Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,124 questions
1 answer
Is there a way to know which backend is serving the traffic?
We have 3 backend linux servers where nodejs application is installed. Azure application gateway is configured to route the requests to these 3 backend nodes. However, we would like to setup a custom header in Application Gateway to understand at any…
asked 2025-02-06T19:26:36.07+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 23%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBR%3C/text%3E%3C/svg%3E)
Baliga, Ramprasad (Cognizant)
0
Reputation points
answered 2025-02-06T23:37:21.8966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 74%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDG%3C/text%3E%3C/svg%3E)
Divyesh Govaerdhanan
1,120
Reputation points
2 answers
One of the answers was accepted by the question author.
Application Gateway Listener TLS Certificate Issue
Hello, I have one issue related to Certificate in Azure application Gateway. Currently, In the application gateway I uploaded the certificate in .pfx format and then mapped it with the listener. But that same certificate is available in the Keyvalut and…
asked 2025-02-06T08:58:35.8233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 83%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Mohammed Shafi
20
Reputation points
answered 2025-02-06T17:00:31.5866667+00:00
Mohammed Shafi
20
Reputation points
0 answers
Frontdoor Health probe throws 404 with application gateway
Hi there, I've been facing an issue with FrontDoor health probe and the application gateway that I'm unable to find a solution to. I have the following architecture. Frontdoor has a few routes and origin groups with two origins configured with each…
asked 2025-02-03T08:01:06.84+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 95%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETC%3C/text%3E%3C/svg%3E)
Tricky Clown
0
Reputation points
commented 2025-02-06T12:55:06.21+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 15%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPB%3C/text%3E%3C/svg%3E)
Praveen Bandaru
425
Reputation points Microsoft Vendor
1 answer
Application Gateway Issue
I experience issues accessing specific pages or sections of your website hosted on a Windows Server behind an Application Gateway while other parts (like the home page) work fine, this could be due to several reasons
asked 2025-01-30T16:05:33.8833333+00:00
Sandeep Kumar
0
Reputation points
commented 2025-02-06T09:05:40.26+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 73%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
anashetty
2,040
Reputation points Microsoft Vendor
0 answers
OCSP stapling of SSL certificate at Azure Application Gateway
I have an AKS setup and using Application Gateway for traffic management. TLS termination is being done at application gateway only. My security team says we need to do OCSP stapling for privacy purposes and to mitigate CR bypass issue. I have checked…
asked 2025-01-30T08:41:27.8866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 26%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
SHUBHAM KUMAR
0
Reputation points
commented 2025-02-06T07:23:31.42+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 17%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERV%3C/text%3E%3C/svg%3E)
Rohith Vinnakota
2,520
Reputation points Microsoft Vendor
1 answer
Clarification Needed on Azure WAF Ruleset Upgrade Notification for Non-Configured WAF Policy
I have recently received a notification from Azure urging me to upgrade to the latest Azure Web Application Firewall (WAF) ruleset version, specifically CRS 3.2 or DRS 2.1, by January 26, 2026. This is due to the deprecation of the older CRS 3.0 ruleset…
asked 2025-01-31T07:09:42.1233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 31%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Anji Muduthanapally
0
Reputation points
commented 2025-02-06T06:02:54.43+00:00
Rohith Vinnakota
2,520
Reputation points Microsoft Vendor
2 answers
One of the answers was accepted by the question author.
How to assign Azure public static IP address to Azure application gateway alter upgrading Public Ip from basic to standart
I have Azure virtual machine ,which network interface associated with Azure public static IP address ,which have basic SKU. I need to associate that public IP address with application gateway,which has standart v2 tier, when I will create application…
asked 2025-01-29T13:34:25.9833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 95%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDG%3C/text%3E%3C/svg%3E)
Davit Grigoryan
76
Reputation points
accepted 2025-02-05T13:05:29.78+00:00
Davit Grigoryan
76
Reputation points
1 answer
Why does Azure application gateway rate limit WAF return a 403 and not a 429?
When Azure Application gateway rate limiter functions as expected, we were expecting a 429, but instead, a 403 is returned. Why is this?
asked 2024-03-04T13:57:27.39+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 30%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Levi
30
Reputation points
edited a comment 2025-02-05T06:43:39.8+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 37%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERK%3C/text%3E%3C/svg%3E)
Rafeeque Kudilil Ameeruddeen
0
Reputation points
0 answers
Managed identity doesn't allow permissions to join subnet, but it's owner on that vnet/subnet
I have an Azure managed application, deployed from the Azure Marketplace with an ARM template and with a managed identity assigned to a VM, that lives in the managed resource group. The managed identity has Owner permissions over the resource group so it…
asked 2025-01-15T15:16:37.7533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 75%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDP%3C/text%3E%3C/svg%3E)
Diko Parvanov
0
Reputation points
commented 2025-02-04T11:42:10.5233333+00:00
KapilAnanth-MSFT
48,576
Reputation points Microsoft Employee
1 answer
Issue Creating Private Endpoint with Azure Application Gateway's Private Link Enabled
Hello Azure Community, We are facing an issue while creating a private endpoint in Azure, and we need some assistance to resolve this. Scenario: We have created an Azure Application Gateway with the private link feature enabled. Now, we are trying to…
asked 2025-01-28T13:34:55.8033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 99%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
suraj solanki
0
Reputation points
edited the question 2025-02-04T06:39:05.0966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT
35,216
Reputation points Microsoft Employee
2 answers
Keeping the Original URL While Redirecting in Azure Application Gateway
Hello everyone, Can Azure Application Gateway send traffic to another URL while keeping the original URL in the browser? I have https://user.mysite.co this is pointed at the public ip of the application gateway WAF_v2. When user hits this, I want them to…
asked 2025-01-30T12:10:49.1766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 21%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
krutibasa majhi
25
Reputation points
commented 2025-02-03T10:11:20.9833333+00:00
Praveen Bandaru
425
Reputation points Microsoft Vendor
0 answers
Azure 502 Bad Gateway Issue
I use an application gateway with WAF setup to run our web application deployed in a single Azure VM. When I access the application through App GW from the browser, I sometimes get a 502 Bad Gateway error. The App GW health probe responds with,…
asked 2025-01-15T15:23:59.74+00:00
Mohammed Shafi
20
Reputation points
commented 2025-01-31T08:19:21.06+00:00
KapilAnanth-MSFT
48,576
Reputation points Microsoft Employee
1 answer
Get 502 when saving a large post body despite my data has been successfully saved
Issue: I'm trying to make a POST call with large post body to an Azure api, and I got 502, however, the data has been saved successfully when I check the DB. at the meanwhile, When I try to call the same API in my localhost, i got 200. My Analysis:…
asked 2025-01-17T20:59:57.37+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 86%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDF%3C/text%3E%3C/svg%3E)
Danni Feng
0
Reputation points Microsoft Employee
commented 2025-01-30T09:22:15.13+00:00
Rohith Vinnakota
2,520
Reputation points Microsoft Vendor
1 answer
How to get the list of resources which are using TLS versions < 1.2 in Azure environment.
How to get the list of resources which are using TLS versions < 1.2 in Azure environment. As we need list of resources on a subscription which are still on lower version.
asked 2025-01-27T10:05:15.0166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 32%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Pradeep Kumar Ramagiri
40
Reputation points
commented 2025-01-29T16:14:26.2066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 39%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELM%3C/text%3E%3C/svg%3E)
Loknathsatyasaivarma Mahali
255
Reputation points Microsoft Vendor
2 answers
One of the answers was accepted by the question author.
AKS Networking with Application Gateway and Azure Firewall
Hello everyone, I am currently implementing a solution in Azure that involves using Azure Kubernetes Service (AKS) as a backend, along with an Application Gateway for incoming traffic. Additionally, I have configured an Azure Firewall to manage outbound…
asked 2024-12-13T13:48:50.45+00:00
krutibasa majhi
25
Reputation points
answered 2025-01-29T11:06:17.88+00:00
krutibasa majhi
25
Reputation points
2 answers
Azure Application Gateway request header routing to different AppService slots
Hello Guys, I'm exploring Azure Application Gateway, reading documentation and other things but couldn't figure-out if that is really possible. I have a mobile application with an API (a .NET 7 back-end) that is going to be deployed as Azure AppService…
asked 2023-01-24T18:20:58.95+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 50%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOK%3C/text%3E%3C/svg%3E)
Oleksii Kovalchuk
70
Reputation points
commented 2025-01-29T01:31:18.13+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 69%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bhoopen Sawant
0
Reputation points Microsoft Employee
1 answer
Support for Lets Encrypt cert auto generation on AKS API Servers with private IP Addresses
Is Cert Manager/Let's Encrypt certificate auto-generation supported on Application Gateway Ingress for AKS clusters whose API servers don’t have public IP addresses (e.g. API Server Vnet integration)? I haven’t been able to make it work. It works fine…
asked 2025-01-08T15:00:39.6533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 28.999999999999996%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGR%3C/text%3E%3C/svg%3E)
Garsha Rostami
126
Reputation points
edited the question 2025-01-28T11:58:50.5866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 79%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3END%3C/text%3E%3C/svg%3E)
Nikhil Duserla
4,280
Reputation points Microsoft Vendor
2 answers
One of the answers was accepted by the question author.
Application Gateway in front of API Management
Hey Guys, We have API Management. https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/api-management-security-baseline Microsoft's security baseline states to have WAF as part of Network Security with Application Gateway. What would the…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 69%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
2 answers
One of the answers was accepted by the question author.
similar rewrite-url not working for another routing rule
I have a api management set up with basic tier which accepts one custom domain url. I have multiple api's defined ex: staging and qa both listening on the same url https://test.apim.com The internet facing requests are as follows, staging…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 44%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
1 answer
Updating SSL profile by adding few more ciphers in application gateway.
We want to choose customV2 however, we are getting below alert and post making the changes it does not give results. What is the correct process of updating SSL profiles pertaining to few listeners in an application gateway. Choosing a new predefined or…
asked 2025-01-22T19:16:18.2866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 9%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENR%3C/text%3E%3C/svg%3E)
Nagrath, Richa
21
Reputation points
commented 2025-01-27T19:00:11.2833333+00:00
Praveen Bandaru
425
Reputation points Microsoft Vendor