You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/container-apps/waf-app-gateway.md
+29-7Lines changed: 29 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,13 +5,13 @@ services: container-apps
5
5
author: cachai2
6
6
ms.service: azure-container-apps
7
7
ms.topic: how-to
8
-
ms.date: 03/31/2023
8
+
ms.date: 03/26/2025
9
9
ms.author: cachai
10
10
---
11
11
12
12
# Protect Azure Container Apps with Web Application Firewall on Application Gateway
13
13
14
-
When you host your apps or microservices in Azure Container Apps, you may not always want to publish them directly to the internet. Instead, you may want to expose them through a reverse proxy.
14
+
When you host your apps or microservices in Azure Container Apps, you might not always want to publish them directly to the internet. Instead, you might want to expose them through a reverse proxy.
15
15
16
16
A reverse proxy is a service that sits in front of one or more services, intercepting and directing incoming traffic to the appropriate destination.
17
17
@@ -48,9 +48,13 @@ Use the following steps to retrieve the values of the **default domain** and the
48
48
49
49
## Create and configure an Azure Private DNS zone
50
50
51
-
1. On the Azure portal menu or the *Home* page, select **Create a resource**.
51
+
To create and configure an Azure Private DNS zone, perform the following steps:
52
52
53
-
1. Search for *Private DNS Zone*, and select **Private DNS Zone** from the search results.
53
+
1. Go to the Azure portal.
54
+
55
+
1. In the search bar, enter **Private DNS Zone**.
56
+
57
+
1. Select **Private DNS Zone** from the search results.
54
58
55
59
1. Select the **Create** button.
56
60
@@ -110,8 +114,20 @@ Use the following steps to retrieve the values of the **default domain** and the
110
114
111
115
## Create and configure Azure Application Gateway
112
116
117
+
To create and configure an Azure Application Gateway, perform the following steps:
118
+
119
+
1. Go to the Azure portal.
120
+
121
+
1. In the search bar, enter **Application Gateway**.
122
+
123
+
1. Select **Application Gateway** from the search results.
124
+
125
+
Now, enter the required details under the *Basics* tab, *Frontends* tab, *Backends* tab, and *Configuration* tab.
126
+
113
127
### Basics tab
114
128
129
+
Perform the following steps:
130
+
115
131
1. Enter the following values in the *Project details* section.
116
132
117
133
| Setting | Action |
@@ -151,6 +167,8 @@ Use the following steps to retrieve the values of the **default domain** and the
151
167
152
168
### Frontends tab
153
169
170
+
Perform the following steps:
171
+
154
172
1. On the *Frontends* tab, enter the following values:
155
173
156
174
| Setting | Action |
@@ -174,7 +192,9 @@ The backend pool is used to route requests to the appropriate backend servers. B
174
192
- Fully qualified domain names (FQDN)
175
193
- Multi-tenant back-ends like Azure App Service and Container Apps
176
194
177
-
In this example, you create a backend pool that targets your container app.
195
+
In this example, you create a backend pool that targets your container app.
196
+
197
+
To create a backend pool, perform the following steps:
178
198
179
199
1. Select **Add a backend pool**.
180
200
@@ -197,7 +217,9 @@ In this example, you create a backend pool that targets your container app.
197
217
198
218
### Configuration tab
199
219
200
-
On the *Configuration* tab, you connect the frontend and backend pool you created using a routing rule.
220
+
On the *Configuration* tab, you connect the frontend and backend pool you created using a routing rule.
221
+
222
+
To connect the frontend and backend pool, perform the following steps:
201
223
202
224
1. Select **Add a routing rule**. Enter the following values:
203
225
@@ -266,7 +288,7 @@ On the *Configuration* tab, you connect the frontend and backend pool you create
266
288
267
289
## Add private link to your Application Gateway
268
290
269
-
You can establish a secured connection to internal-only container app environments by leveraging private link, as it allows your Application Gateway to communicate with your Container App on the backend through the virtual network.
291
+
You can establish a secured connection to internal-only container app environments using private link. Private link allows your Application Gateway to communicate with your Container App on the backend through the virtual network.
270
292
271
293
1. Once the Application Gateway is created, select **Go to resource**.
0 commit comments