What are Microsoft's plans to enhance network policy features in Azure Container Apps for granular, layer 7 traffic control, similar to Kubernetes Network Policies?

Question

AKS provides granular network control through its network policy features, which can enforce isolation between application modules. However, this option might not be ideal given the my company emphasis on PaaS solutions.  

Given the growing need for granular network isolation in cloud-native applications, what are Microsoft's plans for enhancing network policy enforcement within Azure Container Apps (ACA) to achieve a level of control comparable to Kubernetes Network Policies, particularly in terms of layer 7 filtering and fine-grained traffic management?

Answer 1

Hi, Amuri. At the moment you can use Web Application Firewall on App Gateway in front of your Container Apps environment. There is Application Gateway for Containers for AKS, but it doesn't have Container Apps Support. I believe the product team are still recommending Web Application Gateway.