Gateway configured to "Prevention" mode. A couple of use cases in the application require files to be uploaded. Currently those file upload requests are being ...
3
votes
0
answers
216
views
Azure App Gateway Never Picks up Renewed SSL Certs from Key Vault Automatically
I am seeing a peculiar problem whereby my Azure Application Gateway never picks up renewed certs from KV. I have KV as a reference in the listener. I upload new Certs in the KV and also change the ...
3
votes
0
answers
285
views
502 Bad Gateway error when using NestJS app with AKS and AGIC
I'm trying to deploy a backend application made with nestjs to AKS and have it exposed to the internet using Application Gateway Ingress Controller, the deployment of the application works with all ...
3
votes
2
answers
299
views
I added FrontDoor to an app service, then deleted FD and now the app service no longer works
The DNS records for Front Door were deleted as well. We have an app gateway to the app service, which is under an app service env. I can see traffic on my app gateway:
But none on the app service:
...
3
votes
1
answer
364
views
What NSG rules can be applied for Hub/Spoke/AppGw scenario?
I have an AppService deployed in a Spoke Vnet (with a Private Endpoint). In front of this is an AppGw (in the Hub Vnet).
It seems that it's not possible to control the AppGw outbound traffic with the ...
3
votes
1
answer
773
views
How to avoid updating backend pool of application gateway by terraform script
I am trying to deploy AKS with application gateway ingress controller via terraform.
For which I have created application gateway , AKS (also enabled ingress controller setting) and then deployed YAML ...
3
votes
1
answer
2k
views
Application Gateway (or Load Balancer) with App Services using Terraform?
I am looking for the best way to implement load balancing (including redirection between multiple app services based on URL path) with App Services. This is what I have right now:
# App Service Plan
...
3
votes
0
answers
422
views
Application Gateway: ResourceNotFound during AKS provisioning (bicep)
When we deploy our environment with e.g. AKS and Application Gateway through bicep, we get sometimes this error during AKS provisioning:
{
"status": "Failed",
"error&...
3
votes
0
answers
395
views
Azure Application Gateway and Certificate SAN
I'm having issues trying to configure multiple listeners in an Azure Application Gateway that use the same certificate.
I have a backend web server configured with a website for www.example.com, bound ...
3
votes
0
answers
279
views
number of certificates, listeners and routes in envoy proxy
Hi I am looking for using envoy proxy for a multi tenant saas application, where we would like to let our customers have their own domains (kind of bring your own certificate model).
I am currently ...
3
votes
1
answer
5k
views
Azure App Service behind Azure Application Gateway
I'm trying to serve multiple Azure App Services behind an Application Gateway. These services should only be reachable through the application gateway endpoint. To achieve this, I've done the ...
3
votes
1
answer
4k
views
Azure application gateway returning random 502 error
We have a setup as follow on Azure
The problem we have been encountering is that AG is reporting 502 errors on IP1 randomly. In a day it could get about 20 502 errors on some random files. However, ...
2
votes
3
answers
10k
views
How to disable TLSv1 on Microsoft Azure Application gateway
Application gateway is the load balancer in MS Azure which supports SSL certificate. In aws load balancer we select protocols which can be used to connect to the load balancer like TLSv1.1, TLSv1.2.
...
2
votes
1
answer
9k
views
Azure Application Gateway received invalid status code: 404 from App Service
I am using Microsoft Learn to setup the following lab: https://learn.microsoft.com/en-us/learn/modules/load-balance-web-traffic-with-application-gateway/5-exercise-create-configure-application-gateway....
2
votes
1
answer
2k
views
Azure Load Balancing Solution - Application Gateway or Azure Load Balancer
Note: I'm still in learning phase.
Question: For the scenario described below, in the Load Balancing Settings for the two VMs for the FrontEnd subnet should I choose Application Gateway or Azure Load ...
2
votes
2
answers
14k
views
Add NSG to Application Gateway Subnet
My requirement is simple. I need to associate NSG to the subnet containing my application gateway.
As soon as I associate NSG to this subnet, I am getting connection timed out error.
As per ...
2
votes
1
answer
4k
views
Terraform-Azure-Unable to create Private IP configuration for application Gateway StandardV2
I'm trying to create an application gateway (Standard V2) with both public IP and private IP configuration, but upon creation only public IP is being created and private IP configuration is nowhere to ...
2
votes
1
answer
15k
views
Azure App Gateway gives Error 404 but backend probe is healthy
I have setup my Application Gateway and added a CNMAME in my domain to point to the DNS Name of the application gateway. The application gateway will point to 3 sites eventually . I created 3 web apps ...
2
votes
1
answer
4k
views
Suggestion about Azure Application gateway
We have a lot of web applications behind one Application Gateway. We recognize a problem with a couple of them when "Inspect request body size" is on and configured to it's default size - ...
2
votes
1
answer
6k
views
How to remove weak ciphers from TLS 1.2 configuration on Azure App Service?
Our Security team reported usage of weak Cipher in our application as seen below, I would like to remove them, any help or guidance is appreciated:
2
votes
2
answers
4k
views
Can you see the Firewall Rule that was triggered on Azure Application Gateway WAF
We're using the Application Gateway WAF in prevention mode and it's blocking some of our Mobile App Client requests. I switched the WAF into Detection mode and output the logs to Log Analytics. I can ...