Skip to content

Commit 66e4ed1

Browse files
committed
fixed pr blockers
1 parent ba976c6 commit 66e4ed1

File tree

1 file changed

+29
-18
lines changed

1 file changed

+29
-18
lines changed

articles/frontdoor/how-to-enable-private-link-application-gateway.md

Lines changed: 29 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,19 @@
11
---
2-
title: 'Connect Azure Front Door Premium to an Application Gateway origin with Private Link (Preview)'
2+
title: 'Connect Azure Front Door Premium to an Azure Application Gateway origin with Private Link (Preview)'
33
titleSuffix: Azure Private Link
44
description: Learn how to connect your Azure Front Door Premium to an application gateway privately.
55
services: frontdoor
66
author: duongau
77
ms.service: azure-frontdoor
88
ms.topic: how-to
9-
ms.date: 09/18/2024
9+
ms.date: 09/20/2024
1010
ms.author: duau
1111
zone_pivot_groups: front-door-dev-exp-ps-cli
1212
---
1313

14-
# Connect Azure Front Door Premium to an Application Gateway with Private Link (Preview)
14+
# Connect Azure Front Door Premium to an Azure Application Gateway with Private Link (Preview)
1515

16-
This article guides you through the steps to configure Azure Front Door Premium to connect privately to your application gateway using Azure Private Link.
16+
This article guides you through the steps to configure an Azure Front Door Premium to connect privately to your Azure Application Gateway using Azure Private Link.
1717

1818
::: zone pivot="front-door-cli"
1919

@@ -22,15 +22,16 @@ This article guides you through the steps to configure Azure Front Door Premium
2222
Prerequisites:
2323
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
2424
- A functioning Azure Front Door Premium profile and endpoint. See [Create a Front Door - CLI](create-front-door-cli.md).
25-
- A functioning Azure Application Gateway. See [Direct web traffic with Azure Application Gateway - Azure CLI](/articles/application-gateway/quick-create-cli.md).
25+
- A functioning Azure Application Gateway. See [Direct web traffic with Azure Application Gateway - Azure CLI](../application-gateway/quick-create-cli.md).
2626

27-
## Enable Private Link on the Application Gateway
27+
## Enable private connectivity to Azure Application Gateway
2828

29-
Follow the steps in [Configure Azure Application Gateway Private Link](/articles/application-gateway/private-link-configure.md), skipping the last step of creating a private endpoint.
29+
Follow the steps in [Configure Azure Application Gateway Private Link](../application-gateway/private-link-configure.md), skipping the last step of creating a private endpoint.
3030

31-
## Create Origin Group and Origin on Azure Front Door
31+
## Create an origin group and add the application gateway as an origin
3232

3333
1. Create an origin group:
34+
3435
```azurecli-interactive
3536
az afd origin-group create \
3637
--resource-group myRGFD \
@@ -46,6 +47,7 @@ Follow the steps in [Configure Azure Application Gateway Private Link](/articles
4647
```
4748
4849
1. Add your application gateway as an origin:
50+
4951
```azurecli-interactive
5052
az afd origin create \
5153
--enabled-state Enabled \
@@ -69,23 +71,23 @@ Follow the steps in [Configure Azure Application Gateway Private Link](/articles
6971
> [!NOTE]
7072
> `SharedPrivateLinkResourceGroupId` is the same as the Application Gateway frontend IP configuration. This value may vary for different frontend IP configurations.
7173
72-
## Approve the Private Endpoint Connection
74+
## Approve the private endpoint connection
7375
74-
1. List the private endpoint connections:
76+
1. Retrieve the list of private endpoint connections:
7577
7678
```azurecli-interactive
7779
az network private-endpoint-connection list --name myAppGateway --resource-group myRGAG --type Microsoft.Network/applicationgateways
7880
```
7981
8082
1. Approve the private endpoint connection:
8183
84+
8285
```azurecli-interactive
8386
az network private-endpoint-connection approve --id /subscriptions/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e/resourceGroups/myRGAG/providers/Microsoft.Network/applicationGateways/myAppGateway/privateEndpointConnections/aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb.bbbbbbbb-1111-2222-3333-cccccccccccc
8487
```
8588
86-
## Complete Azure Front Door Setup
89+
1. Add a route to map the endpoint to the origin group:
8790
88-
Add a route to map the endpoint to the origin group:
8991
```azurecli-interactive
9092
az afd route create \
9193
--resource-group myRGFD \
@@ -112,14 +114,21 @@ Your Azure Front Door profile is now fully functional after completing the final
112114
[!INCLUDE [updated-for-az](~/reusable-content/ce-skilling/azure/includes/updated-for-az.md)]
113115
114116
[!INCLUDE [cloud-shell-try-it.md](~/reusable-content/ce-skilling/azure/includes/cloud-shell-try-it.md)]
117+
- - Have a functioning Azure Application Gateway. For more information on how to create an Application Gateway, see [Direct web traffic with Azure Application Gateway using Azure PowerShell](../application-gateway/quick-create-powershell.md)
118+
119+
120+
Add a route to map the endpoint to the origin group:
121+
115122
- Have a functioning Azure Front Door Premium profile and an endpoint. For more information on how to create an Azure Front Door profile, see [Create a Front Door - PowerShell](create-front-door-powershell.md).
116-
- Have a functioning Azure Application Gateway. For more information on how to create an Application Gateway, see [Direct web traffic with Azure Application Gateway using Azure PowerShell](/articles/application-gateway/quick-create-powershell.md)
123+
- Have a functioning Azure Application Gateway. For more information on how to create an Application Gateway, see [Direct web traffic with Azure Application Gateway using Azure PowerShell](../application-gateway/quick-create-powershell.md)
124+
125+
## Enable private connectivity to Azure Application Gateway
117126
118-
## Enable Private Link on Application Gateway
127+
1. Follow the instructions in [Configure Azure Application Gateway Private Link](../application-gateway/private-link-configure.md), but don't complete the final step of creating a private endpoint.
119128
120-
1. Follow the instructions in [Configure Azure Application Gateway Private Link](/articles/application-gateway/private-link-configure.md), but don't complete the final step of creating a private endpoint.
129+
## Create an origin group and add the application gateway as an origin
121130
122-
1. Use [New-AzFrontDoorCdnOriginGroupHealthProbeSettingObject](/powershell/module/az.cdn/new-azfrontdoorcdnorigingrouphealthprobesettingobject) to create an in-memory object for storing health probe settings.
131+
1. Use [New-AzFrontDoorCdnOriginGroupHealthProbeSettingObject](/powershell/module/az.cdn/new-azfrontdoorcdnorigingrouphealthprobesettingobject) to create an in-memory object for storing the health probe settings.
123132
124133
```azurepowershell-interactive
125134
# Create health probe settings
@@ -219,8 +228,10 @@ Your Azure Front Door profile is now fully functional after completing the final
219228
The following are common mistakes when configuring an application gateway origin with Private Link enabled:
220229
221230
1. Not configuring Private Link before starting the Azure Front Door creation steps.
222-
2. Adding the Azure Application Gateway origin with Private Link to an existing origin group that contains public origins. Front Door doesn't allow mixing public and private origins in the same origin group.
223-
3. Providing an incorrect Azure Application Gateway frontend IP configuration name as the value for `GroupId`.
231+
232+
1. Adding the Azure Application Gateway origin with Private Link to an existing origin group that contains public origins. Front Door doesn't allow mixing public and private origins in the same origin group.
233+
234+
1. Providing an incorrect Azure Application Gateway frontend IP configuration name as the value for `GroupId`.
224235
225236
## Next steps
226237

0 commit comments

Comments
 (0)