Azure Application Gateway
Use Cases and Deployment Scope
I have been using Azure Application Gateway to provide a security appliance for my Azure App Service applications by utilizing TLS certificates. Also application gateway has been used in conjunction with Azure Web Application Firewall (WAF) to protect the organization against the known OWASP web application vulnerabilities. Azure Application Gateway has provided a way to isolate the security management team from the application and software development team and delegate only the necessary permissions to each team.
Pros
- TLS bridging (end-to-end TLS encryption)
- TLS offloading
- Web Application Firewall with OWASP Web Application security rules
- Scalability and performance
Cons
- More cost-effective pricing plans are welcome for the future, especially for WAF
- Ability to automate the TLS certificate renewal procedure
- Ability to manage non-HTTP traffic
Likelihood to Recommend
Azure Application Gateway is ideal for protecting web-based applications, especially those running on Azure App Service, Azure Container services or Azure IaaS Virtual Machines. Application Gateway is not well suited for non-HTTP workloads, even though it has limited support for TCP-based custom ports and act as a TCP reverse proxy. We are currently waiting on the TCP proxy feature of App Gateway to complete the Preview phase.

