You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
***API Management landing zone accelerator**: [Reference architecture](/azure/architecture/example-scenario/integration/app-gateway-internal-api-management-function?toc=%2Fazure%2Fapi-management%2Ftoc.json&bc=/azure/api-management/breadcrumb/toc.json) and [design guidance](/azure/cloud-adoption-framework/scenarios/app-platform/api-management/landing-zone-accelerator?toc=%2Fazure%2Fapi-management%2Ftoc.json&bc=/azure/api-management/breadcrumb/toc.json)
27
27
28
-
29
28
> [!NOTE]
30
29
> This article has been updated to use the [Application Gateway WAF_v2 SKU](../application-gateway/application-gateway-autoscaling-zone-redundant.md).
31
30
@@ -42,8 +41,8 @@ To follow the steps described in this article, you must have:
- PFX files for API Management's custom host names: gateway, developer portal, and management endpoint.
46
-
- A CER file for the root certificate of the PFX certificates.
44
+
-Personal Information Exchange (PFX) files for API Management's custom host names: gateway, developer portal, and management endpoint.
45
+
- A Certificate (CER) file for the root certificate of the PFX certificates.
47
46
48
47
For more information, see [Certificates for the back end](../application-gateway/certificates-for-backend-authentication.md). For testing purposes, optionally generate [self-signed certificates](../application-gateway/self-signed-certificates.md).
49
48
@@ -62,7 +61,7 @@ In the first setup example, all your APIs are managed only from within your virt
62
61
***Back-end server pool**: This server pool is the internal virtual IP address of API Management.
63
62
***Back-end server pool settings**: Every pool has settings like port, protocol, and cookie-based affinity. These settings are applied to all servers within the pool.
64
63
***Front-end port**: This public port is opened on the application gateway. Traffic that hits it gets redirected to one of the back-end servers.
65
-
***Listener**: The listener has a front-end port, a protocol (Http or Https, these values are case sensitive), and the TLS/SSL certificate name (if configuring TLS offload).
64
+
***Listener**: The listener has a front-end port, a protocol (Http or Https, these values are case sensitive), and the Transport Layer Security (TLS) certificate name (if configuring TLS offload).
66
65
***Rule**: The rule binds a listener to a back-end server pool.
67
66
***Custom health probe**: Application Gateway, by default, uses IP address-based probes to figure out which servers in `BackendAddressPool` are active. API Management only responds to requests with the correct host header, so the default probes fail. You define a custom health probe to help the application gateway determine that the service is alive and should forward requests.
68
67
***Custom domain certificates**: To access API Management from the internet, create DNS records to map its host names to the Application Gateway front-end IP address. This mapping ensures that the Host header and certificate sent to API Management are valid. In this example, we use three certificates. They're for API Management's gateway (the back end), the developer portal, and the management endpoint.
0 commit comments