Azure Application Gateway- one Header/Domain to redirect to different Applications ?

[vijaycloud]

Hi Experts, One of my customer looking solution. they have only one header/Domain (https://asp.aspr.start.edu.sg/) and want to use that header to different applications (https://asp.aspr.start.edu.sg/spta/) and (https://asp.aspr.start.edu.sg/sms/). Whether it is possible or not inside in App gateway or  if not then what is the workaround?

As i know we can host multiple subdomains of the same parent domain on the same application gateway deployment. For example, we can host http://blog.contoso.com and http://app.contoso.com on a single application gateway deployment.

Also know , As per the best practice we should run any Application on its own domain or subdomain, this is also prevent XSS attacks as well. Whenever vulnerability hit one of your apps may result in your whole domain becoming vulnerable. This is the reason security features are generally implemented in the browser on a per-domain basis.

Please help , thanks.

Vijay

[#2]

Hello, @vijaycloud 

Actually you achieve the requested configuration if you configure path-based routing rules on the application gateway. By this the Application gateway will route request to different backend pools, based on the requested path.

I would advise you to check the documentation on the following link https://docs.microsoft.com/en-us/azure/application-gateway/create-url-route-portal 

hope you find this answer as helpful,

Charbel Hanna

[#3]

@Charbelhanna 

Thanks for reply, I think this will apply only if we have one web application and path based routing can be done on basis of directory path. But in this case They using two diff-diff applications, one is already migrated on cloud (which is running successfully) and second application going to be migrated.

Option 1- We can host multiple subdomains of the same parent domain on the same application gateway deployment. (But customer don't want use subdomain)

Option-2- Application Gateway supports multiple applications each listening on different ports, but this scenario requires the applications to accept traffic on non-standard ports. This is often not a configuration that customer  want.

please correct me if my understanding is wrong..

Thanks.

Vijay

[#4]

Dear @vijaycloud 

I am sorry for the late reply, 

the application gateway support path based routing for applications that residing on different back-end pools, therefore could respond to your request. it is not required that all applications to reside on a single back-end pool. so in brief you can host multiple applications using the same domain but on different paths and these applications can reside on different back-end pools / servers.

I am intending to write a detailed blog for this purpose and will share it with you once it is ready.

Regards,

Charbel Hanna

[#5]

@Charbelhanna 

Thanks for your suggestion, I have configured two web apps in under one domain with path based routing configuration which is working fine under the same domain "astar.sg/psta" and "astar.sg/sms". However, they are using telerik control and also other application dynamic control (webresource.axd and scriptresource.axd) which caused an issue. For example,when both SMS and PSTA are configured under the same domain, webresource.axd and scriptresource.axd will be redirected to root url ie. http://appgwip/webresource.axd , it should be http://appgwip/sms/webresource.axd which result in 404 or 502 error

Any suggestion ?

Regards!

Vijay

[#6]

Hi Vijay,
Now you can also have Rewrite HTTP headers with Application Gateway (it still on preview)
https://docs.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers

[#7]

That's right! Application Gateway can has set of backend pools, and with the path based routing you should be able to direct traffic to different backend pools as required!