azure SSL Application Gateway com Web APPS

1

Estou trabalhando na configuração do Firewall de Aplicativo Web do Azure Application Gateway para um aplicativo Web hospedado em aplicativos da Web com tudo por trás do SSL.

Posso fazê-lo funcionar quando não houver SSL usando este artigo link

No entanto, quando tento alterá-lo para SSL e carrego o arquivo CER, não consigo mostrá-lo para exibir Heathly. Eu mudei todas as referências para https, e tudo parece correto, mas eu ainda estou preso

Eu também tentei este artigo link sem sorte

Qualquer pensamento sobre o que eu sinto falta, preciso que isso funcione antes que eu possa ir HA com a solução

Obrigado Alex

    
por alex Reid 10.11.2017 / 23:58

1 resposta

1

aqui está o script em que o MS Support trabalhou comigo para fazer esse trabalho

# FQDN of the web app
$webappFQDN = "XXX.XXXXX.com"  

# Retrieve an existing application gateway
$gw = Get-AzureRmApplicationGateway -Name "XXXX" -ResourceGroupName "XXXX"

# Define the status codes to match for the probe
$match=New-AzureRmApplicationGatewayProbeHealthResponseMatch -StatusCode 200-399

# Add a new probe to the application gateway
Add-AzureRmApplicationGatewayProbeConfig -name webappprobe-1 -ApplicationGateway $gw -Protocol Https -Path / -Interval 30 -Timeout 120 -UnhealthyThreshold 3 -PickHostNameFromBackendHttpSettings -Match $match

# Retrieve the newly added probe
$probe = Get-AzureRmApplicationGatewayProbeConfig -name webappprobe-1 -ApplicationGateway $gw

# Configure an existing backend http settings 

Set-AzureRmApplicationGatewayBackendHttpSettings -Name appGatewayBackendHttpSettings -ApplicationGateway $gw -PickHostNameFromBackendAddress -Port 443 -Protocol https -CookieBasedAffinity Disabled -RequestTimeout 30 -Probe $probe

Exclude these 2 lines
#$authcert = New-AzureRmApplicationGatewayAuthenticationCertificate -Name whitelistcert1 -CertificateFile C:\XXXX\XXXX.cer

#Set-AzureRmApplicationGatewayBackendHttpSettings -Name appGatewayBackendHttpSettings -ApplicationGateway $gw  -PickHostNameFromBackendAddress -Port 443 -Protocol Https -CookieBasedAffinity Enabled -AuthenticationCertificates $authcert

# Add the web app to the backend pool
Set-AzureRmApplicationGatewayBackendAddressPool -Name appGatewayBackendPool -ApplicationGateway $gw -BackendFqdns $webappFQDN

# Update the application gateway
Set-AzureRmApplicationGateway -ApplicationGateway $gw
    
por 23.11.2017 / 17:29