Share via

Infrastructure Question, Application Gateway Configuration

Thomas Jeffcock 1 Reputation point
2020-09-29T13:31:46.557+00:00

Currently our infrastructure is that the application gateway is publicly facing, and is also on a VNET within a subnet and this subnet has an NSG around it.

The application gateway NSG allows it to talk to another Subnet within the same VNET that has the Internal Load Balancer.

What I would like is to add an NSG to the Load Balancer Subnet and within that NSG, add in the Inbound rules to only allow traffic coming in from the Application Gateway.

Is there anyway this can be done?

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

Azure Application Gateway
Azure Application Gateway

An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. suvasara-MSFT 10,166 Reputation points Moderator
    2020-09-29T14:14:53.487+00:00

    Hello,

    Resources deployed in different subnets but under same VNET can communicate by default. You can setup NSG rules on top of specific subnet allowing inbound to only APPGW IP and deny other.

    Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.