将 AKS 与应用程序网关连接，在访问应用程序时出现超时错误

Question

I am looking to configure application gateway service provided by azure, to avail dynamicIP and basic WAF protection.

I don't want to do TLS termination here, as that I can do at level of Ingress (nginx load-balancer rules )

I have a DNS zone carrying DNS mapped to CNAME of the FrontendIP of the Application gateway and the backend pool has been mapped to IP of kubernetes Load Balancer.

Upon hitting the URL, I am getting time-out error and no traffic is being intercepted by nginx controller too, seems like traffic is getting lost at level of Application gateway only

Answer 1

Application Gateway is a reverse proxy. So the SSL termination happens at the listener and you can configure end to end SSL by uploading.cer in the HTTPSettings.

You can use this guide to configure end to end SSL.

Also note that without configuring HTTPS listener, all your request will be timed-out.