You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/environment/creation.md
+26-19Lines changed: 26 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Create an App Service Environment
3
-
description: Learn how to create an App Service Environment. This single-tenant deployment of Azure App Service integrates with an Azure virtual network and supports internal or external virtual IP types.
3
+
description: Learn how to create an App Service Environment, which integrates with an Azure virtual network and supports internal or external virtual IP types.
4
4
author: seligj95
5
5
ms.topic: article
6
6
ms.date: 05/07/2025
@@ -13,7 +13,7 @@ ms.custom:
13
13
14
14
An [App Service Environment][Intro] is a single-tenant deployment of Azure App Service that integrates with an Azure virtual network. Each App Service Environment deployment requires a dedicated subnet that other resources can't use.
15
15
16
-
## Before you create your App Service Environment
16
+
## Before you create an App Service Environment
17
17
18
18
- Review the following settings before you create your environment. You can't change them later.
19
19
@@ -27,52 +27,59 @@ An [App Service Environment][Intro] is a single-tenant deployment of Azure App S
27
27
28
28
Ensure that your subnet is large enough to accommodate the maximum scale of your App Service Environment. Use a `/24` subnet with 256 addresses as the recommended size.
29
29
30
-
- Select your virtual IP type. The virtual IP type determines how your apps are accessed.
30
+
- Select your virtual IP (VIP) type. The virtual IP type determines how your apps are accessed.
31
31
32
32
Choose between the following two virtual IP types:
33
33
34
-
-*Internal VIP:* Your apps use an address within your App Service Environment subnet that doesn't appear in public Domain Name System (DNS). When you create your App Service Environment in the Azure portal, you can set up an Azure private DNS zone. Specify an *Inbound IP address* and select either *Automatic* or *Manual*.
34
+
-*Internal VIP:* Your apps use an address within your App Service Environment subnet that doesn't appear in public Domain Name System (DNS). When you create an App Service Environment in the Azure portal, you can set up an Azure private DNS zone. Specify an **Inbound IP address** and select either **Automatic** or **Manual**.
35
35
36
-
-*External VIP:* Your apps use a public-facing address listed in public DNS. You can specify an *Inbound IP address* and select either *Automatic* or *Manual*. If you select *Manual*, you must create a standard *Public IP address* in Azure first.
36
+
-*External VIP:* Your apps use a public-facing address listed in public DNS. You can specify an **Inbound IP address** and select either **Automatic** or **Manual**. If you select **Manual**, you must create a standard public IP address in Azure first.
37
37
38
38
- Select your deployment type. The deployment type determines how your apps are distributed across the App Service Environment. Choose between the following three types:
39
39
40
-
-*Regional deployment:* Also called a *nonzonal* deployment, this option is available in all regions that support App Service Environment v3. In regions with availability zones, your apps run in a single zone. If any availability zone in the region experiences an outage, regional deployments could experience downtime.
40
+
-*Regional deployment:* Also called a *nonzonal* deployment, this option is available in all regions that support App Service Environment v3. In regions with availability zones, your apps run in a single zone. If any availability zone in the region experiences an outage, regional deployments can experience downtime.
41
41
42
42
You must pay a minimum charge for one instance of Windows Isolated v2 in your App Service plan. When you use one or more instances, the charge is removed. This fee isn't additive.
43
43
44
-
-*Zone redundant deployment:* Zone redundancy ensures that workloads remain available even if one zone experiences an outage. In regions that support availability zones, you can configure App Service Environments so that apps are distributed across multiple availability zones within the same region. Your must include at least two instances in your App Service plan to ensure redundancy across zones. You can scale out by adding one or more instances at a time. For more information, see [Reliability in App Service Environments](../../reliability/reliability-app-service-environment.md).
44
+
-*Zone redundant deployment:* Zone redundancy ensures that workloads remain available even if one zone experiences an outage. In regions that support availability zones, you can configure App Service Environments so that apps are distributed across multiple availability zones within the same region. You must include at least two instances in your App Service plan to ensure redundancy across zones. You can scale out by adding one or more instances at a time. For more information, see [Reliability in App Service Environments](../../reliability/reliability-app-service-environment.md).
45
45
46
-
-*Host group deployment:* Your apps are deployed onto a dedicated host group. The dedicated host group isn't zone redundant. You can install and use your App Service Environment on dedicated hardware. There's no minimum instance charge for using App Service Environment on a dedicated host group. However, you must pay for the host group when you provision the App Service Environment. You also pay a discounted App Service plan rate as you create your plans and scale out.
46
+
-*Host group deployment:* Your apps are deployed onto a dedicated host group. The dedicated host group isn't zone redundant. You can install and use your App Service Environment on dedicated hardware. There's no minimum instance charge for using an App Service Environment on a dedicated host group. However, you must pay for the host group when you provision the App Service Environment. You also pay a discounted App Service plan rate when you create your plans and scale out.
47
47
48
48
A dedicated host group deployment allocates a finite number of cores, which both the App Service plans and the infrastructure roles use. This type of deployment can't reach the 200 total instance count normally available in App Service Environment. The number of total possible instances is related to the total number of App Service plan instances, plus the load-based number of infrastructure roles.
49
49
50
50
## Create an App Service Environment in the portal
51
51
52
-
To create an App Service Environment in the Azure portal, do the following steps.
52
+
To create an App Service Environment in the Azure portal, do the following steps:
53
53
54
54
1. Search Azure Marketplace for *App Service Environment v3*.
55
55
56
56
1. In the **Basics** tab, do the following steps:
57
+
57
58
- Select the subscription.
58
59
- Select or create the resource group.
59
60
- Enter the name of your App Service Environment.
60
61
61
62
Choose the **Virtual IP** type:
63
+
62
64
- Select **Internal** if you want the inbound address to be within your subnet.
63
65
- Select **External** if you want the inbound address to face the public internet.
64
66
65
-
Enter an **App Service Environment Name** that's less than 36 characters. The name also serves as the domain suffix. For example, if the name is *contoso* and you have an internal VIP, the domain suffix is `contoso.appserviceenvironment.net`. If the name is *contoso* and you have an external VIP, the domain suffix is `contoso.p.azurewebsites.net`.
67
+
Enter an **App Service Environment Name** that's fewer than 36 characters. The name also serves as the domain suffix.
68
+
69
+
- For example, if the name is *contoso* and you have an internal VIP, the domain suffix is `contoso.appserviceenvironment.net`.
70
+
- If the name is *contoso* and you have an external VIP, the domain suffix is `contoso.p.azurewebsites.net`.
66
71
67
72
:::image type="content" source="./media/creation/creation-basics.png" alt-text="Screenshot that shows the App Service Environment basics tab." border="true" lightbox="./media/creation/creation-basics.png":::
68
73
69
74
1. In the **Hosting** tab, configure the following settings:
70
75
71
-
- For **Physical hardware isolation**, select **Enabled** or **Disabled**. If you enable this option, you can deploy on dedicated hardware. When you create an App Service Environment v3 with a dedicated host deployment, Azure bills you for two dedicated hosts. As you scale, extra resources incur charges at the specialized Isolated v2 rate for each vCore.
76
+
- For **Physical hardware isolation**, select **Enabled** or **Disabled**.
77
+
78
+
If you enable this option, you can deploy on dedicated hardware. When you create an App Service Environment v3 with a dedicated host deployment, Azure bills you for two dedicated hosts. As you scale, extra resources incur charges at the specialized Isolated v2 rate for each vCore. For each instance, the following allocations apply:
72
79
73
-
- I1v2 uses two vCores for each instance.
74
-
- I2v2 uses four vCores for each instance.
75
-
- I3v2 uses eight vCores for each instance.
80
+
- I1v2 uses two vCores.
81
+
- I2v2 uses four vCores.
82
+
- I3v2 uses eight vCores.
76
83
77
84
- For **Zone redundancy**, select **Enabled** or **Disabled**.
78
85
@@ -89,13 +96,13 @@ To create an App Service Environment in the Azure portal, do the following steps
89
96
90
97
- Specify a private IP address by using the **Manual** option for **Inbound IP address**.
91
98
92
-
> [!NOTE]
93
-
> If you use an existing subnet that has either a network security group or route table associated with it, you must either delegate the subnet to `Microsoft.web/hostingEnvironments` or ensure that you have at least the following RBAC permissions for the associated resources:
99
+
:::image type="content" source="./media/creation/creation-networking-internal.png" alt-text="Screenshot that shows App Service Environment networking (App Service Environment Internal) selections." border="true" lightbox="./media/creation/creation-networking-internal.png":::
100
+
101
+
> [!NOTE]
102
+
> If you use an existing subnet that has either a network security group or route table associated with it, you must either delegate the subnet to `Microsoft.web/hostingEnvironments` or ensure that you have at least the following role-based access control (RBAC) permissions for the associated resources:
:::image type="content" source="./media/creation/creation-networking-internal.png" alt-text="Screenshot that shows App Service Environment networking (App Service Environment Internal) selections." border="true" lightbox="./media/creation/creation-networking-internal.png":::
98
-
99
106
If you create an App Service Environment with an external VIP, you can select a public IP address by using the **Manual** option for **Inbound IP address**.
100
107
101
108
:::image type="content" source="./media/creation/creation-networking-external.png" alt-text="Screenshot that shows App Service Environment networking (App Service Environment External) selections." border="true":::
@@ -104,7 +111,7 @@ To create an App Service Environment in the Azure portal, do the following steps
104
111
105
112
After you successfully create your App Service Environment, you can select it as a location when you create your apps.
106
113
107
-
To learn how to create an App Service Environment from an Azure Resource Manager template (ARM template), see [Create an App Service Environment by using an ARM template](how-to-create-from-template.md).
114
+
For more information, see [Create an App Service Environment by using an ARM template](how-to-create-from-template.md).
0 commit comments