How to Identify Standard Data Transfer out from Application Gateway?

Harsh Thakor 116 Reputation points
2024-02-03T13:20:48.31+00:00

How to identify Standard Data Transfer out from Application Gateway V2 and Azure App Services(Linux)? How to check exactly which data is going out and where it's going? Bandwidth Standard Data Transfer Out

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,518 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,083 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,931 questions
Azure Startups
Azure Startups
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Startups: Companies that are in their initial stages of business and typically developing a business model and seeking financing.
397 questions
{count} votes

1 answer

Sort by: Most helpful
  1. UJTyagi-MSFT 310 Reputation points Microsoft Employee
    2024-02-05T10:15:03.6233333+00:00

    Hi @Harsh Thakor Hope you are doing well!! Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well. I understand that you are having a query about your application gateway as how to check which data is going out and where it's going?  There are multiple ways to know data transferred out from Application Gateway V2 -

    • Using Application gateway Metrics - To check top 10 listeners specific data transferred out through application gateway. Go to Application Gateway Metric Blade and choose Bytes Sent, Select Apply splitting if you want to check listener specific data sent out through application gateway. Adjust the time duration for which you want to see total data transferred. This will just show the data transferred value but will not list the source and destination ip details. User's image
    •  Azure Monitor metrics for Application Gateway | Microsoft Learn
    • Using Application gateway Diagnostics logs - To list down all the client HTTP Requests and Response from the backend servers (if this is webapp) passing through application gateway and data transferred for each HTTP request from client and response from server, You can run below diagnostics query by going to Logs on application gateway Monitoring section. You should have a log analytics workspace enabled for running this query.

    User's image

    Query

    AzureDiagnostics
    
    | where ResourceType == "APPLICATIONGATEWAYS" and OperationName == "ApplicationGatewayAccess"
    
    

    As highlighted you can see sentBytes_d (data) which will see the data transferred out to the client from the application gateway.  By clicking Columns, you can choose which column you want to include in the query output. You can see the details of the client ip (Source ip) and Server Ip (Destination IP) along with application port and many other important details to the HTTP traffic. Refer below links -

     

    • Using NSG flow logs - Network security group flow logging is a feature of Azure Network Watcher that allows you to log information about IP traffic flowing through a network security group, If you have a NSG enforced on the Application Gateway subnet, this will allow you to see all the incoming and outgoing traffic for application gateway. You need a log analytics workspace to see the traffic.
    • Manage NSG flow logs - Azure portal - Azure Network Watcher | Microsoft Learn

     

    • Using Vnet flow logs - Virtual network (VNet) flow logs are a feature of Azure Network Watcher. You can use them to log information about IP traffic flowing through a virtual network associated with either application gateway or App Service. VNet flow logs is currently in PREVIEW. This preview version is provided without a service level agreement, and it's not recommended for production workloads.
    • Manage VNet flow logs - PowerShell - Azure Network Watcher | Microsoft Learn

     

    • For Billing Kindly refer to the below page - There are no upfront costs or termination costs associated with Application Gateway. You'll be billed only for the resources pre-provisioned and utilized based on actual hourly consumption. Costs associated with Application Gateway are classified into two components: fixed costs and variable costs. Actual costs within each component will vary according to the SKU being utilized. The below article describes the costs associated with each SKU and it's recommended that users utilize this document for planning and managing costs associated with the Azure Application Gateway.
    • Understanding pricing - Azure Application Gateway | Microsoft Learn

      If the answer below addressed your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.   Thanks, Ujjawal Tyagi  

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.