Application Gateway hosting multiple web sites

Mohamed jihad bayali 1,131

Hello Team,

I hope you're doing fine,

I have the following use case:

I have a VM on Azure, i installed docker in it, and containerized 3 web sites.

I want now to create an application gateway, and to put my VM behind that Application gateway to use WAF.

Since my 3 web sites are hosted and containerized on the same VM, they have 3 differents private IP addresses, is there a way on the application gateway for this use case to isolate and route the traffic for these 3 web sites?

I know on the application gateway we create backend servers and we associate with the url of the web site, in my case i will have 3 web sites that point on a single VM, is there a way to do this?

I was thinking, of creating my VM with 3 network interfaces, and then associate it's rule on the app gateway with a network interface?

What do you think about this?

KapilAnanth-MSFT 48,486 Reputation points Microsoft Employee

2023-07-03T13:51:55.26+00:00
@Mohamed jihad bayali

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

It's difficult to address your query without understanding how your background VMs are configure at the OS level.

However,

If you have a single VM, then I do not see a point in having 3 different NICs (private IPs)

Azure App gateway supports multidomain/wildcard URLs

Refer : Wildcard host names in listener

I would suggest you to route all the traffic destined to different websites (in same VM) to a single backend Pool

Cheers,

Kapil
Mohamed jihad bayali 1,131 Reputation points

2023-07-04T08:54:12.82+00:00

Hello Kapil,

Thanks for the feedback,

On the VM, i have docker installed on the VM as the OS layer, and i have 3 containers, each container is hosting a web site. and each web site has a private and unique ip address, and a unique URL.

As i said above, i want to use the application gateway to leverage the WAF. the idea that i'm having now, is :

1-Create an application gateway

2-Assign a front en public IP to the application Gateway
3-Create a backend Pool (The single VM that is hosting the 3 web sites)

4-Create 3 rules (Each rule will point to a single URL, port..and then map this rule will the private IP of the corresponding web site).

What do you think?
Konstantinos Passadis 19,281 Reputation points MVP

2023-07-04T09:00:42.7933333+00:00

Hello @@Mohamed jihad bayali !

Application Gateway is a Layer 7 Load Balancer with WAF Capabilities

As said earlier you dont need 3 NICS

The URL Routing and the Rules you create will forward traffic to the correct site of yours

You may need to test and trial cause of the specific setup of yours

https://learn.microsoft.com/en-us/azure/application-gateway/create-url-route-portal

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards
Konstantinos Passadis 19,281 Reputation points MVP

2023-07-04T17:40:35.39+00:00

Hello @@Mohamed jihad bayali !

Do you have any feedback or is your question answered?

In case any answer helped kindly mark it as Accepted and upvote so others can benefit as well!

Regards
KapilAnanth-MSFT 48,486 Reputation points Microsoft Employee

2023-07-05T12:56:21.2366667+00:00
@Mohamed jihad bayali

I understand.

I understand.

Technically, your requirement would work as long as the 2 secondary NICS are properly configured to receive packets.

Technically, your requirement would work as long as the 2 secondary NICS are properly configured to receive packets.

In your steps,

In your steps,

Step#3 :

You have to create 3 different backend Pools and add each NIC to every one of the pool

Step#4 :

Yes, you can use 3 RequestRoutingRules and 3 Listeners.

And for each Rule, you can use the appropriate backend Pool

Cheers,

Cheers,

Kapil
Mohamed jihad bayali 1,131 Reputation points

2023-07-05T13:04:27.1366667+00:00

Hello Kapil,

I did the tests, it's working
I didn't use 3 NICs, but just used directly the virtual IPs to the Rule when mapping to the backend.

My Question now :
I have one frontend public IP ( i think application gateway only support 1 public IP for the moment), and want to mutualize this Public to be used by the 3 sites (MultiSites configuration), for this if i understood well, i would need to upload the HTTPs certificate of the 3 sites on each listener right? so that the app gateway can now to which backend redirecting the traffic based on the url?
KapilAnanth-MSFT 48,486 Reputation points Microsoft Employee

2023-07-05T14:17:47.36+00:00
@Mohamed jihad bayali

I didn't use 3 NICs, but just used directly the virtual IPs to the Rule when mapping to the backend.

I did not quite get this part

Virtual IPs as in?

I have one frontend public IP ( i think application gateway only support 1 public IP for the moment), and want to mutualize this Public to be used by the 3 sites (MultiSites configuration),

Correct.

As long as you are using HTTPS, you can create three listeners with the same Port (443)

Just make sure you upload the correct certificate in each Listener.

Cheers,

Kapil
KapilAnanth-MSFT 48,486 Reputation points Microsoft Employee

2023-07-07T12:31:26.3933333+00:00

@Mohamed jihad bayali

Can you please update us if the action plan provided was helpful?

Should there be any follow-up questions or concerns, please let us know and we shall try to address them.

Thanks,

Kapil
KapilAnanth-MSFT 48,486 Reputation points Microsoft Employee

2023-07-10T09:35:59.32+00:00

@Mohamed jihad bayali

May I know if you got a chance to review my previous comment?

Please let me know if you are facing any challenges or if there are any follow-up questions, I shall be glad to address them.

Thanks,

Kapil

Share via

Application Gateway hosting multiple web sites

Your answer