How can I create a private link between Azure FrontDoor and Azure Container App?

Question

I have configured an Azure Container Apps environment with an application and aim to exclusively access it through Front Door.
Despite the seemingly straightforward nature of this requirement, it has proven to be a challenging endeavor.
I have managed to find a workaround that is compatible with the previous consumption model (accessing the kubernetes-internal load balancer), as opposed to the workload profile-based one.

Additionally, I have attempted to utilize an Application Gateway between Front Door and Azure Container Apps, but encountered an error stating that the configuration changes could not be saved due to the incompatibility of the application gateway with Private Link Configuration in the context of NetworkIsolation.

How can I make the setup (FrontDoor + Application Container Apps in a vnet) work?

Answer 1

@Francesco Leonetti

Thank you for reaching out.

I wonder if you have followed the guide here for this deployment

You need to deploy an internal Azure Container App environment and an Azure Front Door Premium instance.

If you have followed this guide already, please let me know what challenges/ errors you faced as we can help troubleshoot those. Thanks