Hello All, Earlier (stv1) Azure APIM instance - self hosted gateway, used to have a Deployment configuration end point url like (

Hi @AmitJaiswal-8743 Thanks for reaching out. Management endpoint is registered in public DNS but configuration endpoint is not. For internal VNET - assumption is that self hosted gateway has express route to APIM via internal VIP. Unfortunately according to PG, having a self-hosted connecting through an Application Gateway publicly isn't possible yet. However, having the configuration endpoint as a custom domain in apim is a feature that will be available soon, don't know the exact ETA. you can leave your feedback here https://aka.ms/apimwish so that other users who are in need to similar feature can upvote it and PG can take it forward. Please let me know incase of further queries, I would be happy to assist you.

Azure APIM - Self Hosted Gateway - New stv2 Configuration End Point - Custom Domain Issue

Accepted answer

JananiRamesh-MSFT 21,861 Reputation points

2022-07-13T16:48:34.4+00:00

Hi @AmitJaiswal-8743 Thanks for reaching out. Management endpoint is registered in public DNS but configuration endpoint is not. For internal VNET - assumption is that self hosted gateway has express route to APIM via internal VIP.

Unfortunately according to PG, having a self-hosted connecting through an Application Gateway publicly isn't possible yet. However, having the configuration endpoint as a custom domain in apim is a feature that will be available soon, don't know the exact ETA.

you can leave your feedback here https://aka.ms/apimwish so that other users who are in need to similar feature can upvote it and PG can take it forward.

Please let me know incase of further queries, I would be happy to assist you.
Please sign in to rate this answer.
Amit-J 316 Reputation points

2022-07-26T09:14:06.487+00:00

Hi Ramesh,

Thanks for the response.

There is no Express Route mechanism in place. Self Hosted Gateway will communicate over port 443 (internet) to APIM instance as per MS documentation.
Since you confirmed that there is no custom domain feature available for self hosted gateway - configuration end point, I should create my own DNS entries , custom domain for my APIM instance configuration end point ?

Is that the right understanding ?

Regards,
Amit

JananiRamesh-MSFT 21,861 Reputation points

2022-07-28T08:32:05.657+00:00

@AmitJaiswal-8743 Thanks for getting back, could you please let me know what is the exact flow/architecture do you have App gateway/ azure front door Infront of your APIM instance ?

Amit-J 316 Reputation points

2022-08-03T09:15:21.757+00:00

Hi,

The architecture is -

Azure Front Door --> Azure Application Gateway --> APIM (internal vNet)

And the self hosted gateway is inside AWS ECS (vNet) with outbound 443 connectivity enabled,

Please let me know if any other details are required.

Thanks,

Amit-J 316 Reputation points

2022-08-18T07:15:22.017+00:00

Hi Ramesh,

I created the custom domain on front door and pointed it to APIM private ip (host header overwrite) via App Gateway.
I am getting another error now.

[ConfigurationApiV2Skipped], message: The configured URL for the configuration API is not a supported v2 URL and we are skipping integration with it., source: ConfigurationApiClient
[ApiCapabilitiesDetermined], message: Gateway is capable to integrate with none of the configuration API(s), source: ConfigurationApiConnectionMonitor
exception: System.Exception: Gateway is not able to connect to Configuration API v2 nor v1

Self Hosted Gateway v2 endpoint : (<apim-instance-name>.configuration.azure-api.net) which is not reachable to internet because APIM is in internal vnet , so I created custom domain for it.
Front Door Custom Domain : configuration.<mycompany>.com

Please guide how can I make this work and we need a solution urgently.

Thanks.

Amit-J 316 Reputation points

2022-08-18T07:15:51.227+00:00

I can see from the earlier POC logs where APIM was open to internet, that self hosted gateway finally makes a call to https://apim-instance-name>.configuration.azure-api.net/gateways/<self-hosted-gateway-name>/snapshot to download configurations.. and it was working fine when APIM was open to internet.
But after I created a custom domain (front door) for my APIM (internal vnet) , i tried triggering the blank call via postman - https://configuration.<mycompany>.com/gateways/<self-hosted-gateway-name>/snapshot and I received 401 unauthorized error.. which means that the custom domain is working successfully and is able to reach the internal vnet config endpoint.

But while applying this new custom domain end point in my self hosted gateway, then at runtime self hosted gateway started generating error that it is not able to connect Config v2 or v1 - which is very strange. It is not even trying to download the snapshot of configuration.

Can you please suggest what can be done here ?
Shall I continue using v1 end point which uses management end point, but MS docs says it is not supported.
MS docs says for v2 custom domain some DNS changes are required, thats it, nothing much details were given.
https://learn.microsoft.com/en-us/azure/api-management/self-hosted-gateway-migration-guide#using-the-new-configuration-api

Please suggest the workaround

JananiRamesh-MSFT 21,861 Reputation points

2022-08-18T17:43:32.417+00:00

Hi @AmitJaiswal-8743 Thanks for getting back, I am sorry to hear that you are facing this issue. This setup of configuring custom domain for front door for APIM in internal vnet should work not sure why this is not working as this needs further troubleshooting and in order to better assist you with this, we would need to take a look at the configuration and hence I recommend you create a support ticket for a deeper investigation.

Do you have a support plan for this subscription? If not, no worries. I can have a one-time free support ticket created to have this specific issue investigated. I will share the details in a separate message after you confirm.

Amit-J 316 Reputation points

2022-08-22T13:25:28.723+00:00

Thanks Ramesh, I have the support plan, I created the ticket.

JananiRamesh-MSFT 21,861 Reputation points

2022-08-22T15:34:19.227+00:00

Hi @AmitJaiswal-8743 Thanks for the update. please share me the case number Would like to track it, thanks!

V Paul Charlie 6 Reputation points

2023-06-07T02:58:38.8933333+00:00

Did we solve this? I have exact same problem when APIM in internal VNET.
Sign in to comment

Azure APIM - Self Hosted Gateway - New stv2 Configuration End Point - Custom Domain Issue

0 additional answers