Is it possible to use .azurewebsites.net domain with application gateway?

@KapilAnanth-MSFT Thank you, further if we go with the default domain of app service like in https://video2.skills-academy.com/en-us/azure/application-gateway/configure-web-app?wt.mc_id=knwlserapi_inproduct_azportal&tabs=defaultdomain%2Cazure-portal#configure-app-service-with-application-gateway can we somehow enable HTTPS for the default domain of app gateway since that is also owned by Microsoft? Currently I am running HTTP and I want to go to HTTPS and for that I need to upload SSL but domain is owned by Microsoft no?

@Najam ul Saqib - you are welcome

To answer your query,

• No
• Listeners with HTTPS require you to update a SSL certificate for the host name you define
  • See : Application Gateway listener configuration Protocol
• As you mentioned, since the domain is maintained by Microsoft, you will not be able to generate a SSL Certificate for this domain

To use HTTPS, you must consider using a custom domain.

• See : end-to-end TLS encryption.

Alternatively, you can consider using Azure Front Door which provides HTTPS capability even on the default domain.

NOTE :

• Using default domains or two different domains (one in proxy such as AFD/AppGW and one in the backend such as AppService) is not recommended as this could lead to potential issues such as
  • Incorrect absolute URLs
  • Incorrect redirect URLs
  • Broken cookies
• A detailed explanation is provided here : Host Name Preservation

The Implementation guidance from Azure would be to use a custom domain

Hope this helps

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

@KapilAnanth-MSFT I see WAF can be integrated with Front Door as well; which one is preferred btw Front Door or App Gateway if all I need is WAF in front of my web app?

@Najam ul Saqib - yes, WAF can be used with both AFD and AppGW.

However, please note that they offer different rule sets and require different configuration to achieve the end goal.

While both AppGW WAF and AFD WAF can be utilized to arrive at the end state,

• The major difference lies in the availability
• Note that AppGW is a regional resource while AFD is a Global resource
• This means, AFD is expected to have a low latency for users from a different region than the App Gateway

You can see the difference in features provided by them by comparing

• Azure Web Application Firewall on Azure Application Gateway
• Azure Web Application Firewall on Azure Front Door

Kindly choose the one that best suits your requirement and environment

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

@KapilAnanth-MSFT AG is a load-balancer and FD is a CDN service, what if we dont want CDN or load balancer and just want to deploy a WAF in front of app service?