Protecting Azure Container Apps with Application Gateway

When you're hosting apps in Azure Container Apps, you may not want to publish them directly to the internet. Instead, we can use a reverse proxy, such as Azure Application Gateway to intercept incoming traffic and direct it to the Container App.

In this video, I'll explain the purpose of using Application Gateway with your Container Apps, then we'll dive into building our resources with Bicep, including configuring Azure Private DNS Zones, Application Gateway, configuring backend pools, public IP address, frontends and private links. We'll then see how we can access our Container App through the public IP, instead of it's URL directly.

0:00 Introduction
1:32 Internal Container App Environment with Virtual Network
4:35 Creating a Private DNS Zone in Azure
7:13 Creating our Record Sets
9:00 Creating our Private DNS Zone Link
11:50 Creating our Application Gateway
13:30 Adding a Subnet for our Application Gateway
16:04 Configuring our Frontends and Creating our Public IP Address
18:09 Configuring our Backend Pool to route to our Container App
19:40 Configuring our Routing rules
25:12 Add Private Link to Application Gateway
28:19 Reviewing and Deploying our Bicep template
31:23 Accessing our Container App via the Public IP address
32:20 Wrap up

Grab the code for this video 👩‍💻🧑‍💻
Azure Container Apps with App Gateway: https://github.com/willvelida/azure-s...

Learn more! 🧠
Networking in Azure Container Apps environment: https://learn.microsoft.com/en-us/azu...

Connect with me! 🤝
Twitter:   / willvelida  
GitHub: https://github.com/willvelida
Bluesky: https://bsky.app/profile/willvelida.b...