Does Application Gateway is required for Azure App service?

Question

Hi,
we have deployed our web applications on Azure App Service.

Frontend Application is Integrated to One Vnet
Backend Application is Integrated to another Vnet

Requirement is to secure the Architecture of our setup.
Please let us know does Application Gateway is require.

Answer 1

You mention security so if you want to place a web application firewall (WAF) in front of your application then the Application Gateway (with the WAF feature enabled) is a good option here.

You can also use the WAF feature of Azure Front Door.

The below link gives a good description of your load balancing options if you are trying to decide between the two services.

https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

Answer 2

Thank you, @Deshmukh, Vijit , for reaching out to the Microsoft Q&A platform. Happy to answer your question.

Azure Application Gateway helps in managing the traffic directed towards users’ web applications. In addition, it has autoscaling features that help in deploying and as it is integrated into Azure is more secure. The header and Body of every request are checked against the rule Web Application Firewall (WAF) to determine if the request is valid or the security threat. Valid requests are routed to the backend pool, and invalid requests are blocked.

If you want to secure your application then you need to consider many other aspects (not just application gateway). Here is an article I wrote which explains the cloud chain kill model and the tools we can use to prevent them.

https://www.linkedin.com/pulse/build-healthy-secure-environment-azure-ravi-kanth-koppala/

----------

Please "Accept as Answer" and Upvote if any of the above helped so that, it can help others in the community looking for remediation for similar issues.