Azure Web Applicion Gateway and Firewall

Question

This is all a bit confusing. I think I know what I need, but can't figure out pricing. Azure is not very transparent with pricing.

This is what I am trying to accomplish.

Our application is simply a Web Application that also services API's from mobile apps. Pretty much everything is for authenticated users (except for landing page and login screen).

We currently have 1 Web Server VM (Windows with IIS) and 1 DB server. In the future, we will add multiple Web Server VM's. These are all stateless and simple round robin load balancing will be fine.

We have one public IP (currently just assigned to the 1 Web Server). The ONLY network traffic for our users to our Azure environment is over HTTPS (browser and API calls from mobile).

I have been looking over: https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-web-application-firewall-portal

So, from what I gather, I need to create an Application Gateway and then a Web Application Firewall. (I believe we already have all the other bits in place).

Now, what is the pricing for all that?

I found this page: https://azure.microsoft.com/en-us/pricing/details/application-gateway/ But it seems that there will be 2 recourses created.

The pricing calculator does not have a Web Application Firewall pricing.

I tried to contact sales, but after 20 minutes of going back and forth on chat, I just gave up. The sales guy was NO help in figuring out pricing.

Answer 1

Hi @Ben Levy ,

In order to calculate pricing for Application Gateway with WAF you need to select the tier as WAF or WAF_v2.

Application Gateway charge is based on the amount of time that the gateway is provisioned and available, as well as the amount of data processed by the application gateways. This charge is applicable per instance i.e., the number of instances you configure for your Application Gateway.

The charges for differen SKUs (Small/Medium/Large) are mentioned in the pricing document: https://azure.microsoft.com/en-us/pricing/details/application-gateway/. It also varies for Basic Tier and WAF tier. There is also a difference in the rates for Application Gateway and Application Gateway Standard V2 due to additional features offered.

Inbound Data transfers are free and Outbound Data transfers are charged as per the standard data transfer rates mentioned here: https://azure.microsoft.com/en-us/pricing/details/bandwidth/.

Hope this was helpful. Please let us know in case of any additional questions or concerns.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.