Hello, Good day to all. I have a general query related to the billing of Azure AppGw, Would Azure bill a WAF_v2 sku as Standard v2? If yes, under what circumstances/scenarios does it consider like this? and why? Let me know if you need more clarity on my ask. Thank you for the help in advance.

Hello @Alex , I understand that you would like to know under what circumstances/scenarios, Azure bill an Application gateway WAF_v2 SKU as Standard v2 and why. I checked regarding this behavior and found the below: This happens when you’ve provisioned a WAF_V2 and also enabled DDoS Network Protection . Since you're paying the monthly fee for DDoS Network Protection, there's no additional charges for WAF; and you're charged at the lower Standard_V2 rates. Refer: https://learn.microsoft.com/en-us/azure/application-gateway/understanding-pricing#example-6--waf_v2-with-ddos-network-protection-and-with-manual-scaling-set-to-2-instance Refer the pricing examples in the below DDOS pricing doc: https://azure.microsoft.com/en-us/pricing/details/ddos-protection/#pricing Kindly let us know if the above helps or you need further assistance on this issue. Please don’t forget to " Accept the answer " wherever the information provided helps you, this can be beneficial to other community members.

Application Gateway billing clarity

Alex 330

Hello,

Good day to all.

I have a general query related to the billing of Azure AppGw,

Would Azure bill a WAF_v2 sku as Standard v2?
1. If yes, under what circumstances/scenarios does it consider like this? and why?

Let me know if you need more clarity on my ask.

Thank you for the help in advance.

GitaraniSharma-MSFT 48,011 Reputation points Microsoft Employee

2024-04-29T10:00:14.3333333+00:00

Hello @Alex ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Azure Application gateway has different pricing for Standard V2 SKU and WAF V2 SKU as below:

And the gateways deployed are charged as per the SKU.

If the SKU has changed, then the pricing may change.

May I know if you have any particular instance that you would like to discuss further?

Regards,

Gita
Sreeju Nair 11,621 Reputation points

2024-04-29T10:06:29.1166667+00:00

The pricing for Application Gateway V2 and Web Application Firewall Application Gateway V2 differ in pricing. So they will be billed separately based on your deployment.

Refer: https://azure.microsoft.com/en-us/pricing/details/application-gateway/#purchase-options

In the case of V2 SKUs, you will incur fixed costs and CU (Capacity Unit Costs), os your total cost is the sum of fixed cost and capacity unit costs.

In the documentation, there are many example scenarios for the billing is given.

https://learn.microsoft.com/en-us/azure/application-gateway/understanding-pricing#fixed-costs-east-us-region-pricing

https://learn.microsoft.com/en-us/azure/application-gateway/understanding-pricing#example-2--waf_v2-instance-with-autoscaling

Hope this helps
Alex 330 Reputation points

2024-04-30T06:11:59.7866667+00:00
Hello @GitaraniSharma-MSFT ,

Thank you for the details, and, yes, I have seen this.

But there are some application gateways which are WAF_v2 sku, but it is being charged against Standard v2 sku, so just wanted to get clarity on how this can happen. Unfortunately, I wouldn't be able to share the resource details, but I guess the deployment of AppGw was done in either of the two ways below (it was done 3+ years back),

first deployed as Standard V2, then migrated to WAF V2 with WAF configuration (not policy) OR

deployed directly as WAF V2 with WAF configuration through Terraform.
GitaraniSharma-MSFT 48,011 Reputation points Microsoft Employee

2024-04-30T16:25:20.9433333+00:00

@Alex , thank you for the additional details.

Please allow me some time to check this internally and get back to you. If I don't find any similar cases, we can connect over email directly to discuss this further.

Regards,

Gita

Accepted answer

GitaraniSharma-MSFT 48,011 Reputation points Microsoft Employee

2024-05-02T15:30:50.83+00:00

Hello @Alex ,

I understand that you would like to know under what circumstances/scenarios, Azure bill an Application gateway WAF_v2 SKU as Standard v2 and why.

I checked regarding this behavior and found the below:

This happens when you’ve provisioned a WAF_V2 and also enabled DDoS Network Protection. Since you're paying the monthly fee for DDoS Network Protection, there's no additional charges for WAF; and you're charged at the lower Standard_V2 rates.

Refer: https://learn.microsoft.com/en-us/azure/application-gateway/understanding-pricing#example-6--waf_v2-with-ddos-network-protection-and-with-manual-scaling-set-to-2-instance

Refer the pricing examples in the below DDOS pricing doc: https://azure.microsoft.com/en-us/pricing/details/ddos-protection/#pricing

Kindly let us know if the above helps or you need further assistance on this issue.

Please don’t forget to "Accept the answer" wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.

1 person found this answer helpful.
Alex 330 Reputation points

2024-05-03T05:04:14.7566667+00:00

Hi @GitaraniSharma-MSFT ,

That's good to know. Thank you for the clarification.

We do use DDOS network protection plan for the Vnet where AppGw WAF_v2 is deployed.

GitaraniSharma-MSFT 48,011 Reputation points Microsoft Employee

2024-05-03T17:11:54.0933333+00:00

Hello @Alex , thank you for the update. I'm glad I could be of assistance.
Sign in to comment

Share via

Application Gateway billing clarity

0 additional answers