|
1 | 1 | ---
|
2 | 2 | title: What is Azure Application Gateway
|
3 |
| -description: Learn how you can use an Azure application gateway to manage web traffic to your application. |
| 3 | +description: Learn how you can use an Azure Application Gateway to manage web traffic to your application. |
4 | 4 | services: application-gateway
|
5 | 5 | author: vhorne
|
6 | 6 | manager: jpconnock
|
@@ -34,41 +34,41 @@ For example, requests for `http://contoso.com/video/*` are routed to VideoServer
|
34 | 34 |
|
35 | 35 | A common scenario for many web applications is to support automatic HTTP to HTTPS redirection to ensure all communication between an application and its users occurs over an encrypted path.
|
36 | 36 |
|
37 |
| -In the past, you may have used techniques such as creating a dedicated pool whose sole purpose is to redirect requests it receives on HTTP to HTTPS. Application gateway supports the ability to redirect traffic on the Application Gateway. This simplifies application configuration, optimizes the resource usage, and supports new redirection scenarios, including global and path-based redirection. Application Gateway redirection support is not limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well. |
| 37 | +In the past, you may have used techniques such as creating a dedicated pool whose sole purpose is to redirect requests it receives on HTTP to HTTPS. Application Gateway supports the ability to redirect traffic. This simplifies application configuration, optimizes the resource usage, and supports new redirection scenarios, including global and path-based redirection. Application Gateway redirection support is not limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well. |
38 | 38 |
|
39 | 39 | Application Gateway redirection support offers the following capabilities:
|
40 | 40 |
|
41 |
| -- Global redirection from one port to another port on the Gateway. This enables HTTP to HTTPS redirection on a site. |
| 41 | +- Global redirection from one port to another port on the application gateway. This enables HTTP to HTTPS redirection on a site. |
42 | 42 | - Path-based redirection. This type of redirection enables HTTP to HTTPS redirection only on a specific site area, for example a shopping cart area denoted by `/cart/*`.
|
43 | 43 | - Redirect to an external site.
|
44 | 44 |
|
45 | 45 | ## Multiple-site hosting
|
46 | 46 |
|
47 |
| -Multiple-site hosting enables you to configure more than one web site on the same application gateway instance. This feature allows you to configure a more efficient topology for your deployments by adding up to 20 web sites to one application gateway. Each web site can be directed to its own pool. For example, application gateway can serve traffic for `contoso.com` and `fabrikam.com` from two server pools called ContosoServerPool and FabrikamServerPool. |
| 47 | +Multiple-site hosting enables you to configure more than one web site on the same Application Gateway instance. This feature allows you to configure a more efficient topology for your deployments by adding up to 20 web sites to one application gateway. Each web site can be directed to its own pool. For example, Application Gateway can serve traffic for `contoso.com` and `fabrikam.com` from two server pools called ContosoServerPool and FabrikamServerPool. |
48 | 48 |
|
49 | 49 | Requests for `http://contoso.com` are routed to ContosoServerPool, and `http://fabrikam.com` are routed to FabrikamServerPool.
|
50 | 50 |
|
51 |
| -Similarly, two subdomains of the same parent domain can be hosted on the same application gateway deployment. Examples of using subdomains could include `http://blog.contoso.com` and `http://app.contoso.com` hosted on a single application gateway deployment. |
| 51 | +Similarly, two subdomains of the same parent domain can be hosted on the same Application Gateway deployment. Examples of using subdomains could include `http://blog.contoso.com` and `http://app.contoso.com` hosted on a single Application Gateway deployment. |
52 | 52 |
|
53 | 53 | ## Session affinity
|
54 | 54 |
|
55 |
| -The cookie-based session affinity feature is useful when you want to keep a user session on the same server. By using gateway-managed cookies, the Application Gateway can direct subsequent traffic from a user session to the same server for processing. This is important in cases where session state is saved locally on the server for a user session. |
| 55 | +The cookie-based session affinity feature is useful when you want to keep a user session on the same server. By using gateway-managed cookies, the application gateway can direct subsequent traffic from a user session to the same server for processing. This is important in cases where session state is saved locally on the server for a user session. |
56 | 56 |
|
57 | 57 | ## Secure Sockets Layer (SSL) termination
|
58 | 58 |
|
59 |
| -Application gateway supports SSL termination at the gateway, after which traffic typically flows unencrypted to the backend servers. This feature allows web servers to be unburdened from costly encryption and decryption overhead. However, sometimes unencrypted communication to the servers is not an acceptable option. This could be due to security requirements, compliance requirements, or the application may only accept a secure connection. For such applications, application gateway supports end to end SSL encryption. |
| 59 | +Application Gateway supports SSL termination at the gateway, after which traffic typically flows unencrypted to the back-end servers. This feature allows web servers to be unburdened from costly encryption and decryption overhead. However, sometimes unencrypted communication to the servers is not an acceptable option. This could be due to security requirements, compliance requirements, or the application may only accept a secure connection. For such applications, Application Gateway supports end-to-end SSL encryption. |
60 | 60 |
|
61 | 61 | ## Web application firewall
|
62 | 62 |
|
63 | 63 | Web application firewall (WAF) is a feature of Application Gateway that provides centralized protection of your web applications from common exploits and vulnerabilities. WAF is based on rules from the [OWASP (Open Web Application Security Project) core rule sets](https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project) 3.0 or 2.2.9.
|
64 | 64 |
|
65 |
| -Web applications are increasingly targets of malicious attacks that exploit common known vulnerabilities. Common among these exploits are SQL injection attacks, cross site scripting attacks to name a few. Preventing such attacks in application code can be challenging and may require rigorous maintenance, patching and monitoring at many layers of the application topology. A centralized web application firewall helps make security management much simpler and gives better assurance to application administrators against threats or intrusions. A WAF solution can also react to a security threat faster by patching a known vulnerability at a central location versus securing each of individual web applications. Existing application gateways can be converted to a web application firewall enabled application gateway easily. |
| 65 | +Web applications are increasingly targets of malicious attacks that exploit known vulnerabilities. Common among these exploits are SQL injection attacks and cross-site scripting (XSS) attacks. Preventing such attacks in application code can be challenging and may require rigorous maintenance, patching and monitoring at many layers of the application topology. A centralized web application firewall helps make security management much simpler and gives better assurance to application administrators against threats or intrusions. A WAF solution can also react to a security threat faster by patching a known vulnerability at a central location versus securing each deployment of individual web applications. Existing application gateways can be converted to a WAF-enabled application gateway easily. |
66 | 66 |
|
67 | 67 | ## Websocket and HTTP/2 traffic
|
68 | 68 |
|
69 |
| -Application Gateway provides native support for the WebSocket and HTTP/2 protocols. There's no user-configurable setting to selectively enable or disable WebSocket support. HTTP/2 support can be enabled using Azure PowerShell. |
| 69 | +Application Gateway provides native support for the WebSocket and HTTP/2 protocols. There is no user-configurable setting to selectively enable or disable WebSocket support. HTTP/2 support can be enabled using Azure PowerShell. |
70 | 70 |
|
71 |
| -The WebSocket and HTTP/2 protocols enable full duplex communication between a server and a client over a long running TCP connection. This allows for a more interactive communication between the web server and the client, which can be bidirectional without the need for polling as required in HTTP-based implementations. These protocols have low overhead, unlike HTTP, and can reuse the same TCP connection for multiple request/responses resulting in a more efficient utilization of resources. These protocols are designed to work over traditional HTTP ports of 80 and 443. |
| 71 | +The WebSocket and HTTP/2 protocols enable full-duplex communication between a server and a client over a long-running TCP connection. This allows for a more interactive communication between the web server and the client, which can be bidirectional without the need for polling as required in HTTP-based implementations. These protocols have low overhead, unlike HTTP, and can reuse the same TCP connection for multiple request/responses resulting in a more efficient utilization of resources. These protocols are designed to work over traditional HTTP ports of 80 and 443. |
72 | 72 |
|
73 | 73 |
|
74 | 74 |
|
|
0 commit comments