Skip to content

Commit a13222e

Browse files
author
gitName
committed
AB#1058603: Encrypt network traffic end to end with Azure Application Gateway
1 parent d01cc78 commit a13222e

12 files changed

+181
-181
lines changed
Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.1-introduction
3-
metadata:
4-
title: Introduction
5-
description: Introduction
6-
ms.date: 01/22/2024
7-
author: greg-lindsay
8-
ms.author: greglin
9-
ms.topic: unit
10-
title: Introduction
11-
durationInMinutes: 5
12-
content: |
13-
[!include[](includes/1-introduction.md)]
14-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.1-introduction
3+
metadata:
4+
title: Introduction
5+
description: Introduction
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
title: Introduction
11+
durationInMinutes: 5
12+
content: |
13+
[!include[](includes/1-introduction.md)]
14+
Lines changed: 45 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,45 +1,45 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.2-application-gateway-and-encryption
3-
metadata:
4-
title: Application Gateway and encryption
5-
description: Application Gateway and encryption
6-
ms.date: 01/22/2024
7-
author: greg-lindsay
8-
ms.author: greglin
9-
ms.topic: unit
10-
title: Application Gateway and encryption
11-
durationInMinutes: 10
12-
content: |
13-
[!include[](includes/2-application-gateway-and-encryption.md)]
14-
quiz:
15-
title: Check your knowledge
16-
questions:
17-
- content: "What are the benefits of using Application Gateway to help protect traffic sent to or from your applications?"
18-
choices:
19-
- content: "Application Gateway can implement an SSL connection with clients. There's no need to encrypt data sent from the gateway to the servers running your application."
20-
isCorrect: false
21-
explanation: "No. Although Application Gateway can use SSL to help protect communications with clients, you still need to encrypt data that passes between Application Gateway and the servers running your application."
22-
- content: "Application Gateway can implement an SSL connection with clients. Application Gateway can also implement an SSL connection with the servers running your application."
23-
isCorrect: true
24-
explanation: "This answer is correct."
25-
- content: "Application Gateway doesn't require an SSL connection with clients. All encryption is carried out by the connection with the servers running your application."
26-
isCorrect: false
27-
explanation: "No. You should configure Application Gateway to use SSL to communicate with clients and for connecting to the servers running your application."
28-
- content: "Application Gateway automatically protects the communications between clients and the servers running your application. You don't need to do any additional configuration."
29-
isCorrect: false
30-
explanation: "No. You must configure SSL for incoming requests from clients to Application Gateway, and for traffic transmitted between Application Gateway and the servers running your application."
31-
- content: "Which of the following can't be placed in the backend pool of an application gateway?"
32-
choices:
33-
- content: "Azure App Service"
34-
isCorrect: false
35-
explanation: "Azure App Service can be placed in a backend pool."
36-
- content: "Azure virtual machines"
37-
isCorrect: false
38-
explanation: "Azure virtual machines can be placed in a backend pool."
39-
- content: "Azure Cosmos DB"
40-
isCorrect: true
41-
explanation: "Correct. Azure Cosmos DB can't be placed in a backend pool."
42-
- content: "Azure virtual machine scale sets"
43-
isCorrect: false
44-
explanation: "Azure virtual machine scale sets can be placed in a backend pool."
45-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.2-application-gateway-and-encryption
3+
metadata:
4+
title: Application Gateway and encryption
5+
description: Application Gateway and encryption
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
title: Application Gateway and encryption
11+
durationInMinutes: 10
12+
content: |
13+
[!include[](includes/2-application-gateway-and-encryption.md)]
14+
quiz:
15+
title: Check your knowledge
16+
questions:
17+
- content: "What are the benefits of using Application Gateway to help protect traffic sent to or from your applications?"
18+
choices:
19+
- content: "Application Gateway can implement an SSL connection with clients. There's no need to encrypt data sent from the gateway to the servers running your application."
20+
isCorrect: false
21+
explanation: "No. Although Application Gateway can use SSL to help protect communications with clients, you still need to encrypt data that passes between Application Gateway and the servers running your application."
22+
- content: "Application Gateway can implement an SSL connection with clients. Application Gateway can also implement an SSL connection with the servers running your application."
23+
isCorrect: true
24+
explanation: "This answer is correct."
25+
- content: "Application Gateway doesn't require an SSL connection with clients. All encryption is carried out by the connection with the servers running your application."
26+
isCorrect: false
27+
explanation: "No. You should configure Application Gateway to use SSL to communicate with clients and for connecting to the servers running your application."
28+
- content: "Application Gateway automatically protects the communications between clients and the servers running your application. You don't need to do any additional configuration."
29+
isCorrect: false
30+
explanation: "No. You must configure SSL for incoming requests from clients to Application Gateway, and for traffic transmitted between Application Gateway and the servers running your application."
31+
- content: "Which of the following can't you place in the backend pool of an application gateway?"
32+
choices:
33+
- content: "Azure App Service"
34+
isCorrect: false
35+
explanation: "You can place Azure App Service in a backend pool."
36+
- content: "Azure virtual machines"
37+
isCorrect: false
38+
explanation: "You can place Azure virtual machines in a backend pool."
39+
- content: "Azure Cosmos DB"
40+
isCorrect: true
41+
explanation: "Correct. You can't place Azure Cosmos DB in a backend pool."
42+
- content: "Azure virtual machine scale sets"
43+
isCorrect: false
44+
explanation: "You can place Azure virtual machine scale sets in a backend pool."
45+
Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.3-configure-backend-pools-for-encryption
3-
metadata:
4-
title: Configure back-end pools for encryption
5-
description: Configure back-end pools for encryption
6-
ms.date: 01/22/2024
7-
author: greg-lindsay
8-
ms.author: greglin
9-
ms.topic: unit
10-
title: Configure back-end pools for encryption
11-
durationInMinutes: 10
12-
content: |
13-
[!include[](includes/3-configure-backend-pools-for-encryption.md)]
14-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.3-configure-backend-pools-for-encryption
3+
metadata:
4+
title: Configure back-end pools for encryption
5+
description: Configure back-end pools for encryption
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
title: Configure back-end pools for encryption
11+
durationInMinutes: 10
12+
content: |
13+
[!include[](includes/3-configure-backend-pools-for-encryption.md)]
14+
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.4-exercise-configure-backend-pools-for-encryption
3-
metadata:
4-
title: Exercise - Configure back-end pools for encryption
5-
description: Exercise - Create an application gateway and configure back-end pools for encryption
6-
ms.date: 01/16/2024
7-
author: vhorne
8-
ms.author: victorh
9-
ms.topic: unit
10-
ms.custom:
11-
- devx-track-azurecli
12-
title: Exercise - Configure back-end pools for encryption
13-
durationInMinutes: 30
14-
content: |
15-
[!include[](includes/4-exercise-configure-backend-pools-for-encryption.md)]
16-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.4-exercise-configure-backend-pools-for-encryption
3+
metadata:
4+
title: Exercise - Configure back-end pools for encryption
5+
description: Exercise - Create an application gateway and configure back-end pools for encryption
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
ms.custom:
11+
- devx-track-azurecli
12+
title: Exercise - Configure back-end pools for encryption
13+
durationInMinutes: 30
14+
content: |
15+
[!include[](includes/4-exercise-configure-backend-pools-for-encryption.md)]
16+
Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.5-configure-listener-for-encryption
3-
metadata:
4-
title: Configure an Application Gateway listener for encryption
5-
description: Configure an Application Gateway listener for encryption
6-
ms.date: 01/22/2024
7-
author: greg-lindsay
8-
ms.author: greglin
9-
ms.topic: unit
10-
title: Configure an Application Gateway listener for encryption
11-
durationInMinutes: 10
12-
content: |
13-
[!include[](includes/5-configure-listener-for-encryption.md)]
14-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.5-configure-listener-for-encryption
3+
metadata:
4+
title: Configure an Application Gateway listener for encryption
5+
description: Configure an Application Gateway listener for encryption
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
title: Configure an Application Gateway listener for encryption
11+
durationInMinutes: 10
12+
content: |
13+
[!include[](includes/5-configure-listener-for-encryption.md)]
14+
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.6-exercise-configure-listener-for-encryption
3-
metadata:
4-
title: Exercise - Configure an Application Gateway listener for encryption
5-
description: Exercise - Configure an Application Gateway listener for encryption
6-
ms.date: 01/22/2024
7-
author: greg-lindsay
8-
ms.author: greglin
9-
ms.topic: unit
10-
ms.custom:
11-
- devx-track-azurecli
12-
title: Exercise - Configure an Application Gateway listener for encryption
13-
durationInMinutes: 10
14-
content: |
15-
[!include[](includes/6-exercise-configure-listener-for-encryption.md)]
16-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.6-exercise-configure-listener-for-encryption
3+
metadata:
4+
title: Exercise - Configure an Application Gateway listener for encryption
5+
description: Exercise - Configure an Application Gateway listener for encryption
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
ms.custom:
11+
- devx-track-azurecli
12+
title: Exercise - Configure an Application Gateway listener for encryption
13+
durationInMinutes: 10
14+
content: |
15+
[!include[](includes/6-exercise-configure-listener-for-encryption.md)]
16+
Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.end-to-end-encryption-with-app-gateway.7-summary
3-
metadata:
4-
title: Summary
5-
description: Summary
6-
ms.date: 01/22/2024
7-
author: greg-lindsay
8-
ms.author: greglin
9-
ms.topic: unit
10-
title: Summary
11-
durationInMinutes: 2
12-
content: |
13-
[!include[](includes/7-summary.md)]
14-
1+
### YamlMime:ModuleUnit
2+
uid: learn.end-to-end-encryption-with-app-gateway.7-summary
3+
metadata:
4+
title: Summary
5+
description: Summary
6+
ms.date: 06/25/2025
7+
author: greg-lindsay
8+
ms.author: greglin
9+
ms.topic: unit
10+
title: Summary
11+
durationInMinutes: 2
12+
content: |
13+
[!include[](includes/7-summary.md)]
14+

learn-pr/azure/end-to-end-encryption-with-app-gateway/includes/3-configure-backend-pools-for-encryption.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,4 +67,4 @@ az network application-gateway http-settings create \
6767
--auth-certs <certificate name>
6868
```
6969

70-
If you're using Application Gateway v2, omit the `--auth-certs` parameter. Application Gateway contacts the backend server. It verifies the authenticity of the certificate presented by the server against the CAs specified by a list of trusted root certificates. If there's no match, Application Gateway won't connect to the backend server and will fail with an HTTP 502 (Bad Gateway) error.
70+
If you're using Application Gateway v2, omit the `--auth-certs` parameter. Application Gateway contacts the backend server. It verifies the authenticity of the certificate the server provides against the CAs specified by a list of trusted root certificates. If there's no match, Application Gateway won't connect to the backend server, and will fail with an HTTP 502 (Bad Gateway) error.

learn-pr/azure/end-to-end-encryption-with-app-gateway/includes/4-exercise-configure-backend-pools-for-encryption.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ The following image highlights the elements you configure in this exercise. You'
4242
```
4343

4444
> [!NOTE]
45-
> This script takes several minutes to finish. Allow it to work through multiple processes to unpack and configure the gateway and resources. You should see that the process succeeded with zero warnings and zero errors.
45+
> This script takes several minutes to finish. Allow it to work through multiple processes to unpack and configure the gateway and resources. You should see that the process succeeds with zero warnings and zero errors.
4646

4747
## Verify that the web server is configured correctly
4848

learn-pr/azure/end-to-end-encryption-with-app-gateway/includes/5-configure-listener-for-encryption.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
You've configured SSL for the connection between Azure Application Gateway and the servers in the backend pool. For the shipping portal, you need full end-to-end encryption. To do this encryption, you'll also need to encrypt the messages that the client sends to Application Gateway.
1+
You've configured SSL for the connection between Azure Application Gateway and the servers in the backend pool. For the shipping portal, you need full end-to-end encryption. To accomplish this encryption, you'll also need to encrypt the messages that the client sends to Application Gateway.
22

33
## Create a frontend port
44

0 commit comments

Comments
 (0)