Skip to content

Commit 5b3da7b

Browse files
Merge pull request #268787 from jaesoni/limitations-tls-proxy
Limitations tls proxy
2 parents c6053fb + 9b84a06 commit 5b3da7b

File tree

2 files changed

+5
-3
lines changed

2 files changed

+5
-3
lines changed

articles/application-gateway/mutual-authentication-overview.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: This article is an overview of mutual authentication on Application
44
services: application-gateway
55
author: greg-lindsay
66
ms.service: application-gateway
7-
ms.date: 07/29/2023
7+
ms.date: 03/12/2024
88
ms.topic: conceptual
99
ms.author: greglin
1010

@@ -32,7 +32,8 @@ If you're uploading a certificate chain with root CA and intermediate CA certifi
3232
Each SSL profile can support up to 100 trusted client CA certificate chains. A single Application Gateway can support a total of 200 trusted client CA certificate chains.
3333

3434
> [!NOTE]
35-
> Mutual authentication is only available on Standard_v2 and WAF_v2 SKUs.
35+
> * Mutual authentication is only available on Standard_v2 and WAF_v2 SKUs.
36+
> * Configuration of Mutual authentication for [TLS protocol listeners (preview)](tcp-tls-proxy-overview.md) is currently available through REST API, PowerShell, and CLI. Azure Portal support is coming soon.
3637
3738
### Certificates supported for mutual authentication
3839

articles/application-gateway/tcp-tls-proxy-overview.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: application-gateway
55
author: greg-lindsay
66
ms.service: application-gateway
77
ms.topic: conceptual
8-
ms.date: 03/01/2024
8+
ms.date: 03/12/2024
99
ms.author: greglin
1010
---
1111

@@ -46,6 +46,7 @@ Process flow:
4646

4747
- A WAF v2 SKU gateway allows the creation of TLS or TCP listeners and backends to support HTTP and non-HTTP traffic through the same resource. However, it does not inspect traffic on TLS and TCP listeners for exploits and vulnerabilities.
4848
- The default [draining timeout](configuration-http-settings.md#connection-draining) value for backend servers is 30 seconds. At present, a user-defined draining value is not supported.
49+
- Client IP preservation is currently not supported.
4950

5051
## Next steps
5152

0 commit comments

Comments
 (0)