Is it possible that we can create single AGC in hub and use multiple frontends and a single association to connect to multiple clusters for different environment in spoke?

Question

Lets say i want to deploy application gateway for containers in Hub and the Multiple AKS clusters for different environment are in the Spoke. Is it possible that we can create single AGC in hub and use multiple frontends and a single association to connect to multiple clusters for different environment in spoke?

Answer 1

Hello , Welcome to MS Q&A

Creating a single Application Gateway for Containers (AGC) in a hub to connect to multiple AKS clusters in a spoke is possible, but there are some limitations to consider:

Multiple Frontends: An AGC can support multiple frontends, allowing you to configure more than one web application on the same port. This enables multi-site hosting by using unique backend services for different environments.

Single Association: Currently, an AGC is limited to a single association. This means that while you can have multiple frontends, the AGC can only be associated with one subnet in a virtual network. This limitation might affect your ability to connect to multiple AKS clusters if they are in different subnets.

For more detailed guidance, you can refer to the Azure documentation on multi-site hosting with Application Gateway for Containers.

Pls let me know if further ques

Kindly accept if it helps

Thanks
Deepanshu

Answer 2

Hi Janardhan Pittu,

In Continuation to above response of Deepanshukatara-6769,

Application Gateway for Containers currently cannot serve as a single ingress point for multiple AKS clusters across spokes due to its one-association-per-gateway limitation. https://github.com/MicrosoftDocs/azure-docs/blob/main/includes/application-gateway-for-containers-limits.md

While AGC is built to eventually support multiple associations (connections to multiple subnets/environments), today you are limited to just one association per AGC resource. This restricts each AGC instance to a single subnet and, by extension, typically a single AKS cluster.

Please check below documentation for more information:

https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/application-gateway-for-containers-components#application-gateway-for-containers-associations

If the information is helpful, please click on "Accept Answer" and "Upvote"

If you have any queries, please do let us know, we will help you.