Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
Application Gateway hosting multiple web sites
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 43%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMJ%3C/text%3E%3C/svg%3E)
Mohamed jihad bayali
1,141
Reputation points
Hello Team,
I hope you're doing fine,
I have the following use case:
I have a VM on Azure, i installed docker in it, and containerized 3 web sites.
I want now to create an application gateway, and to put my VM behind that Application gateway to use WAF.
Since my 3 web sites are hosted and containerized on the same VM, they have 3 differents private IP addresses, is there a way on the application gateway for this use case to isolate and route the traffic for these 3 web sites?
I know on the application gateway we create backend servers and we associate with the url of the web site, in my case i will have 3 web sites that point on a single VM, is there a way to do this?
I was thinking, of creating my VM with 3 network interfaces, and then associate it's rule on the app gateway with a network interface?
What do you think about this?
Azure Application Gateway
{count} votes
-
KapilAnanth 49,866 Reputation points Moderator2023-07-03T13:51:55.26+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
It's difficult to address your query without understanding how your background VMs are configure at the OS level.
However,
- If you have a single VM, then I do not see a point in having 3 different NICs (private IPs)
- Azure App gateway supports multidomain/wildcard URLs
- Refer : Wildcard host names in listener
- I would suggest you to route all the traffic destined to different websites (in same VM) to a single backend Pool
Cheers,
Kapil
-
Mohamed jihad bayali 1,141 Reputation points
2023-07-04T08:54:12.82+00:00 Hello Kapil,
Thanks for the feedback,
On the VM, i have docker installed on the VM as the OS layer, and i have 3 containers, each container is hosting a web site. and each web site has a private and unique ip address, and a unique URL.
As i said above, i want to use the application gateway to leverage the WAF. the idea that i'm having now, is :
1-Create an application gateway
2-Assign a front en public IP to the application Gateway
3-Create a backend Pool (The single VM that is hosting the 3 web sites)4-Create 3 rules (Each rule will point to a single URL, port..and then map this rule will the private IP of the corresponding web site).
What do you think?
-
Konstantinos Passadis 19,691 Reputation points MVP2023-07-04T09:00:42.7933333+00:00 Hello @@Mohamed jihad bayali !
Application Gateway is a Layer 7 Load Balancer with WAF Capabilities
As said earlier you dont need 3 NICS
The URL Routing and the Rules you create will forward traffic to the correct site of yours
You may need to test and trial cause of the specific setup of yours
https://learn.microsoft.com/en-us/azure/application-gateway/create-url-route-portal
I hope this helps!
Kindly mark the answer as Accepted and Upvote in case it helped!
Regards
-
Konstantinos Passadis 19,691 Reputation points MVP
2023-07-04T17:40:35.39+00:00 Hello @@Mohamed jihad bayali !
Do you have any feedback or is your question answered?
In case any answer helped kindly mark it as Accepted and upvote so others can benefit as well!
Regards
-
KapilAnanth 49,866 Reputation points Moderator
2023-07-05T12:56:21.2366667+00:00 I understand.
I understand.
Technically, your requirement would work as long as the 2 secondary NICS are properly configured to receive packets.
Technically, your requirement would work as long as the 2 secondary NICS are properly configured to receive packets.
In your steps,
In your steps,
Step#3 :
You have to create 3 different backend Pools and add each NIC to every one of the pool
Step#4 :
- Yes, you can use 3 RequestRoutingRules and 3 Listeners.
- And for each Rule, you can use the appropriate backend Pool
Cheers,
Cheers,
Kapil
-
Mohamed jihad bayali 1,141 Reputation points
2023-07-05T13:04:27.1366667+00:00 Hello Kapil,
I did the tests, it's working
I didn't use 3 NICs, but just used directly the virtual IPs to the Rule when mapping to the backend.My Question now :
I have one frontend public IP ( i think application gateway only support 1 public IP for the moment), and want to mutualize this Public to be used by the 3 sites (MultiSites configuration), for this if i understood well, i would need to upload the HTTPs certificate of the 3 sites on each listener right? so that the app gateway can now to which backend redirecting the traffic based on the url? -
KapilAnanth 49,866 Reputation points Moderator
2023-07-05T14:17:47.36+00:00 I didn't use 3 NICs, but just used directly the virtual IPs to the Rule when mapping to the backend.
- I did not quite get this part
- Virtual IPs as in?
I have one frontend public IP ( i think application gateway only support 1 public IP for the moment), and want to mutualize this Public to be used by the 3 sites (MultiSites configuration),
- Correct.
- As long as you are using HTTPS, you can create three listeners with the same Port (443)
- Just make sure you upload the correct certificate in each Listener.
Cheers,
Kapil
-
KapilAnanth 49,866 Reputation points Moderator
2023-07-07T12:31:26.3933333+00:00 Can you please update us if the action plan provided was helpful?
Should there be any follow-up questions or concerns, please let us know and we shall try to address them.
Thanks,
Kapil
-
KapilAnanth 49,866 Reputation points Moderator
2023-07-10T09:35:59.32+00:00 May I know if you got a chance to review my previous comment?
Please let me know if you are facing any challenges or if there are any follow-up questions, I shall be glad to address them.
Thanks,
Kapil
Sign in to comment
Sign in to answer