Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,079 questions
0 answers
How to discover the attempts of using TLS 1.0 and 1.1 after upgrading the SSL policy to 20220101 version in app gateway?
We recently upgraded our SSL policy to 20220101 to enforce TLS 1.2 or later for connections to Azure application gateway. We're concerned about potential failed connection attempts from legacy clients that may still be trying to connect using TLS 1.0 or…
asked 2024-11-04T04:24:57.6833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 40%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESL%3C/text%3E%3C/svg%3E)
Samuel Lee
0
Reputation points
commented 2024-11-08T08:02:01.9333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 81%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sai Prasanna Sinde
1,080
Reputation points Microsoft Vendor
3 answers
One of the answers was accepted by the question author.
Application gateway listener error when trying to use key vault certificate using managed identity and RBAC
Hi, I'm trying to setup a listener in application gateway to use a certificate from keyvault using managed identity. But every time whne I choose in portal the managed identity and then select the key vault from the dropdown menu I get this error: …
asked 2021-10-08T06:19:49.1+00:00
Martin Cangar
31
Reputation points
commented 2024-11-07T21:27:41.7666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 92%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELR%3C/text%3E%3C/svg%3E)
Lee Reams
0
Reputation points
1 answer
Generate encrypted access to application hosted on Tomcat server from outside the virtual machine by configuring it through Azure Gateway using Self Signed Certificate
I generated a self-signed certificate for my application hosted on Tomcat within a virtual machine and uploaded it to Azure Application Gateway, but I'm encountering an error. The Intermediate certificate is missing from the backend server chain.…
asked 2024-11-06T05:25:29.98+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 62%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYP%3C/text%3E%3C/svg%3E)
Yadav, Poorvasha
0
Reputation points
commented 2024-11-07T16:51:49.8466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati
1,275
Reputation points Microsoft Vendor
2 answers
How do I configure the Azure Application Gateway / backend pool to drop requests that are blocked by the WAF as the log file indicate the request was blocked but the script ends up in the database.
requests blocked by the WAF are being forwarded to the backend API servers. How do you configure the backend pool or WAF to drop requests that are blocked by the WAF.
asked 2024-05-16T08:21:12.23+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 90%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDG%3C/text%3E%3C/svg%3E)
Derek Green
5
Reputation points
edited a comment 2024-11-06T22:46:04.7333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 73%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Sean Bodor
5
Reputation points
1 answer
VMSS Health Probe Showing Unhealthy Status Despite Whitelisting Wireserver IP 168.63.129.16
We are currently exploring the configuration of our production Virtual Machine Scale Sets (VMSS), which are behind an Azure Application Gateway. We have implemented a health extension check using the HTTP protocol on port 80. However, we are encountering…
asked 2024-10-17T05:56:43.6833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 79%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENK%3C/text%3E%3C/svg%3E)
Niket Kumar Singh
390
Reputation points
edited the question 2024-11-06T15:22:45.0366667+00:00
Prrudram-MSFT
25,166
Reputation points
1 answer
One of the answers was accepted by the question author.
Application gateway limits
Just want to understand what does it means Concurrent WebSocket connections: Medium gateways 20k2 and Large gateways 50k2 Is it considered to be Medium = 20000 ? and Large = 50000 ?
asked 2022-03-11T07:13:47.417+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 41%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Rakesh Sharma
61
Reputation points
commented 2024-11-05T04:55:12.19+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 46%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
YogeshM Sharma
0
Reputation points
1 answer
When the TLS version 1.0 & 1.1 is expiring for Azure App Services, Azure SQL Managed Instances, Azure SQL server
When the TLS version 1.0 & 1.1 is expiring for Azure App Services, Azure SQL Managed Instances, Azure SQL server
asked 2024-10-30T15:33:32.14+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 52%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Ranjan, Apoorv
0
Reputation points
commented 2024-11-04T15:04:45.07+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 17%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERV%3C/text%3E%3C/svg%3E)
Rohith Vinnakota
1,085
Reputation points Microsoft Vendor
2 answers
Are there plans to support annotations for redirection to an external site in the Application Gateway Ingress Controller?
I want to redirect requests from domain A to domain B. While I see this option in the Azure Portal, I couldn't find the corresponding annotation or setting in the official AGIC documentation. Are there any plans for future support for this feature?
asked 2023-11-30T06:57:04.7466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 97%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Davis
0
Reputation points
edited an answer 2024-10-31T13:07:14.0933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 37%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
philippe.savary
20
Reputation points
1 answer
One of the answers was accepted by the question author.
Application gateway server information disclosure in HTTP response header
Hi, We encountered a problem with pentesting. Found issue about server information "nginx" when application gateway response. I created an application gateway of WAF tier, I implement rewrite set for remove "Server" in response. It…
asked 2023-10-30T08:45:17.1333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 17%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
Azure Developer
20
Reputation points
commented 2024-10-29T04:05:55.3866667+00:00
Azure Developer
20
Reputation points
0 answers
Application gateway not added x-forwarded-proto request header
Application gateway front listener listen https, the backend is a container app, the backend setting listen http, when use custom domain of application gateway public ip to visit the container app web application encounter the following error, and the…
asked 2024-09-30T11:22:35.99+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 95%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWA%3C/text%3E%3C/svg%3E)
Will Ang
20
Reputation points
commented 2024-10-25T20:25:04.42+00:00
Rohith Vinnakota
1,085
Reputation points Microsoft Vendor
1 answer
One of the answers was accepted by the question author.
How to Migrate all of the exclusions from one resource to another using Azure CLI or Azure Powershell
Struggling to find correct Azure CLI or Azure Powershell commands that will allow us to create exclusions under Managed Rulesets - Microsoft_DefaultRuleSet_2.1 in an Application Gateway - WAF policy Found commands to list these exclusions and commands to…
asked 2024-10-24T19:18:43.0033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 0%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Brandt, Scott R
20
Reputation points
commented 2024-10-25T16:28:49.87+00:00
KapilAnanth-MSFT
46,876
Reputation points Microsoft Employee
1 answer
How to create a Routing table between my Azure firewall to Azure SD-WAN Vmx
Hello we have a Vnet name Vnet-SD-WAN and Below are subnets in Vnet 10.170.0.0/22 and Sd-wan Vmx subnet - 10.170.1.0/28 Azurefirewall subnet -10.170.3.0/26 Azure Application gateway : 10.170.3.64/26 Network flow in below way …
asked 2024-10-20T12:15:26.2433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 10%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBG%3C/text%3E%3C/svg%3E)
Bolenath Gundagani
0
Reputation points
commented 2024-10-24T16:02:16.0066667+00:00
Ganesh Patapati
1,275
Reputation points Microsoft Vendor
1 answer
One of the answers was accepted by the question author.
Intermittent 404 Errors with Azure Static Web App and Application Gateway
Hi Folks, We are experiencing intermittent 404 errors when trying to access our Static Web App through our main DNS hostname behind an Azure Application Gateway. However, when we use the direct Static Web App URL, everything works as expected without any…
asked 2024-10-21T19:45:04.01+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 25%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPD%3C/text%3E%3C/svg%3E)
Prathap Dasari
45
Reputation points
accepted 2024-10-22T15:25:49.1233333+00:00
Prathap Dasari
45
Reputation points
1 answer
How to Solve Received Invalid Status Code: 404 in the Backend Server’s HTTP Response
Hi all, I try to set an application gateway for my Azure App Service. I follow the guideline in: https://learn.microsoft.com/en-us/azure/application-gateway/configure-web-app?tabs=customdomain%2Cazure-portal After setting, there is an error in backend…
asked 2024-10-18T08:01:52.1933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 22%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Azure. Ben Tsui
0
Reputation points
commented 2024-10-21T21:32:29.5966667+00:00
Rohith Vinnakota
1,085
Reputation points Microsoft Vendor
2 answers
Client not receiveing response from Application Gateway timing out and collecting 400 httpStatus
I have a NodeJS Express API. It exposes an endpoint expecting a multipart form to collect files. It is deployed in an AKS instance. The AKS is behind an Application Gateway. A client is performing several serial calls toward the endpoint…
asked 2024-10-14T13:05:30.3033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 8%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Matteo Mario Cossu
21
Reputation points
commented 2024-10-21T13:46:55.03+00:00
Matteo Mario Cossu
21
Reputation points
0 answers
Need to identify which azure services will effect from TSL1.0 & 1.1 support ending on 31st Oct,2024
Hi Team, Microsoft has announced the end of support for TSL1.0 and 1.1 on October 31, 2024. I've included the services that operate below TLS 1.2 in my production. Could you please assist me determine which services must be upgraded to TLS 1.2 in order…
asked 2024-09-05T08:53:31.27+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 22%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Yasar Shaikh
65
Reputation points
commented 2024-10-21T13:15:26.0366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 0%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENG%3C/text%3E%3C/svg%3E)
Nikhil George
41
Reputation points
2 answers
Is there any way to scale up the application gateway v1 (Increase instances) automatically using powershell commands?
Is there any way to scale up the application gateway v1 (Increase instances) automatically using powershell commands? I attempted to use an Azure Automation Account with a PowerShell Runbook, but encountered errors. Additionally, the available articles…
asked 2024-10-21T07:22:37.2566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 6%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERK%3C/text%3E%3C/svg%3E)
Rahul Kamble
20
Reputation points
answered 2024-10-21T11:59:11.0233333+00:00
KapilAnanth-MSFT
46,876
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
WAF rule processing load and its impact analysis
Hello all, Good day! I would like to know if I have a FrontDoor/AppGw WAF policy in prevention mode with all the default rulesets enabled + a bunch of custom rulesets added (say 50), when a request hits the frontdoor or AppGw, that 1 request would be…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 89%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
0 answers
Allow B2C REST API Calls through Geo-Fenced Application Gateway
REST API calls from B2C are being rejected by the WAF, which has geo-fencing enabled for Qatar only, while B2C is deployed in the Europe region. What methods can be employed to allow B2C servers to successfully call the APIs?
asked 2024-10-13T13:41:49.18+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 18%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMW%3C/text%3E%3C/svg%3E)
Muhammad Waris
0
Reputation points
commented 2024-10-16T15:19:37.9+00:00
Ganesh Patapati
1,275
Reputation points Microsoft Vendor
1 answer
How to enable Streaming response for an App deployed on AKS?
Hi folks, Context: We have developed an App written FastAPI, which generates streaming response as the response is bigger in size. We have deployed this App in Azure Kubernetes Service. Application Gateway is configured as well for handling request and…
asked 2024-08-05T16:11:17.2866667+00:00
Surya Tiwari
0
Reputation points
commented 2024-10-16T11:33:21.7266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 0%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Marco Araujo
5
Reputation points