question

StevenHoang-5089 avatar image
0 Votes"
StevenHoang-5089 asked SruthiSaranyaKarthikeyan-7489 commented

How to upgrate AKS ingresss to Azure WebApp Gateway safely

HI All,
I have an AKS cluster with egress firewall controlling and using nginx as for ingress controller. However, to increase the inbound security I would like to migrate to Azure Application Gateway.

How could I setup the gateway to work with Firewall?

Thanks
Steven

azure-kubernetes-serviceazure-application-gatewayazure-firewall
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

StevenHoang-5089 avatar image
0 Votes"
StevenHoang-5089 answered SruthiSaranyaKarthikeyan-7489 commented

Hi @SruthiSaranyaKarthikeyan-7489
Thanks for your answer, The sample above is AppGW + AKS however there is no egress controlling with Azure Firewall.

I saw this article

https://denniszielke.medium.com/securing-ingress-with-azureappgateway-and-egress-traffic-with-azurefirewall-for-azure-kubernetes-41af94051347

have both AppGW + Azure Firewall however, they are using some components developed by the community. I wonder why Microsoft is not fully supporting it?

btw, thank you so much for your help.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @StevenHoang-5089,

Thank you for the update.

If you'd like to provide feedback on these components to be included i'd suggest you post on https://feedback.azure.com/forums/217313-networking so that it can be reviewed by the Product Team and triaged for a feature request based on the number of upvotes.

For specific questions on components developed by the community you'd have to reach out to them for support as this is out of our scope. Hope you understand.

Do let me know if there's anything else i can help you with.

0 Votes 0 ·

Hi @StevenHoang-5089,

Do let me know if the above documentation helped or if you need any further assistance with respect to this thread.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

0 Votes 0 ·
SruthiSaranyaKarthikeyan-7489 avatar image
0 Votes"
SruthiSaranyaKarthikeyan-7489 answered

Hi @StevenHoang-5089,

The following documentation has the steps on how to setup create an AppGW Ingress Controller in AKS: https://docs.microsoft.com/en-us/azure/developer/terraform/create-k8s-cluster-with-aks-applicationgateway-ingress

Hope this helps. Do feel free to reach out in case of any questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.