/azure-application-gateway

name: azure-application-gateway
description: Expert knowledge for Azure Application Gateway development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring App Gateway/AGIC for AKS, WAF/TLS, Private Link, header rewrites, or autoscaling, and other Azure Application Gateway related development tasks. Not for Azure Load Balancer (use azure-load-balancer), Azure Front Door (use azure-front-door), Azure Web Application Firewall (use azure-web-application-firewall), Azure Virtual Network (use azure-virtual-network).
compatibility: Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata:
  generated_at: "2026-11-08"
  generator: "docs2skills/1.0.0"

Azure Application Gateway Skill

This skill provides expert guidance for Azure Application Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file

> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)

This skill requires **network access** to fetch documentation content:

• **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.
• **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.

Category Index

| Category | Lines | Description | |----------|-------|-------------| | Troubleshooting | L37-L44 | Diagnosing backend health and metrics, reading diagnostic logs, and troubleshooting issues for Application Gateway and Application Gateway for Containers (including ALB Controller). | | Best Practices | L45-L50 | Tuning health probes, understanding probe behavior, and planning Application Gateway capacity, scaling, and configuration for high-traffic workloads. | | Decision Making | L51-L61 | Guidance on choosing AKS networking, estimating App Gateway for Containers costs, and planning/migrating between AGIC, V1/V2 gateways, and classic vs ARM VMs. | | Architecture & Design Patterns | L62-L69 | Patterns and best practices for designing, sharing, and securing Application Gateway for Containers, including inference, load balancing strategies, multi-team setups, and private ingress. | | Limits & Quotas | L70-L77 | Autoscaling, zone redundancy, multi-site hosting behavior, gateway limits/quotas, and ALB controller versions/compatibility for Application Gateway v2. | | Security | L78-L118 | TLS/SSL, certificates, mTLS, JWT auth, WAF, HSTS, Private Link, and Key Vault integration for securing Azure Application Gateway and App Gateway for Containers | | Configuration | L119-L183 | Configuring Application Gateway and AGIC/containers: listeners, routing, probes, health, TLS/mTLS, Private Link, header/URL rewrites, session affinity, WebSockets, HTTP/3, monitoring, and diagnostics. | | Integrations & Coding Patterns | L184-L197 | Patterns and scripts for integrating App Gateway with AKS/containers, Istio, MCP, vLLM, Key Vault, Prometheus/Grafana, Sentinel/Defender, header rewrites, mirroring, and autoscaling via metrics. | | Deployment | L198-L210 | Deploying and scaling Application Gateway and AGIC: portal/ARM/PowerShell setup, IPv6 frontends, AKS add-on enable/disable, migrations, and Helm-based upgrades. |

Troubleshooting

| Topic | URL | |-------|-----| | Diagnose backend health states in Application Gateway | https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-backend-health | | Use Application Gateway diagnostic logs for troubleshooting | https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics | | Use ALB Controller backend health and metrics for troubleshooting | https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/alb-controller-backend-health-metrics | | Diagnose and fix Application Gateway for Containers issues | https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/troubleshooting-guide |

Best Practices

| Topic | URL | |-------|-----| | Health probe behavior and tuning for Azure Application Gateway | https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-probe-overview | | Plan Application Gateway for high traffic volume scenarios | https://learn.microsoft.com/en-us/azure/application-gateway/high-traffic-support |

Decision Making

| Topic | URL | |-------|-----| | Choose AKS networking for App Gateway for Containers | https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/container-networking | | Decide and plan migration from AGIC to Application Gateway for Containers | https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/migrate-from-agic-to-agc | | Estimate and understand pricing for Application Gateway for Containers | https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/understanding-pricing | | Migrate Azure Application Gateway from V1 to V2 | https://learn.microsoft.com/en-us/azure/application-gateway/migrate-v1-v2 | | FAQ for Azure Application Gateway V1 retirement and migration | https://learn.microsoft.com/en-us