Web Application Proxy + Azure WebRole - azure

I am using Azure PAAS. All database servers, application servers and proxy servers are with in my virtual network.
How to setup web application proxy for azure web role?

Change webrole endpoint to Localhost and enable Firewall rule Http trafic in. then site can access form proxy server.
Using web application proxy setup https://technet.microsoft.com/en-us/library/dn383650.aspx we can configure proxy for web role.

Related

ARR on IIS to skip windows authentication

I have a network with DMZ, where my application is deployed.
My application is deployed in IIS on a server in the internal network. On this IIS, 'Windows Authentication' is enabled for my application.
I have another IIS in the DMZ where I have used ARR (Application Request Rewrite) to route all requests to the internal server where my application is hosted. On this IIS, 'Anonymous Authentication is enabled'
When I try to access my application from public internet (through DMZ), the browser displays the authentication popup. But for users from public internet does not have windows account in the domain.
Is there any configuration that can authenticate internal users on their windows account and external users without it?

Azure web app uses IP outside of the outbound IP range

I have a .net core web application deployed as an Azuere web app. This web app makes an API call to another web application deployed on-premise. The on-premise web applciaiton logs the IP address of the client applciation.
When the Azure web app makes an API call to an on-premises web application, the client IP address logged is different than the range of outbound IPs defined for the Azure app. I alwyas thought that the Azure web app uses one of the outbound Ips while communicating with other applciations. This does not seem to be the case.
I have added my Azure Web app to vnet. Does this have anything to do with the above observation?
Is there a proxy used by the Azure when Azure Web app makes external calls?

Access azure webapp with the CNAME which is behind an Azure Application gateway

I have an azure web app and its corresponding application gateway.
I have created a CNAME and pointed it to the DNS name of the app gateway.
Now when I access the site using the CNAME, it reaches the app gateway and redirects me to the web app(actual web app URL ...azurewebsites.net).
Is it possible that using the CNAME, I should be able to reach the web app i.e. on the address bar it should be displaying the same CNAME to reaching the web app(it should not redirect to the web app)
Thanks.
You could configure the custom domain like sub.example.com to the web app first, then you could add such custom domain in the hostnames of Azure web app service. Once the DNS propagation happens, the CNAME record of the custom domain in the DNS zone should be changed to map the FQDN of the Application gateway like xxx.cloudapp.net.
I test this using web app service without HTTPS redirection. HTTPS Only is off. Azure Application Gateway is also working for HTTP. If you want to use HTTPS for the web app, you need an SSL cert for the custom domain.
Tutorial: Map an existing custom DNS name to Azure App Service
Update
In this case, you properly set HTTPS only is on in the custom domains of Azure web app service. For me, I could still set "Pick up hostname from the backend pool" under the HTTP setting even I do not add the hostnames as my previous reply. The redirection actually is related to the "HTTPS only" under Custom Domain in Azure web app.
I got this issue fixed:
The redirection that was occurring was due to a setting "Pick up hostname from the backend pool" under HTTP setting of application gateway. Removing that setting, using the CNAME we were able to reach the web app but we were getting an error "Too_Many_redirects" and this was resolved once the "HTTPS only" is set to off on the web app under Custom Domain as this redirection was configured at the gateway level.

Azure Application gateway with web apps

I have setup a Azure Application Gateway in front of an Azure Web Application. I have added a IP restriction on Web app allowing access only from the Application gateway's public IP address. This works fine but the when I add the public IP address on the browser it re-directs to the web app's URL. How can I stop the application gateway redirecting to the web app URL but to return the response against the public IP?
I have deployed MVC web application behind Application gateway with following settings and when I type Ip address of application gateway, it shows web application on application gateway IP
Custom probe was automatically added when I saved page after selecting "HTTPS" and "Use for App Service" option.
Backend pool where WebApp was selected
if you still see any issues then I will post steps to configure everything tomorrow.
It turns out that you first need to configure the custom domain to the webapp and once the propagation happens the CNAME record of the custom domain should be changed to map the FQDN of the Application gateway.

Hosted wcf service in IIS dont response to other computers?

HI
I develop the wcf service for hosting in IIS. test service in computer(which is service host in itself IIS) and as result this service work fine.
But When I try use that service from other Computer, service not responding and service cant be find!!!
This could be:
A security problem, what are the security settings on IIS?
The port is blocked, what firewall settings do you have?
Or that you have an address with localhost (as already answered)

Resources