Azure Front Door and Container App connect via Private Endpoint

Question

Hi,

There are 2 questions here as below:

1. In the creation of a new Container App, when setup the Container Apps Environment, we could turn off the public network access, and then assign virtual network to the Container App. However, in the "Ingress" section, once we have enable the ingress we could also limit the traffic to VNET only. Hence these settings seems redundant? Please advise.
2. I need to put the Container App behind Front Door, hence my Front Door need to forward the requests via private endpoint. Please advise the steps for that.

Thanks.

Answer 1

Hello , Welcome to MS Q&A

To answer 1st Question -->

In Azure Container Apps, the settings for public network access and ingress traffic serve different purposes, and understanding these can help optimize your environment's security and accessibility:

Public Network Access: This setting controls whether the entire Container App Environment is accessible from the public internet. Disabling it confines access to a private network, such as a Virtual Network (VNet), enhancing security by isolating the environment from public exposure.

Ingress Traffic: This setting manages how traffic is directed to individual container apps within the environment. Enabling ingress allows you to define how external traffic can access your container apps. Restricting ingress to a VNet ensures that only traffic from within the specified VNet can reach your container apps, providing an extra security layer.

For more detailed information, you can refer to the following Microsoft documentation:

• Ingress in Azure Container Apps
• Networking in Azure Container Apps environment

To answer your 2nd question -->

you can refer to the following documentation:

• Create a private link to an Azure Container App with Azure Front Door (preview)
• Connect Azure Front Door Premium to an App Service (Web App) origin with Private Link

Kindly check and let us know

Pls accept answer if it helps

Thanks

Deepanshu