Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,079 questions
Not able to establish connectivity from App Gateway to Cluster Services
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 66%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYB%3C/text%3E%3C/svg%3E)
Yogesh Bansal
0
Reputation points
We have now running service on AKS Cluster with its own Internal POD IPs (2 pod) and external IP mapped to these PODs. The service is also having a path associated with it in the URL.
We have now created an application gateway and created all backend pool and backend settings etc. to connect to these PODs services however we are still getting an error of bad gateway and not able to test the services health. Can someone pls help. We are trying from past couple of days but not having any clue -- it seems to be an issue with NSG.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 4%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Sina Salam 12,011 Reputation points2024-07-07T11:29:50.1833333+00:00 Hello Yogesh Bansal,
Welcome to the Microsoft Q&A and thank you for posting your questions here.
Problem
I understand that you are having the "Bad Gateway" error to establish connectivity from App Gateway to Cluster Services.
Solution
To resolve the "Bad Gateway" error you will need to ensure the health of your services through the Azure Application Gateway. Also, this is generic, first you will need to check your configurations and I provides a checklist to help ensure you have covered all necessary configurations.
- NSG rules allow traffic on the necessary ports.
- Correct IP addresses and ports in backend pool.
- Proper protocol in backend settings.
- Correctly configured health probes.
- Proper DNS resolution and Host headers.
- Logs enabled and reviewed for Application Gateway.
Therefore, to troubleshoot these issues you will need to follow the lists below and use the link for more detailed steps:
- Verify NSG Rules: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview and https://docs.microsoft.com/en-us/cli/azure/network/nsg/rule
- Check Backend Health: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics#backend-health-and-diagnostics and https://docs.microsoft.com/en-us/cli/azure/network/application-gateway#az_network_application_gateway_show_backend_health
- Verify Backend Pool Configuration: https://docs.microsoft.com/en-us/azure/application-gateway/configure-web-app-backend-pool and https://docs.microsoft.com/en-us/cli/azure/network/application-gateway/address-pool
- Review Backend Settings: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-http-settings and https://docs.microsoft.com/en-us/cli/azure/network/application-gateway/http-settings
- Check Probes Configuration: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-probe-overview and https://docs.microsoft.com/en-us/cli/azure/network/application-gateway/probe
- Inspect Application Gateway Logs: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics#application-gateway-logs and https://docs.microsoft.com/en-us/cli/azure/monitor/diagnostic-settings
- DNS and Host Header: (https://docs.microsoft.com/en-us/azure/application-gateway/tutorial-url-route and https://docs.microsoft.com/en-us/cli/azure/network/application-gateway/http-settings
- Test Direct Access to PODs: https://www.gnu.org/software/wget/manual/wget.html
- Check AKS Network Policies: https://docs.microsoft.com/en-us/azure/aks/use-network-policies
Accept Answer
I hope this is helpful! Do not hesitate to let me know if you have any other questions.
** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.
Best Regards,
Sina Salam
-
KapilAnanth-MSFT 46,776 Reputation points Microsoft Employee2024-07-10T07:15:49.17+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
You can check the BackendHealth of the BackendPools at "Backend Health" tab from App Gateway page.
- Can you confirm if the backends are healthy?
- If not, what error response are you seeing?
When you say "getting an error of bad gateway"
- Can you please be more specific
- Is it 502 or 504?
Cheers,
Kapil
Sign in to comment
Sign in to answer