Back to Details

azure-application-gateway

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Application Gateway Skill

Azure Application Gateway Skill

This skill provides expert guidance for Azure Application Gateway. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
本Skill为Azure Application Gateway提供专业指导，涵盖故障排查、最佳实践、决策指导、限制与配额、安全、配置、集成与编码模式以及部署等内容。它结合了本地速查内容与远程文档获取功能。

How to Use This Skill

如何使用本Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent使用注意事项: 请使用下方的分类索引定位相关章节。对于带有行范围的分类（如
L35-L120
），使用
read_file
工具读取指定行内容；对于带有文件链接的分类（如
[security.md](security.md)
），使用
read_file
工具读取链接的参考文件
Agent使用注意事项: 如果
metadata.generated_at
的时间超过3个月，建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，建议用户按照安装指南进行安装
本Skill需要网络访问权限来获取文档内容：
  • 首选方式: 使用
    mcp_microsoftdocs:microsoft_docs_fetch
    工具，附加查询字符串
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备选方式: 使用
    fetch_webpage
    工具，附加查询字符串
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL36-L41Diagnosing and fixing Application Gateway runtime issues: backend health, 502s, certificates/Key Vault, listeners, session affinity, mTLS, redirects, AKS/ALB/containers, and HTTP response codes.
Best PracticesL42-L46Guidance on designing Application Gateway for very high traffic: sizing, autoscaling, performance tuning, capacity planning, and configuration patterns to handle large loads reliably.
Decision MakingL47-L56Guidance on choosing networking and pricing for Application Gateway, and planning migrations (AGIC to containers, v1 retirement, classic VMs to ARM)
Limits & QuotasL57-L63Autoscaling and zone redundancy settings, gateway capacity and configuration limits, and guidance for migrating from Application Gateway v1 to v2.
SecurityL64-L106TLS/SSL, certificates, mTLS, WAF, DDoS, HSTS, and secure access patterns for Application Gateway and App Gateway for Containers, including Key Vault, cert-manager, and protocol/cipher policies
ConfigurationL107-L171Configuring Application Gateway and Application Gateway for Containers: listeners, routing, probes, health, headers/URL rewrites, WebSockets/gRPC, monitoring, alerts, and AKS/AGIC integration.
Integrations & Coding PatternsL172-L179Patterns for integrating App Gateway for Containers with monitoring, security, and scaling: Prometheus/Grafana, Istio, Sentinel/Defender, and autoscaling AKS pods via gateway metrics.
DeploymentL180-L194Guides for deploying and migrating Application Gateway (v1→v2, IPv6, mTLS), configuring autoscale, and setting up/upgrading AGIC with AKS using portal, ARM, PowerShell, and Helm.
分类行范围描述
故障排查L36-L41诊断并解决Application Gateway运行时问题：后端健康状态、502错误、证书/Key Vault、监听器、会话亲和性、mTLS、重定向、AKS/ALB/容器以及HTTP响应码相关问题。
最佳实践L42-L46指导如何设计适用于高流量场景的Application Gateway：规模规划、自动缩放、性能调优、容量规划以及可靠处理大流量的配置模式。
决策指导L47-L56指导如何选择Application Gateway的网络架构与定价方案，以及规划迁移（AGIC到容器版、v1版本退役、经典VM到ARM）
限制与配额L57-L63自动缩放与区域冗余设置、网关容量与配置限制，以及从Application Gateway v1迁移到v2的指导。
安全L64-L106TLS/SSL、证书、mTLS、WAF、DDoS、HSTS以及Application Gateway和容器版应用网关的安全访问模式，包括Key Vault、cert-manager和协议/密码套件策略
配置L107-L171配置Application Gateway和容器版应用网关：监听器、路由、探针、健康状态、头部/URL重写、WebSockets/gRPC、监控、告警以及AKS/AGIC集成。
集成与编码模式L172-L179容器版应用网关与监控、安全、缩放功能的集成模式：Prometheus/Grafana、Istio、Sentinel/Defender，以及通过网关指标实现AKS Pod自动缩放。
部署L180-L194Application Gateway部署与迁移指南（v1→v2、IPv6、mTLS）、配置自动缩放，以及使用门户、ARM、PowerShell和Helm设置/升级AKS集成的AGIC。

Troubleshooting

故障排查

TopicURL
Use ALB Controller backend health and metrics for troubleshootinghttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/alb-controller-backend-health-metrics
Troubleshoot common issues in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/troubleshooting-guide
主题链接
使用ALB Controller后端健康状态与指标进行故障排查https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/alb-controller-backend-health-metrics
排查容器版应用网关常见问题https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/troubleshooting-guide

Best Practices

最佳实践

TopicURL
Plan Application Gateway for high traffic volume scenarioshttps://learn.microsoft.com/en-us/azure/application-gateway/high-traffic-support
主题链接
规划适用于高流量场景的Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/high-traffic-support

Decision Making

决策指导

TopicURL
Choose container networking for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/container-networking
Plan migration from AGIC to Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/migrate-from-agic-to-agc
Estimate and understand pricing for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/understanding-pricing
Plan migration for Azure Application Gateway V1 retirementhttps://learn.microsoft.com/en-us/azure/application-gateway/retirement-faq
Understand billing and pricing for Azure Application Gateway SKUshttps://learn.microsoft.com/en-us/azure/application-gateway/understanding-pricing
FAQ for migrating classic VMs to Azure Resource Managerhttps://learn.microsoft.com/en-us/previous-versions/azure/virtual-machines/migration/migration-classic-resource-manager-faq
主题链接
为容器版应用网关选择容器网络架构https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/container-networking
规划从AGIC迁移到容器版应用网关https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/migrate-from-agic-to-agc
估算并理解容器版应用网关的定价https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/understanding-pricing
规划Azure Application Gateway V1版本退役的迁移工作https://learn.microsoft.com/en-us/azure/application-gateway/retirement-faq
理解Azure Application Gateway SKU的计费与定价https://learn.microsoft.com/en-us/azure/application-gateway/understanding-pricing
经典VM迁移到Azure Resource Manager常见问题https://learn.microsoft.com/en-us/previous-versions/azure/virtual-machines/migration/migration-classic-resource-manager-faq

Limits & Quotas

限制与配额

TopicURL
Configure autoscaling and zone redundancy for Application Gateway v2https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant
Reference common limits and behaviors for Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-faq
Plan migration from Application Gateway v1 to v2https://learn.microsoft.com/en-us/azure/application-gateway/overview-v2
主题链接
配置Application Gateway v2的自动缩放与区域冗余https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant
Azure Application Gateway常见限制与行为参考https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-faq
规划从Application Gateway v1迁移到v2https://learn.microsoft.com/en-us/azure/application-gateway/overview-v2

Security

安全

TopicURL
Set listener-specific TLS/SSL policies on Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-configure-listener-specific-ssl-policy
Configure TLS protocol and cipher suite policy on Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-configure-ssl-policy-powershell
Configure end-to-end TLS on Application Gateway with PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-end-to-end-ssl-powershell
Deploy a private Azure Application Gateway with restricted accesshttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-private-deployment
Secure Application Gateway session affinity cookie flagshttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-secure-flag-session-affinity
Configure TLS policies and cipher suites for Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview
Plan for TLS 1.0/1.1 retirement on Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-tls-version-retirement
Prepare certificates for backend authentication in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/certificates-for-backend-authentication
Configure Key Vault-based TLS certificates via portalhttps://learn.microsoft.com/en-us/azure/application-gateway/configure-key-vault-portal
Integrate Key Vault certificates for TLS on Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configure-keyvault-ps
Set up end-to-end TLS on Application Gateway via portalhttps://learn.microsoft.com/en-us/azure/application-gateway/end-to-end-ssl-portal
Enable FIPS 140-compliant mode on Application Gateway v2https://learn.microsoft.com/en-us/azure/application-gateway/fips
Configure ECDSA and RSA TLS certificates on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/ecdsa-rsa-certificates
Configure backend mTLS for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-backend-mtls-gateway-api
Use cert-manager and Let’s Encrypt with Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-cert-manager-lets-encrypt-gateway-api
Integrate cert-manager and Let’s Encrypt with Application Gateway for Containers Ingresshttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-cert-manager-lets-encrypt-ingress-api
Configure end-to-end TLS with Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-end-to-end-tls-gateway-api
Configure end-to-end TLS with Application Gateway for Containers Ingresshttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-end-to-end-tls-ingress-api
Enable frontend mTLS on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-frontend-mtls-gateway-api
Configure SSL offloading on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-ssl-offloading-gateway-api
Configure SSL offloading using Ingress API for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-ssl-offloading-ingress-api
Test and configure Web Application Firewall on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-waf-gateway-api
Configure TLS policy for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/tls-policy
Configure Web Application Firewall on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/web-application-firewall
Add HSTS security header using Application Gateway rewritehttps://learn.microsoft.com/en-us/azure/application-gateway/hsts-http-headers-portal
Use Let's Encrypt certificates with Application Gateway for AKShttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-letsencrypt-certificate-application-gateway
Configure JWT validation with Azure Application Gateway and Entra IDhttps://learn.microsoft.com/en-us/azure/application-gateway/json-web-token-overview
Use Azure Key Vault certificates for Application Gateway TLS terminationhttps://learn.microsoft.com/en-us/azure/application-gateway/key-vault-certs
Export trusted client CA chains for Application Gateway client authhttps://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-certificate-management
Configure mutual TLS authentication on Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-overview
Configure mutual TLS authentication on Application Gateway via portalhttps://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-portal
Configure mutual TLS on Application Gateway with PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-powershell
Secure Application Gateway access using Private Linkhttps://learn.microsoft.com/en-us/azure/application-gateway/private-link
Renew TLS certificates for Azure Application Gateway listenershttps://learn.microsoft.com/en-us/azure/application-gateway/renew-certificates
Generate self-signed certificates for Application Gateway v2 backendshttps://learn.microsoft.com/en-us/azure/application-gateway/self-signed-certificates
Manage listener TLS certificates in Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/ssl-certificate-management
Protect Application Gateway with Azure DDoS Network Protectionhttps://learn.microsoft.com/en-us/azure/application-gateway/tutorial-protect-application-gateway-ddos
Configure TLS termination on Application Gateway with CLIhttps://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ssl-cli
Configure TLS termination on Application Gateway with PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ssl-powershell
主题链接
在Application Gateway上配置监听器专属TLS/SSL策略https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-configure-listener-specific-ssl-policy
在Application Gateway上配置TLS协议与密码套件策略（PowerShell）https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-configure-ssl-policy-powershell
在Application Gateway上配置端到端TLS（PowerShell）https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-end-to-end-ssl-powershell
部署具有受限访问权限的私有Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-private-deployment
为Application Gateway会话亲和性Cookie设置安全标记https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-secure-flag-session-affinity
为Application Gateway配置TLS策略与密码套件https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview
规划Application Gateway上TLS 1.0/1.1版本退役工作https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-tls-version-retirement
为Application Gateway后端认证准备证书https://learn.microsoft.com/en-us/azure/application-gateway/certificates-for-backend-authentication
通过门户配置基于Key Vault的TLS证书https://learn.microsoft.com/en-us/azure/application-gateway/configure-key-vault-portal
为Application Gateway的TLS集成Key Vault证书（PowerShell）https://learn.microsoft.com/en-us/azure/application-gateway/configure-keyvault-ps
通过门户在Application Gateway上配置端到端TLShttps://learn.microsoft.com/en-us/azure/application-gateway/end-to-end-ssl-portal
在Application Gateway v2上启用FIPS 140合规模式https://learn.microsoft.com/en-us/azure/application-gateway/fips
为容器版应用网关配置ECDSA与RSA TLS证书https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/ecdsa-rsa-certificates
为容器版应用网关配置后端mTLS（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-backend-mtls-gateway-api
将cert-manager与Let’s Encrypt用于容器版应用网关（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-cert-manager-lets-encrypt-gateway-api
将cert-manager与Let’s Encrypt用于容器版应用网关Ingress APIhttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-cert-manager-lets-encrypt-ingress-api
为容器版应用网关配置端到端TLS（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-end-to-end-tls-gateway-api
为容器版应用网关配置端到端TLS（Ingress API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-end-to-end-tls-ingress-api
在容器版应用网关上启用前端mTLS（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-frontend-mtls-gateway-api
在容器版应用网关上配置SSL卸载（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-ssl-offloading-gateway-api
使用Ingress API为容器版应用网关配置SSL卸载https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-ssl-offloading-ingress-api
在容器版应用网关上测试并配置Web应用防火墙（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-waf-gateway-api
为容器版应用网关配置TLS策略https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/tls-policy
在容器版应用网关上配置Web应用防火墙https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/web-application-firewall
使用Application Gateway重写规则添加HSTS安全头部https://learn.microsoft.com/en-us/azure/application-gateway/hsts-http-headers-portal
将Let's Encrypt证书用于AKS集成的Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-letsencrypt-certificate-application-gateway
配置Azure Application Gateway与Entra ID的JWT验证https://learn.microsoft.com/en-us/azure/application-gateway/json-web-token-overview
将Azure Key Vault证书用于Application Gateway TLS终止https://learn.microsoft.com/en-us/azure/application-gateway/key-vault-certs
导出Application Gateway客户端认证的可信CA链https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-certificate-management
在Azure Application Gateway上配置双向TLS认证https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-overview
通过门户在Application Gateway上配置双向TLS认证https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-portal
使用PowerShell在Application Gateway上配置双向TLS认证https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-powershell
使用Private Link保护Application Gateway访问https://learn.microsoft.com/en-us/azure/application-gateway/private-link
续订Azure Application Gateway监听器的TLS证书https://learn.microsoft.com/en-us/azure/application-gateway/renew-certificates
为Application Gateway v2后端生成自签名证书https://learn.microsoft.com/en-us/azure/application-gateway/self-signed-certificates
管理Azure Application Gateway监听器的TLS证书https://learn.microsoft.com/en-us/azure/application-gateway/ssl-certificate-management
使用Azure DDoS网络保护保护Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/tutorial-protect-application-gateway-ddos
使用CLI在Application Gateway上配置TLS终止https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ssl-cli
使用PowerShell在Application Gateway上配置TLS终止https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ssl-powershell

Configuration

配置

TopicURL
Configure HTTP header rewrite in Application Gateway via PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/add-http-header-rewrite-rule-powershell
Use backend health reports in Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-backend-health
Configure custom probe in classic Application Gateway via PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-classic-ps
Create custom health probe in Application Gateway portalhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-portal
Configure custom probe in Application Gateway via PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-ps
Configure and interpret Application Gateway diagnostic logshttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics
Create and manage Application Gateway with ILB endpointhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ilb-arm
Use Azure Monitor metrics for Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-metrics
Health probe behavior and configuration in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-probe-overview
Configure frontend IP addresses for Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configuration-frontend-ip
Configure backend HTTP settings for Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configuration-http-settings
Configure Azure Application Gateway infrastructure networkinghttps://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure
Configure listeners and protocols on Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configuration-listeners
Configure core components of Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configuration-overview
Configure request routing rules in Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configuration-request-routing-rules
Configure Azure Monitor alerts for Application Gateway via templateshttps://learn.microsoft.com/en-us/azure/application-gateway/configure-alerts-with-templates
Configure private frontend IP for Application Gateway v1https://learn.microsoft.com/en-us/azure/application-gateway/configure-application-gateway-with-private-frontend-ip
Configure Application Gateway with Azure App Service backendhttps://learn.microsoft.com/en-us/azure/application-gateway/configure-web-app
Create custom error pages in Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/custom-error
Configure ALB Controller Helm chart for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/alb-controller-helm-chart
Use Kubernetes API specification for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/api-specification-kubernetes
Understand components and requirements of Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/application-gateway-for-containers-components
Use Azure Monitor metrics with Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/application-gateway-for-containers-metrics
Configure custom health probes for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/custom-health-probe
Enable and use diagnostic logs for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/diagnostics
Enable and configure gRPC support on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/grpc
Configure HTTP header rewrite rules in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-header-rewrite-gateway-api
Configure HTTP header rewrite using Ingress API for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-header-rewrite-ingress-api
Configure multi-site hosting on Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-multiple-site-hosting-gateway-api
Configure multi-site hosting using Ingress API for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-multiple-site-hosting-ingress-api
Set up path, header, and query string routing in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-path-header-query-string-routing-gateway-api
Configure traffic splitting and weighted routing in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-traffic-splitting-gateway-api
Configure URL redirect rules in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-redirect-gateway-api
Configure URL redirects using Ingress API for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-redirect-ingress-api
Configure URL rewrite rules in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-rewrite-gateway-api
Configure URL rewrite using Ingress API for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-rewrite-ingress-api
Configure WebSocket support in Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-websockets-gateway-api
Configure server-sent events with Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/server-sent-events
Configure ALB Service Mesh Helm chart for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/service-mesh-helm-chart
Configure session affinity for Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/session-affinity
Use WebSocket protocol with Application Gateway for Containershttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/websockets
Configure readiness and liveness probes for AKS pods via Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-add-health-probes
Configure AGIC-specific Kubernetes ingress annotationshttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-annotations
Configure cookie-based session affinity with Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-cookie-affinity
Expose AKS services over HTTP/HTTPS using Application Gateway ingresshttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-expose-service-over-http-https
Expose WebSocket servers through Application Gateway with AGIChttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-expose-websocket-server
Enable multi-namespace support in Application Gateway Ingress Controllerhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-multiple-namespace-support
Use private IPs for internal ingress routing with AGIChttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-private-ip
Monitor Azure Application Gateway with Azure Monitorhttps://learn.microsoft.com/en-us/azure/application-gateway/monitor-application-gateway
Reference for monitoring data from Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/monitor-application-gateway-reference
Configure multi-site hosting on Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/multiple-site-overview
Route traffic with parameter-based path selection in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/parameter-based-path-selection-portal
Configure Private Link for Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/private-link-configure
Configure request and response buffering in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/proxy-buffers
Configure client IP preservation with Application Gateway Layer 4 proxyhttps://learn.microsoft.com/en-us/azure/application-gateway/proxy-protocol-header
Configure traffic redirection rules in Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/redirect-overview
Configure HTTP header rewrite in Application Gateway portalhttps://learn.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-portal
Configure HTTP header and URL rewrite rules in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url
Configure URL and query string rewrite in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/rewrite-url-portal
Create Application Gateway and configure header rewritehttps://learn.microsoft.com/en-us/azure/application-gateway/tutorial-http-header-rewrite-powershell
Configure URL path-based routing in Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/url-route-overview
主题链接
使用PowerShell在Application Gateway上配置HTTP头部重写https://learn.microsoft.com/en-us/azure/application-gateway/add-http-header-rewrite-rule-powershell
在Azure Application Gateway中使用后端健康报告https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-backend-health
使用PowerShell在经典版Application Gateway上配置自定义探针https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-classic-ps
在门户中为Application Gateway创建自定义健康探针https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-portal
使用PowerShell在Application Gateway上配置自定义探针https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-ps
配置并解读Application Gateway诊断日志https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics
创建并管理带有ILB端点的Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ilb-arm
为Application Gateway使用Azure Monitor指标https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-metrics
Application Gateway健康探针的行为与配置https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-probe-overview
为Application Gateway配置前端IP地址https://learn.microsoft.com/en-us/azure/application-gateway/configuration-frontend-ip
为Application Gateway配置后端HTTP设置https://learn.microsoft.com/en-us/azure/application-gateway/configuration-http-settings
配置Azure Application Gateway基础设施网络https://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure
在Azure Application Gateway上配置监听器与协议https://learn.microsoft.com/en-us/azure/application-gateway/configuration-listeners
配置Azure Application Gateway核心组件https://learn.microsoft.com/en-us/azure/application-gateway/configuration-overview
在Azure Application Gateway上配置请求路由规则https://learn.microsoft.com/en-us/azure/application-gateway/configuration-request-routing-rules
通过模板为Application Gateway配置Azure Monitor告警https://learn.microsoft.com/en-us/azure/application-gateway/configure-alerts-with-templates
为Application Gateway v1配置私有前端IPhttps://learn.microsoft.com/en-us/azure/application-gateway/configure-application-gateway-with-private-frontend-ip
配置Azure App Service后端的Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/configure-web-app
在Azure Application Gateway上创建自定义错误页面https://learn.microsoft.com/en-us/azure/application-gateway/custom-error
为容器版应用网关配置ALB Controller Helm Charthttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/alb-controller-helm-chart
为容器版应用网关使用Kubernetes API规范https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/api-specification-kubernetes
理解容器版应用网关的组件与要求https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/application-gateway-for-containers-components
为容器版应用网关使用Azure Monitor指标https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/application-gateway-for-containers-metrics
为容器版应用网关配置自定义健康探针https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/custom-health-probe
启用并使用容器版应用网关诊断日志https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/diagnostics
在容器版应用网关上启用并配置gRPC支持https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/grpc
为容器版应用网关配置HTTP头部重写规则（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-header-rewrite-gateway-api
使用Ingress API为容器版应用网关配置HTTP头部重写https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-header-rewrite-ingress-api
为容器版应用网关配置多站点托管（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-multiple-site-hosting-gateway-api
使用Ingress API为容器版应用网关配置多站点托管https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-multiple-site-hosting-ingress-api
在容器版应用网关上设置路径、头部与查询字符串路由（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-path-header-query-string-routing-gateway-api
为容器版应用网关配置流量拆分与加权路由（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-traffic-splitting-gateway-api
为容器版应用网关配置URL重定向规则（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-redirect-gateway-api
使用Ingress API为容器版应用网关配置URL重定向https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-redirect-ingress-api
为容器版应用网关配置URL重写规则（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-rewrite-gateway-api
使用Ingress API为容器版应用网关配置URL重写https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-url-rewrite-ingress-api
为容器版应用网关配置WebSocket支持（Gateway API）https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/how-to-websockets-gateway-api
为容器版应用网关配置服务器发送事件https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/server-sent-events
为容器版应用网关配置ALB Service Mesh Helm Charthttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/service-mesh-helm-chart
为容器版应用网关配置会话亲和性https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/session-affinity
为容器版应用网关使用WebSocket协议https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/websockets
通过Application Gateway为AKS Pod配置就绪性与存活探针https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-add-health-probes
配置AGIC专属的Kubernetes Ingress注解https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-annotations
为Application Gateway配置基于Cookie的会话亲和性https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-cookie-affinity
使用Application Gateway Ingress暴露AKS服务的HTTP/HTTPS访问https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-expose-service-over-http-https
通过集成AGIC的Application Gateway暴露WebSocket服务器https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-expose-websocket-server
在Application Gateway Ingress Controller中启用多命名空间支持https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-multiple-namespace-support
使用AGIC的私有IP进行内部Ingress路由https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-private-ip
使用Azure Monitor监控Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/monitor-application-gateway
Azure Application Gateway监控数据参考https://learn.microsoft.com/en-us/azure/application-gateway/monitor-application-gateway-reference
在Azure Application Gateway上配置多站点托管https://learn.microsoft.com/en-us/azure/application-gateway/multiple-site-overview
在Application Gateway上使用基于参数的路径选择路由流量https://learn.microsoft.com/en-us/azure/application-gateway/parameter-based-path-selection-portal
为Azure Application Gateway配置Private Linkhttps://learn.microsoft.com/en-us/azure/application-gateway/private-link-configure
在Application Gateway上配置请求与响应缓冲https://learn.microsoft.com/en-us/azure/application-gateway/proxy-buffers
为Application Gateway Layer 4代理配置客户端IP保留https://learn.microsoft.com/en-us/azure/application-gateway/proxy-protocol-header
在Azure Application Gateway上配置流量重定向规则https://learn.microsoft.com/en-us/azure/application-gateway/redirect-overview
通过门户在Application Gateway上配置HTTP头部重写https://learn.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-portal
在Application Gateway上配置HTTP头部与URL重写规则https://learn.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url
在Application Gateway上配置URL与查询字符串重写https://learn.microsoft.com/en-us/azure/application-gateway/rewrite-url-portal
创建Application Gateway并配置头部重写https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-http-header-rewrite-powershell
在Application Gateway上配置基于URL路径的路由https://learn.microsoft.com/en-us/azure/application-gateway/url-route-overview

Integrations & Coding Patterns

集成与编码模式

TopicURL
Integrate App Gateway for Containers with Prometheus and Grafanahttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/prometheus-grafana
Integrate Application Gateway for Containers with Istio service meshhttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/service-mesh-integration
Integrate Application Gateway for Containers logs with Microsoft Sentinel and Defenderhttps://learn.microsoft.com/en-us/azure/application-gateway/for-containers/siem-integration-with-sentinel
Autoscale AKS pods using Application Gateway metricshttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-autoscale-pods
主题链接
将容器版应用网关与Prometheus和Grafana集成https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/prometheus-grafana
将容器版应用网关与Istio服务网格集成https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/service-mesh-integration
将容器版应用网关日志与Microsoft Sentinel和Defender集成https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/siem-integration-with-sentinel
使用Application Gateway指标自动缩放AKS Podhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-autoscale-pods

Deployment

部署

TopicURL
Configure externally managed scheduled autoscaling for Application Gateway v2https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-externally-managed-scheduled-autoscaling
Deploy Application Gateway Basic (Preview) in portalhttps://learn.microsoft.com/en-us/azure/application-gateway/deploy-basic-portal
Disable and re-enable AGIC add-on on AKS clustershttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-disable-addon
Deploy AGIC using an existing Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-existing
Deploy AGIC with a new Application Gateway instancehttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-new
Migrate AGIC from Helm deployment to AKS add-onhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-migration
Upgrade Application Gateway Ingress Controller using Helmhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-update-ingress-controller
ARM template for Application Gateway IPv6 frontendhttps://learn.microsoft.com/en-us/azure/application-gateway/ipv6-application-gateway-arm-template
Deploy Application Gateway IPv6 frontend with PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/ipv6-application-gateway-powershell
Migrate Azure Application Gateway V1 to V2 with PowerShellhttps://learn.microsoft.com/en-us/azure/application-gateway/migrate-v1-v2
Deploy Application Gateway mTLS passthrough with ARM templatehttps://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-arm-template
Enable AGIC add-on for existing AKS and Application Gatewayhttps://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing
主题链接
为Application Gateway v2配置外部管理的计划自动缩放https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-externally-managed-scheduled-autoscaling
在门户中部署Application Gateway Basic（预览版）https://learn.microsoft.com/en-us/azure/application-gateway/deploy-basic-portal
在AKS集群上禁用并重新启用AGIC插件https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-disable-addon
使用现有Application Gateway部署AGIChttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-existing
使用新的Application Gateway实例部署AGIChttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-new
将AGIC从Helm部署迁移到AKS插件https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-migration
使用Helm升级Application Gateway Ingress Controllerhttps://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-update-ingress-controller
Application Gateway IPv6前端ARM模板https://learn.microsoft.com/en-us/azure/application-gateway/ipv6-application-gateway-arm-template
使用PowerShell部署Application Gateway IPv6前端https://learn.microsoft.com/en-us/azure/application-gateway/ipv6-application-gateway-powershell
使用PowerShell将Azure Application Gateway V1迁移到V2https://learn.microsoft.com/en-us/azure/application-gateway/migrate-v1-v2
使用ARM模板部署Application Gateway mTLS透传https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-arm-template
为现有AKS与Application Gateway启用AGIC插件https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing