Str.
Str.

Reputation: 1439

Azure application gateway restrict by source IP and server name

We have an Azure Appgw running fronting several different backend web servers in what used to be a "named virtual host setup".

We want to restrict the access to one virtual named host by request IP.

I know you can have a firewall entry as Network Security Group on the AppGW virtualnetwork/subnet.

But this is a simple layer 3 filter, no option to select the HTTP host name in the filter rule.

Any options other than setting up another AppGW?

Upvotes: 1

Views: 2705

Answers (1)

msrini-MSIT
msrini-MSIT

Reputation: 1502

Unfortunately, you will not be able to restrict traffic by client IP and HTTP headers using Application gateway as of now. You can only be able to restrict client by using NSG.

I would suggest Azure Frontdoor, which is might fit in your requirement.

Here is the documentation : https://learn.microsoft.com/en-us/azure/frontdoor/front-door-application-security

Regards, Msrini

Upvotes: 1

Related Questions