Alternatives to App gateway for exposing on-prem apis in the basic tier of APIM

Question

Alternatives to App gateway for exposing on-prem apis in the basic tier of APIM

Smruti Ranjan Nayak 81 Microsoft Employee

In the basic tier, there isn’t any vnet integration. onprem APIs can’t be accessed. App gateway needs to be used. Are there any viable alternatives to the Application Gateway in this context?

Luis Arias 8,621 Reputation points Volunteer Moderator

2024-01-18T13:18:58.3+00:00
Hi Smruti Ranjan Nayak,

As you mention in the Basic tier of Azure API Management, there is no VNet integration available to access on-premises APIs.

There are some options such us use Azure Application Gateway as a load balancer and reverse proxy. Another option from the onpremise side is whitelist your onprem Ip public and publish your APIs to be accessible directly from APIM, This will depends on you onprem architecture.

In all cases you need to implement the security baselines:

IP Restrictions

Mutual Certificate Authentication

OAuth

References:

https://stackoverflow.com/questions/58836571/recommended-way-to-reach-on-premises-api-through-api-management-without-premium

Azure security baseline for API Management - Network security

Front-end client communication - Azure API Management

Let me know if any of this options is working for you.

Luis
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
JananiRamesh-MSFT 29,276 Reputation points

2024-02-01T13:35:26.3866667+00:00

@Smruti Ranjan Nayak Following up to see if my answer helps. Do let me know if you have any queries. Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

1 answer

Your answer

Luis Arias 8,621 Reputation points Volunteer Moderator

2024-01-18T13:18:58.3+00:00

Hi Smruti Ranjan Nayak,

As you mention in the Basic tier of Azure API Management, there is no VNet integration available to access on-premises APIs.

There are some options such us use Azure Application Gateway as a load balancer and reverse proxy. Another option from the onpremise side is whitelist your onprem Ip public and publish your APIs to be accessible directly from APIM, This will depends on you onprem architecture.

In all cases you need to implement the security baselines:

IP Restrictions

Mutual Certificate Authentication

OAuth

References:

https://stackoverflow.com/questions/58836571/recommended-way-to-reach-on-premises-api-through-api-management-without-premium

Azure security baseline for API Management - Network security

Front-end client communication - Azure API Management

Let me know if any of this options is working for you.

Luis
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
JananiRamesh-MSFT 29,276 Reputation points

2024-02-01T13:35:26.3866667+00:00

@Smruti Ranjan Nayak Following up to see if my answer helps. Do let me know if you have any queries. Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Answer 1

@Smruti Ranjan Nayak Thanks for reaching out. You might be using the Basic tier of APIM integrated with Application Gateway to expose on-premises APIs because it provides a cost-effective solution for development and testing scenarios. if you're looking for alternatives please refer: https://stackoverflow.com/questions/58836571/recommended-way-to-reach-on-premises-api-through-api-management-without-premium

But I would suggest you use standardv2 tier.

let me know incase of further queries, I would be happy to assist you.

Share via

Alternatives to App gateway for exposing on-prem apis in the basic tier of APIM

1 answer

Your answer