Share via

Azure APIM (BASIC) with AKS

Tahmid Eshayat 286 Reputation points
2020-06-08T15:49:26.28+00:00

Hi there,

I am currently using the APIM (Basic Tier). I plan to deploy our microservice using AKS using the LoadBalancer / ingress controller. But both of them opens up a public IP to the world. But I want to make all of the application traffic go through APIM. I know using vNET I can keep AKS with interval IP. But APIM Premium gets really expensive for us. That's why, I'm looking for some workaround to that, with CORS maybe I can do that. But I'm looking for some cleaner way of doing it

Please let me know, help would be appreciated.

Thanks

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
1,896 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,950 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pramod Valavala 20,606 Reputation points Microsoft Employee
    2020-07-02T14:34:12.75+00:00

    Since the basic tier of APIM can't be deployed into a VNET, you will have to expose your services. You could either go for a load balancer + ingress controller combo or use Azure Application Gateway Ingress.

    Since APIM has a Static IP, you can setup an NSG rule to allow traffic only from APIM to your exposed service.

    0 comments
  2. Neha Oberoi 21 Reputation points
    2020-07-13T12:59:54.393+00:00

    @PramodValavala-MSFT : If I have apim ( consumption tier ) what will be the best way to secure api on aks ? As I don't have IP address in consumption tier question - https://learn.microsoft.com/en-us/answers/questions/46009/azure-apim-consumption-tier-with-dotnet-core-api-d.html

    0 comments