Azure Application Gateway [FULL COURSE IN 3.5 HOURS]
Vložit
- čas přidán 23. 07. 2024
- 00:00:00 Introduction
00:03:52 What is Azure Application Gateway?
docs.microsoft.com/en-us/azur...
00:09:33 How Azure Applicaiton Gateway Works?
docs.microsoft.com/en-us/azur...
00:13:54 Important Note!!
00:16:11 Routing Introduction
00:17:08 Create an Azure Application Gateway
Set-AzVMExtension -ResourceGroupName RG-AU-East -ExtensionName IIS -VMName VM01 -Publisher Microsoft.Compute -ExtensionType CustomScriptExtension -TypeHandlerVersion 1.4 -SettingString '{"commandToExecute":"powershell Add-WindowsFeature Web-Server; powershell Add-Content -Path \"C:\\inetpub\\wwwroot\\Default.htm\" -Value $($env:computername)"}' -Location "Australia East"
00:28:11 Host Multiple-Sites
Set-AzVMExtension -ResourceGroupName RG-AU-East -ExtensionName IIS -VMName VM01 -Publisher Microsoft.Compute -ExtensionType CustomScriptExtension -TypeHandlerVersion 1.4 -SettingString '{"commandToExecute":"powershell Add-WindowsFeature Web-Server; powershell Add-Content -Path \"C:\\inetpub\\wwwroot\\Default.htm\" -Value $($env:computername)"}' -Location "Australia East"
00:39:52 URL Routing / Path-Based Routing
$publicSettings = @{ "fileUris" = (,"raw.githubusercontent.com/Azu..."); "commandToExecute" = "powershell -ExecutionPolicy Unrestricted -File appgatewayurl.ps1"}
Set-AzVMExtension -ResourceGroupName RG-AU-East -Location "Australia East” -ExtensionName IIS -VMName GeneralVM -Publisher Microsoft.Compute -ExtensionType CustomScriptExtension -TypeHandlerVersion 1.4 -Settings $publicSettings
00:49:39 Redirection
New-SelfSignedCertificate -certstorelocation cert:\localmachine\my -dnsname www.contoso.com
$pwd = ConvertTo-SecureString -String "xxxx" -Force -AsPlainText
Export-PfxCertificate -cert cert:\localMachine\my\00000000000000000000000000 -FilePath c:\appgwcert.pfx -Password $pwd
01:02:40 Rewriting Sets
docs.microsoft.com/en-us/azur...
01:07:35 Internal Load Balancer (ILB)
Set-AzVMExtension -ResourceGroupName RG-AU-East -ExtensionName IIS -VMName VM01 -Publisher Microsoft.Compute -ExtensionType CustomScriptExtension -TypeHandlerVersion 1.4 -SettingString '{"commandToExecute":"powershell Add-WindowsFeature Web-Server; powershell Add-Content -Path \"C:\\inetpub\\wwwroot\\Default.htm\" -Value $($env:computername)"}' -Location "Australia East"
01:16:57 Auto Scaling & Zone Redundancy
01:22:57 SSL Introduction
01:23:45 SSL Termination
New-SelfSignedCertificate -certstorelocation cert:\localmachine\my -dnsname www.contoso.com
$pwd = ConvertTo-SecureString -String "xxxx" -Force -AsPlainText
Export-PfxCertificate -cert cert:\localMachine\my\0000000000000000000000000 -FilePath c:\appgwcert.pfx -Password $pwd
01:34:41 End-to-End SSL Encryption
01:38:43 Mutual Authentication & SSL Policies
01:42:08 AKS Ingress Controller Introduction
01:43:04 Ingress Controller for AKS (Greenfield)
az aks create -n myCluster -g RG-AU-East --network-plugin azure --enable-managed-identity -a ingress-appgw --appgw-name myApplicationGateway --appgw-subnet-cidr "10.2.0.0/16" --generate-ssh-keys
az aks get-credentials -n myCluster -g RG-AU-East
kubectl apply -f raw.githubusercontent.com/Azu...
01:47:30 Ingress Controller for AKS (Brownfield)
az aks create -n myCluster -g RG-AU-East --network-plugin azure --enable-managed-identity
az aks get-credentials -n myCluster -g myResourceGroup
kubectl apply -f raw.githubusercontent.com/Azu...
01:56:49 Web Application Firewall (WAF)
02:05:09 Monitoring Introduction
02:06:08 Diagnostic Settings
02:09:51 Metrics
02:22:11 Alerts
02:27:45 Log Analytics
02:31:42 Health Probe & Backend Health
02:37:36 Advanced Topics Introduction
02:38:09 High Traffic Support
02:51:57 Pricing
docs.microsoft.com/en-us/azur...
02:55:28 Cookie-Affinity
02:57:29 Connection Draining
02:58:52 Custom Error Pages
03:01:35 Web Sockets Support
docs.microsoft.com/en-us/azur...
03:03:00 Application Gatewat Tiers
docs.microsoft.com/en-us/azur...
03:04:42 Configurations Introduction
03:05:20 Infrastructure
docs.microsoft.com/en-us/azur...
03:09:31 Front-End IP
docs.microsoft.com/en-us/azur...
03:11:01 Listeners
docs.microsoft.com/en-us/azur...
03:13:18 Routing Rules
03:14:46 HTTP Settings
03:15:50 BackEnd Pools - Věda a technologie
Every minute was gold , such a comprehensive tutorial on Application GWs , Thank you !
Glad it was helpful!
Thank you Hussein for the detailed and in-depth video about one and most critical service in Azure. Glad you are here to help azure community along the way !!!
Thanks @Rakavana for your nice words! hope you enjoy it my friend!
I'm glad to see your new video uploaded after many days. You explain in great detail what I like.
I will learn something new today.
Thanks buddy! I was busy over the past few weeks but now I'm back to it. Hope you enjoy it my friend 🙂
These in depth tutorials are so useful even for non beginners. Amazing work!
Thanks Jeff, much appreciated!!
Perfect video Hussein. I hope you make more!
Thanks a lot Villaran92, sure I'm working on more videos!
great content! love how you closely refer to ms docs unlike other trainers who come up with their own interpretations which usually end up confusing the learner
Much appreciated!!
That is an awsome course. Highly appreciated!! Shared successfully with Linkedin connections.
Thanks Mo!! Much appreciated!
Sunday ended great by learning your 3hrs video
Ty for knowledge sharing
My pleasure Maverick!
Wow... simple superb explanation..
Looking forward to learn many Azure videos.
Thank you for your best efforts!! 👏
Thanks for your nice words Thive :) all the best!
Hi Hussein,Thanks for uploading. Very good explanation i really apricate you. Please do more videos about Azure and Azure DevOps.
One of the best tutorials 👏👏👏👏!!!
Thanks Rabbit!
Thank you for the detailed explanation and practical knowledge
Thanks Pramod!
Thank you very much.Wonderful explaining Hussain. Expecting more videos like Azure key vault… Azure load balancer
Pleasure, yup these are on my list already!!
Really helpful tutorial. Thanks a lot!
Glad you find it useful!
Never seen such pin to pin explanation before. You speak students’ mind. Great. Please put a video on subnet , vnet, and ip address space .
Thank you! Much appreciated! Will do!
Super helpful - thank you very much for your valuable content !! Pls keep sharing your knowledge and wisdom with us !! #StayBlessednHappy
Thanks Anil for your nice words!
Great!
I Know your content is top notch. Are you aware of any other CZcams channel which can provide such quality content ? CZcams algorithm hardly recommend video from channel like yours, so asking if there are other channel which are of great help, still lost/hard to find on CZcams. Thank you once again for your time and efforts !!
Thanks Anil, I'll keep an eye for you for some interesting channels and will let you know when I found some good channels :)
It would be very helpful if u cud add more azure PAAS services videos as well, ur API video is awesome
It's on my list Siddiqui! Thanks for the feedback!
Great course ... I was wondering how to deploy application gateway and azure waf for only one on premise web server with 01 Public IP Address ... is it possible ?
please upload more azure videos like k8s networking etc, we are waiting for long time
Very informative video I have seen in youtube till now for Azure App GW.
Hussein one question - Do we need to have any NSG's also for App-GW ?
Thank you! As AppGW needs to be provisioned in a subnet, then you can specify NSG for this subnet which is going to impact the AppGW
Thanks very much for the video, excellent and valuable content, detailed explanation, and super helpful!
Quick question, at 1:00:10 you created a self-signed certificate (locally in your machine/laptop), and exported it to PFX format.
In Azure App Gateway at 1:00:32 you've selected the certificate from the dropdown list to configure "Https" settings.
Did you upload the certificate to "KeyVault"? Just wondering how the locally created certificate showing up in Azure Portal. (Also "No Warning" message for a self-signed certificate)
Thanks in advance
Please ignore my above comment, as I can see the certificate upload process to App Gateway, and "warning message" for the self-signed certificate, at 1:31:20 and 1:33:51. Thanks again!
My pleasure!
a question (i know it is old video :) but observed) .. at 21:58 there is FrontendIP that is in dropdown box as 'Public'. However, the name that you used is different while creating PublicIPAddress. Why is it different and how it was working at the end. Help me pl?
Hi
Thank you for the vedio,
Just wanted to ask you a reg custom error pages.
for 403 unauthorized , which senario 403 forbidon will dispaly for clients ?
That's a lot of scenarios! Probably best to look up for 403 response code
Sir this video doesn't gave application gateway for containers
Salam Hussien,
I have a question regarding listerners.
When do I need to create more than 1 listener? if the listener has multisite option so I think I don't need another one right? So the question is when to add new listener?
Based on your architecture whether you want to configure a multi site listener or a multiple listeners.
Hi I am looking for subdomain configuration, could you help me.
Good question, did you review my video?!
Just wondering where to buy your other azure course
I've got some on Udemy!
Why do you edit the hosts file? Is that done locally ?
Yes
Can you point me to one of your videos to Zero Trust config? Application gateway in front of Azure firewall in an hub and spoke configuration? 🥺🥺🥺
You'd need to combine the learnings of multiple videos to get to this outcome!!
@@husseinawad673 Ok boss
Hi everyone
You got me:)
Hey.. thanks for such a great explanation...just want to know if you can give some light on increasing the timeout for api gateway more than 240 seconds