Azure Application Gateway - deployment question

Question

We have a setup that consists of traffic manager and a number of Azure WebApps (with each webapp using azure managed certificates for HTTPS). These provide a XML web service which is well known at its trafficmanager.net URL. We need to filter out some requests by user-agent (so they don't hit the servers).

From what I've read an azure application gateway will be able to do this, but how do we get it between the traffic manager and the web-apps (and get it to use the managed certificates already created)?

Answer 1

@Mike Hudgell eti , Apologies for the delay in response. Generally, we deploy this architecture to achieve high availability across regions. You need to transfer the backend from TM to APPGW and add WAF enabled APPGW as an external endpoint/Azure endpoint to TM with its PIP. This way you should be able to use WAF rules to restrict the incoming requests.

----------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.