Understanding and Configuring Application Gateway
Vložit
- čas přidán 23. 07. 2024
- Application Gateway in Azure offers layer 7 load balancer capabilities that manage traffic to your web applications over HTTP or HTTPS. With Application Gateway, you can be even more specific about the route to be followed and the destination to be reached, which means that you can route traffic based on the incoming URL
Application Gateway not only has the load balancing abilities but also secures your application using Web Application Firewall.
==========================================
Certificate Creation Script:
\\\\Please modify the script as required\\\\
==========================================
$certificate = New-SelfSignedCertificate -certstorelocation cert:\localmachine\my -dnsname "*.aquilaconserv.com","*.scm.aquilaconserv.com"
$certThumbprint = "cert:\localMachine\my\" + $certificate.Thumbprint
$password = ConvertTo-SecureString -String "work4atcsl" -Force -AsPlainText
$fileName = "aquilaconserv.pfx"
Export-PfxCertificate -cert $certThumbprint -FilePath $fileName -Password $password
=========================================== - Věda a technologie
Well explained and a great demonstration! Thank you
Thanks Dawit.
One of the best training video in Azure.. Thank you so much..
Wow, thank you!
Most exhaustive explanation and amazing demo..thank you so much
Thank you so much Nilanjan. Your kind words of appreciation motivates to continue creating contents for you all.
Excellent information for Azure aspirants to the entry and mid level architect.
Glad you liked it! Thank you so much
A very very good presentation so far [I had to pause the video to comment :)]
Thank you so much. That keeps me motivated.
Its very nice and clear explanation, appreciate your efforts, good work.
Thank you Naresh.
Excellent explanation and great Demo. Thank you Neeraj Sir
Glad you liked it. Thank you so much
very nice explanation!!
Very nice and comprehensive tutorial. Thanks
Thank you so much for watching and for your kind words of appreciation.
best detailed tutorial. I like to see for other resources. Subscribing this channel. I like to purchase your azure tutorials. When I start to see this tutorial I started to note down the details. Thanks again.
Thank you so much Uddhav. That is really motivating. Would try even harder to keep up to the expectations.
Was very much helpful. Thanks.
Glad it was helpful! Thank you so much. This video is from 2019. Things have changed a bit from the screens perspective, but the concept remains the same.
Great tutorial. well detailed and explained
Thank you so much. Glad it was helpful!
Thank you for the great explanation sir!!!
Thank you so much, Pavan!
Great Video.. Well explained. Thanks
Thank you so much for your great comments and encouragement. That keeps me motivated.
HI,
Suppose a web application used a sticky session (aka "session affinity") and use session for data holding purpose. Can we deploy this kind web application to VM scale sets as backed pool to an AG and use as URLs filtering purpose? If not possible then what is alternative solutions?
Thanks,
First, apologies for the delayed response. I was traveling to the other side of the world.
This is a tricky question. You can use a cookie-based session affinity with Application Gateway to have a sticky session and have the request filtering as well. The twist is that you want to have the Virtual Machine Scale Set. When you use VMSS, the machines are automatically added and removed as per the load. I have never used them together, but I believe this will definitely work.
When new users are added beyond the capacity of the existing machines, a new machine is added and the users are directed to that machine and the machine exists until the users exist. So, in my opinion, this should work. The only difficulty that you might face is when you want to have request filtering (URL routing). In this case, the backend must exist. What you can do is define the VMSS in a way that you have sufficient machines, which will exist even when the load is less and have them used for request filtering.
I hope this helps and I was able to explain. In case you have any doubts, please reach back with your query.
Good video. It helps if you add the architecture diagram before going for implementation. Also it would be more helpful if u explain the need of certificate.
Thank you so much Deepak for watching my video and appreciating it. Your feedback is really good and duly noted for all future videos.
Very well explained
Glad it was helpful!
Hey Man, That's Fantastic and well explained for the Application Get way. However, I have a small concern, I'm looking to configure App Getway using IIS and I'm not intending to use App Service Environment, Can you advise me?
Thank you!!
Thank you for your kind words. If I understand you correctly, you do not want App Gateway to be used with ASE, which is a kind of private PAAS, rather want to configure App Gateway for IAAS. Now, what you can do is instead of using ASE (App Services Environment), you setup a Virtual Network, deploy virtual machines, and use these virtual machines as backend pools for Application Gateway. In the VMs, you can have the Web Server roles configured and use them as your front end web servers. Hope this helps.
Fantastic job man ........ 100/100
Glad you liked it. Thanks..
Thank you so much Neeraj for this great video...Can you please make few more videos showing some more features of AppGateway like httpredirect,etc
Thank you so much, Shampad for your kind words of appreciation. Glad that you liked it. This video is more than 1.5 years old and there are certain new features added post that. I need to cover them all, so I will make a new video definitely.
very nice , subscribed
Awesome, thank you!
hey i created app service environment but the ilb certificate is disable after the creation of ASE . can you please help me how to enable and add a SSL certificate.
Hello Ruksar, how did you create the certificate? You can create a self-signed certificate for this if this is not a production scenario. Also, where do you see the ILB as disabled? Please watch the video czcams.com/video/JrBecdmEoe8/video.html for step by step configuration.
Nice video!
Thanks! Glad you enjoyed it.
Well explained
Thanks Manas
Can we use application gateway without virtual network. I mean just configuring the appservice plan and app service. thank you.
Hello, Without the virtual network, you will not be able to create the application gateway as it needs the gateway subnet to be present, which can be there only if the virtual network is present, but for the app service plan and the app service, you can create it without the virtual network. as that is a PaaS service. Hope this helps
Hi, one question. We have a private DNS(example: abc.intra.com)for the ILB ASE. Now we need to make it internet facing but not use the same DNS but a different one(abc.extra.com) meant for internet. Is it possible to do this? Do you have any link where this is explained. Note that we have multiple function apps in the ASE.
Hi Sonam,
This is possible if you are using the Application Gateway. There, you do not need to use an ELB. You can point the Application Gateway to the ASE as well. You can point the external domain to the Application Gateway so that the incoming requests first looks at the AG and then routes the requests to ASE.
Regards,
Neeraj
@@AzureTrainingSeries thanks for the reply. So you mean that I map the extra dns to the app gateway dns. And in the app gateway I have mapping of the ASE in the backend pool. Nd some sort of rule is to be applied that if request comes from extra domain, we route it to the intra domain. Am I right?
@@AzureTrainingSeries also I didn't get the part where you said "There you do need to use an ELb". What is ELB?
ELB is the External Load Balancer with the Public IP
Yes Sonam, you are absolutely right. App Gateway will need the rules to be configured, where you can manage the conditions.
👍👍. Good
Very Nice explanation!! i Have one question, you created a VM for DNS Server.Can't we use Azure DNS for the same purpose??
Thanks a lot! Yes, you can use Azure DNS as well. The purpose was to cover as much nitty gritty as possible and that is the reason for this long video.
Great explanation sir ji, nice to hear you after long time.
Abhishek bhai, how are you? It has really been a long time. Nice to hear from you as well.
@@AzureTrainingSeries I am doing fine sir, yes it's been long time , 7 years to be exact.
Where are you these days? Share your contact details. You can comment as well, but the comment is not published until I approve.
Oh wow, that seems very complex to setup. All I wanted is to be able to put up a 'website in maintenance' page when our App Service is being updated. Some articles on the net points to Application Gateway, hence I was looking for videos of this topic. But I feel it is overkill for what we want to achieve...
Thanks for this
Glad you liked it!
Nice demo 👌
Thanks! 👍 Glad you liked it!
can two ssl certificates be installed in a gateway app for different sites?
It was possible to have two SSL certificates in App Gateway for two different sites earlier at the time when this video was recorded. Many things have been updated since then in the new App Gateway with WAF2. Need to check. Allow me some time and I will get back.
@@AzureTrainingSeries oh thank you, you are already very helpful !! I will wait for your answer
Hey friend I tried to configure ASE but I am not getting any option to add my domain name after virtual IP type tab. (in your video time 17:22 ). Please let me know it would be a great help. Thanks
Hello Omer,
Thanks for reaching out. The options have changed a little since the release of this video. Earlier, it used to give the option to add any name as the domain name to be used for the ASE, and that was inherited by the App Service Plan (ASP). Now they have removed this option and made one default domain name, which is ".appserviceenvironment.net".
You can however, add the domain name in the App Services directly, but these domain names are actual domain names registered with any registrar. You will have to verify the ownership by creating a TXT and an A record.
I hope I was able to explain.
@@AzureTrainingSeries Hi again :) I know how to add custom domain name but the problem is it wouldn't let us add sub domain. For example my domain is bbcjob.com with godaddy and i added it to azure app service custom domain name but now I need to add hr.bbcjob.co or hrbbcjob.com etc. Do you know how to do it ? Thanks
This is simple. Under Custom Domains, when you click on Add custom domain, you can add hr.bbcjob.com, and then under Hostname record type, select CNAME. Scroll down to the bottom where details will be given to verify ownership. You need to copy the details for both TXT record and CNAME and create those entries in your DNS settings in GoDaddy. Remember that the TXT record you create for the subdomain should have asuid.. In your case it should be asuid.hr.
For Top Level Domain (TLD), you create TXT and A record, but for subdomain, you create TXT and CNAME records.
@@AzureTrainingSeries oh my god it actually worked :) :) thanks for your help I can not believe it I was creating wrong records :(
I created asuidhr.bbcjob.com instead of asuid.hr. You saved my time :) Thanks
Glad to hear it worked for you.
I have created an application gateway and added a rule to redirect it to an external url. Now I deleted that rule, but it is still redirecting me to that url. Could you please tell me where I am doing wrong here ?
Hello Tamajit,
This is something which needs to be seen and then assessed. What pricing tier and what type of App Gateway did you choose?Can you please elaborate the architecture, and what exactly do you wish to achieve? You can explain with an example with some fake names.
@@AzureTrainingSeries Thanks a lot for your quick response, however I have identified the issue.. I had used 301 permanent redirect while creating the rule
Glad to hear that your issue got resolved.
where did you get the ip range from at 14:04
There are three private IP address ranges that you can use when defining your virtual network. They are -
Private IPv4 addresses
RFC1918 name IP address range Mask bits
24-bit block 10.0.0.0 - 10.255.255.255 8 bits
20-bit block 172.16.0.0 - 172.31.255.255 12 bits
16-bit block 192.168.0.0 - 192.168.255.255 16 bits
Hope this helps
@@AzureTrainingSeries i see. very well explained. tx very much man
if we want to know more about ASE where can we learn about it?
Hi, For App Services Environment, you can watch the other video czcams.com/video/JrBecdmEoe8/video.html
how to resolve the application gateway giving 502 error
Apologies for the delayed response. Error 502 indicates that there's something wrong with a website's server communication. Make sure that the backend rule and the backends are properly configured. There may be an issue due to the IP address or the FQDN. Please try to check this and let me know.
Hey can you make a video that cover aks with appgateway
Thank you for suggesting the topic. Will surely work on it.
Good video but can you please explain how can we check how many http requests our AppGW is getting?
Hi Atif,
Apologies for the delayed response. You can enable log analytics workspace for App Gateway and then monitor and analyze the logs using the Kusto Query Language.
great explanation of Application gateway
Thank you so much. Glad you liked it.
Hi, This AG is older and now it has come up with new LOOK, could you try doing one more video plz
Yes, you are right. I am a part of Microsoft's documentation for Application Gateway V2. I will be doing it, but in case you have any queries, please let me know and I shall try to answer.
@@AzureTrainingSeries Thanks for the reply.
1. I didn't understand why you created app service from ASE and went with AS plan, later used Godaddy for C-name record update.
2. You could have installed two windows VMs with ISS service and internal load balancer, and the given the internal LB IP address to the back-end pool.
3. Can you suggest on where do we add URL i.e. /Videos or /images and access AG
Orelse create multiple site added to the AG and accessed.
4. In live environment, is this good to use or go with Public LB
This question might not be answered in One line and need some practical session, incase you are busy then please ignore my query
There are two parts to your questions.
Q1. I didn't understand why you created app service from ASE and went with AS plan, later used Godaddy for C-name record update.
A1. ASE (App Services Environment) gives you the capability of having a dedicated/private PAAS for you, and it has an Isolated pricing tier. You can have multiple different ASP within ASE. It is a way of implementation. If you do not want a Private PAAS functionality. It is helpful for apps needing very high scale, isolation and secure network access, and high memory utilization. ASEs are isolated to running only a single customer's applications and are always deployed into a virtual network. Customers have fine-grained control over inbound and outbound application network traffic
Q2. You could have installed two windows VMs with ISS service and internal load balancer, and the given the internal LB IP address to the back-end pool.
A2. Yes, you are right. That is another way of working when you want to have complete control of your environment, and wish to manage your application within VMs and the VMs themselves.
Hope my response helps.
App gateway demo started at : 33:56
you giving demo on HTTP ,,, completly ignoring of https, cert handlling ... and you calling yourself an ENTERIZE ARCT... very funny ...
Making fun is easy and I bet you are good at it, but this is a free video and not something that you pay for. These videos on CZcams give you basic understanding upon which you need to work yourself to fine tune your skills.
worst video, even though not what trying to explain not much clear and confident
Hello Ganesh, Thank you for providing your feedback. This video is more than a year old. Things have changed a little, not just the interface and the options on the portal, but also the way I used to record the videos during the initial days. It definitely takes time to adjust and get used to.
By the way, you are the first one to be commenting this video as the worst video, although it has helped a lot of people and they appreciated the content and explanation. Please let me know what you could not understand and I would try to help you out.
@@AzureTrainingSeries Ignore above comments man, it was really informative video.. yeah you can add diagram as suggested in one of the comments but rest was really good..