Azure APIM (BASIC) with AKS

Question

Hi there,

I am currently using the APIM (Basic Tier). I plan to deploy our microservice using AKS using the LoadBalancer / ingress controller. But both of them opens up a public IP to the world. But I want to make all of the application traffic go through APIM. I know using vNET I can keep AKS with interval IP. But APIM Premium gets really expensive for us. That's why, I'm looking for some workaround to that, with CORS maybe I can do that. But I'm looking for some cleaner way of doing it

Please let me know, help would be appreciated.

Thanks

Answer 1

@PramodValavala-MSFT : If I have apim ( consumption tier ) what will be the best way to secure api on aks ? As I don't have IP address in consumption tier question - https://learn.microsoft.com/en-us/answers/questions/46009/azure-apim-consumption-tier-with-dotnet-core-api-d.html

Answer 2

Since the basic tier of APIM can't be deployed into a VNET, you will have to expose your services. You could either go for a load balancer + ingress controller combo or use Azure Application Gateway Ingress.

Since APIM has a Static IP, you can setup an NSG rule to allow traffic only from APIM to your exposed service.