Windows IIS website, which is bound to approximately 70 hostnames, want to configure the APPGW for the website
Hi All, We have a Windows IIS website, which is bound to approximately 70 hostnames. We want to configure the website behind the Azure Application Gateway; could you please help in configuring the Listener and HTTP settings to handle around 70 hostnames?…
What is SKU family?
Hi, upon reviewing our Application Gateways I saw the following in the ARM template exported from the portal: "sku": { "name": "WAF_v2", "tier": "WAF_v2", "family":…
Azure Application Gateway Preview feature (TCP/TLS Proxy) and Azure SQL
Hello I was just wondering if anyone has attempted to use the preview feature for Azure Application Gateway to support layer 4 proxying. (https://learn.microsoft.com/en-us/azure/application-gateway/tcp-tls-proxy-overview) with an Azure SQL instance as…
Getting error "Our services aren't available right now" While configure Azure front door on top of Application gate way
My Application is deployed on useast2 and central us on the aks cluster. They are using the service as a load balancer. On top of the load balancer, we are using an application gateway where all routing rules are configured.On top of that we are using a…
Using Key Vault for a backend root cert in Application Gateway
I am setting up an Application Gateway that uses TLS on the backend to talk to members of a VM Scale Set. I have this all in a bicep template and it works - I pass the root certificate into the template as a parameter. However, I would rather keep the…
Getting listener error "This listener cannot use the same frontend port as an existing listener" even though there is only one listener present on Azure Portal
Error "This listener cannot use the same frontend port as an existing listener" is displayed under port no. even though there is only one listener currently present in application gateway. I think it is a bug because we can have two listener…
Azure App Service Configuration for Multiple Domains
Hello Team, We have an project architecture where a web application is deployed as an Azure app service. Request to this app service come from domain, like Contoso1.com. Currently, our infrastructure is configured as follows: DNS Configuration: The…
I am getting the below error for this banking website 403 Forbidden Microsoft-Azure-Application-Gateway/v2 How do I resolve the same?
I am getting the below error for this banking website 403 Forbidden Microsoft-Azure-Application-Gateway/v2 How do I resolve the same?
hosting multiple domain with tls termination in application gatway
we already have 2 multisite listener with *.domain1.com with SSL wild card certificate, routing traffic to internal APIM. now we have a requirement for adding another listener with *.domain2.com with wild card ssl cert *.domain2.com while browing…
Supporting single sign-on behind an application gateway
Hi there, We're trying to deploy an application that supports single-sign on using Microsoft Accounts. Our application is running locally as expected. We're now trying to deploy on our Azure architecture. The application runs as an App Service. The App…
How to use mTLS to secure a sql database
Hi, I'm trying to an managed sql database in Azure using either a managed sql instance or cosmosdb with the postgres interface. However I would like to secure the communication towards it using mTLS since all of the communication will come from…
"400 The SSL certificate error" from Azure Application Gateway with mTLS
I try to setup mTLS with an Azure Application Gateway. Unfortunately I always get an error <html> <head><title>400 The SSL certificate error</title></head> <body> <center><h1>400 Bad…
Azure application gateway
Hello everyone I have an Azure Application Gateway pricing plan standard v2. I have an Azure Function that I want to protect using the Application Gateway. Now, when I create the backend pools in the Application Gateway, I add the Azure Function to…
Managing 200 Websites with Application Gateway and WAF Protection
Hello, I have a single server that is currently hosting over 200 websites. Is it possible to manage all these websites using an application gateway and protect them with a WAF?
How to create script terraform to deploy application gateway
How to create script terraform to deploy application gateway
application gateway ingress return 502 error
I am unable to hit my backend endpoint via application gateway load balancer. It returns error 502 Bad Gateway.
Allow access through WAF only for whitelisted IPs
I have an Azure Application Gateway where I manage a few client domains. I have a few production and staging domains routed to this application gateway, which I manage where I need them to be pointed to. When I was working with the domains pointed…
How do I configure the Azure Application Gateway / backend pool to drop requests that are blocked by the WAF as the log file indicate the request was blocked but the script ends up in the database.
requests blocked by the WAF are being forwarded to the backend API servers. How do you configure the backend pool or WAF to drop requests that are blocked by the WAF.
What Authentication solution would you suggest in this scenario?
Context: We are migrating from Azure App Gateway V1 to Azure App Gateway V2 for load balancing. For authentication purposes, we used NTLM which AG V2 does not support. Now I am trying to find an alternative. Ideally, I want the authentications to…
Why ALB (App Gateway V2) with affinity session enabled won't work with NTLM
Hello, community I hope this message finds you well. Currently, our application is balanced with AGV1(NLB) and uses Windows Authentication with NTLM. I am aware that NTLM requires a persistent connection and that is one of the limitations of ALB.…