Can I make the Azure Application Gateway act as a forward proxy?









up vote
0
down vote

favorite












I want to use the IP address of the Azure Application Gateway to use for outgoing traffic that comes from internal services and not the ones of the services. Basically I want to use the GW to act on behalf of the services - act as a forward proxy.










share|improve this question

























    up vote
    0
    down vote

    favorite












    I want to use the IP address of the Azure Application Gateway to use for outgoing traffic that comes from internal services and not the ones of the services. Basically I want to use the GW to act on behalf of the services - act as a forward proxy.










    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I want to use the IP address of the Azure Application Gateway to use for outgoing traffic that comes from internal services and not the ones of the services. Basically I want to use the GW to act on behalf of the services - act as a forward proxy.










      share|improve this question













      I want to use the IP address of the Azure Application Gateway to use for outgoing traffic that comes from internal services and not the ones of the services. Basically I want to use the GW to act on behalf of the services - act as a forward proxy.







      azure proxy azure-application-gateway






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 9 at 20:31









      Sven Malvik

      3782514




      3782514






















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          1
          down vote













          Unfortunately, that is not possible at the moment. The Application gateway is designed to work as a reverse proxy and not a forward proxy.



          The alternative to which would be to use any of the below:



          1. Azure ELB - If you are not looking for

            • cookie persistence

            • WAF capabilites

            • ssl offloading

            • ssl strengthening (use certain versions of tls and ciphers)

            • encrypt application cookie

            • disable headers (Server, X-Powered-By)

            • disable clickjacking (x-frame-options: SAMEORIGIN)

            • block blacklisted user agents

            • cookie encryption

            • schedule maintenance redirect to a webpage during a maintenance window

            • redirect HTTP error 403 to 404

            • restrict outside access to certain pages


          ** Most of which you can do over new Application gateway and Azure Firewall



          1. 3rd Party load balancers - F5, NetSclaer etc..

          2. Use Ngnix, "best option" Resume complete control over load balancing.

          3. Firewall of your choice with these capabilities

          Reference Links:
          https://kemptechnologies.com/load-balancing-nginx/microsoft-azure/
          https://docs.citrix.com/en-us/netscaler/12/netscaler-cache-redirection-gen-wrapper-10-con/cache-redirection-config/configure-forward-proxy-redirection.html
          https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq






          share|improve this answer




















            Your Answer






            StackExchange.ifUsing("editor", function ()
            StackExchange.using("externalEditor", function ()
            StackExchange.using("snippets", function ()
            StackExchange.snippets.init();
            );
            );
            , "code-snippets");

            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "1"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53232879%2fcan-i-make-the-azure-application-gateway-act-as-a-forward-proxy%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            1
            down vote













            Unfortunately, that is not possible at the moment. The Application gateway is designed to work as a reverse proxy and not a forward proxy.



            The alternative to which would be to use any of the below:



            1. Azure ELB - If you are not looking for

              • cookie persistence

              • WAF capabilites

              • ssl offloading

              • ssl strengthening (use certain versions of tls and ciphers)

              • encrypt application cookie

              • disable headers (Server, X-Powered-By)

              • disable clickjacking (x-frame-options: SAMEORIGIN)

              • block blacklisted user agents

              • cookie encryption

              • schedule maintenance redirect to a webpage during a maintenance window

              • redirect HTTP error 403 to 404

              • restrict outside access to certain pages


            ** Most of which you can do over new Application gateway and Azure Firewall



            1. 3rd Party load balancers - F5, NetSclaer etc..

            2. Use Ngnix, "best option" Resume complete control over load balancing.

            3. Firewall of your choice with these capabilities

            Reference Links:
            https://kemptechnologies.com/load-balancing-nginx/microsoft-azure/
            https://docs.citrix.com/en-us/netscaler/12/netscaler-cache-redirection-gen-wrapper-10-con/cache-redirection-config/configure-forward-proxy-redirection.html
            https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq






            share|improve this answer
























              up vote
              1
              down vote













              Unfortunately, that is not possible at the moment. The Application gateway is designed to work as a reverse proxy and not a forward proxy.



              The alternative to which would be to use any of the below:



              1. Azure ELB - If you are not looking for

                • cookie persistence

                • WAF capabilites

                • ssl offloading

                • ssl strengthening (use certain versions of tls and ciphers)

                • encrypt application cookie

                • disable headers (Server, X-Powered-By)

                • disable clickjacking (x-frame-options: SAMEORIGIN)

                • block blacklisted user agents

                • cookie encryption

                • schedule maintenance redirect to a webpage during a maintenance window

                • redirect HTTP error 403 to 404

                • restrict outside access to certain pages


              ** Most of which you can do over new Application gateway and Azure Firewall



              1. 3rd Party load balancers - F5, NetSclaer etc..

              2. Use Ngnix, "best option" Resume complete control over load balancing.

              3. Firewall of your choice with these capabilities

              Reference Links:
              https://kemptechnologies.com/load-balancing-nginx/microsoft-azure/
              https://docs.citrix.com/en-us/netscaler/12/netscaler-cache-redirection-gen-wrapper-10-con/cache-redirection-config/configure-forward-proxy-redirection.html
              https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq






              share|improve this answer






















                up vote
                1
                down vote










                up vote
                1
                down vote









                Unfortunately, that is not possible at the moment. The Application gateway is designed to work as a reverse proxy and not a forward proxy.



                The alternative to which would be to use any of the below:



                1. Azure ELB - If you are not looking for

                  • cookie persistence

                  • WAF capabilites

                  • ssl offloading

                  • ssl strengthening (use certain versions of tls and ciphers)

                  • encrypt application cookie

                  • disable headers (Server, X-Powered-By)

                  • disable clickjacking (x-frame-options: SAMEORIGIN)

                  • block blacklisted user agents

                  • cookie encryption

                  • schedule maintenance redirect to a webpage during a maintenance window

                  • redirect HTTP error 403 to 404

                  • restrict outside access to certain pages


                ** Most of which you can do over new Application gateway and Azure Firewall



                1. 3rd Party load balancers - F5, NetSclaer etc..

                2. Use Ngnix, "best option" Resume complete control over load balancing.

                3. Firewall of your choice with these capabilities

                Reference Links:
                https://kemptechnologies.com/load-balancing-nginx/microsoft-azure/
                https://docs.citrix.com/en-us/netscaler/12/netscaler-cache-redirection-gen-wrapper-10-con/cache-redirection-config/configure-forward-proxy-redirection.html
                https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq






                share|improve this answer












                Unfortunately, that is not possible at the moment. The Application gateway is designed to work as a reverse proxy and not a forward proxy.



                The alternative to which would be to use any of the below:



                1. Azure ELB - If you are not looking for

                  • cookie persistence

                  • WAF capabilites

                  • ssl offloading

                  • ssl strengthening (use certain versions of tls and ciphers)

                  • encrypt application cookie

                  • disable headers (Server, X-Powered-By)

                  • disable clickjacking (x-frame-options: SAMEORIGIN)

                  • block blacklisted user agents

                  • cookie encryption

                  • schedule maintenance redirect to a webpage during a maintenance window

                  • redirect HTTP error 403 to 404

                  • restrict outside access to certain pages


                ** Most of which you can do over new Application gateway and Azure Firewall



                1. 3rd Party load balancers - F5, NetSclaer etc..

                2. Use Ngnix, "best option" Resume complete control over load balancing.

                3. Firewall of your choice with these capabilities

                Reference Links:
                https://kemptechnologies.com/load-balancing-nginx/microsoft-azure/
                https://docs.citrix.com/en-us/netscaler/12/netscaler-cache-redirection-gen-wrapper-10-con/cache-redirection-config/configure-forward-proxy-redirection.html
                https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 11 at 9:26









                Capt. Cherry ex- MSFT

                311




                311



























                     

                    draft saved


                    draft discarded















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53232879%2fcan-i-make-the-azure-application-gateway-act-as-a-forward-proxy%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Darth Vader #20

                    How to how show current date and time by default on contact form 7 in WordPress without taking input from user in datetimepicker

                    Ondo