nit

Author: cachai2

articles/container-apps/firewall-integration.md

@@ -33,8 +33,8 @@ The following tables describe how to configure a collection of NSG allow rules.
 
 | Protocol | Source | Source ports | Destination | Destination ports | Description |
 |--|--|--|--|--|--|
-| TCP | Your client IPs | \* | Your container app's subnet<sup>1</sup> | `80`, `31080` | Allow your Client IPs to access Azure Container Apps when using HTTP. 31080 is the proxy port behind the load balancer which accepts traffic. |
-| TCP | Your client IPs | \* | Your container app's subnet<sup>1</sup> | `443`, `31443` | Allow your Client IPs to access Azure Container Apps when using HTTPS. 31443 is the proxy port behind the load balancer which accepts traffic. |
+| TCP | Your client IPs | \* | Your container app's subnet<sup>1</sup> | `80`, `31080` | Allow your Client IPs to access Azure Container Apps when using HTTP. 31080 is the proxy port behind the internal load balancer for Azure Container Apps. This is the port that accepts traffic and subsequently communicates with the container's target port(s). |
+| TCP | Your client IPs | \* | Your container app's subnet<sup>1</sup> | `443`, `31443` | Allow your Client IPs to access Azure Container Apps when using HTTPS. 31443 is the proxy port behind the internal load balancer for Azure Container Apps. This is the port that accepts traffic and subsequently communicates with the container's target port(s). |
 | TCP | AzureLoadBalancer | \* | Your container app's subnet | `30000-32676`<sup>2</sup> | Allow Azure Load Balancer to probe backend pools. | 
 
 # [Consumption only environment](#tab/consumption-only)