azure-application-gateway

name	azure-application-gateway
description	Expert knowledge for Azure Application Gateway development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring listeners, WAF/TLS, AKS ingress/AGIC, autoscaling v2 gateways, or App Gateway for Containers, and other Azure Application Gateway related development tasks. Not for Azure Load Balancer (use azure-load-balancer), Azure Front Door (use azure-front-door), Azure Firewall (use azure-firewall), Azure Web Application Firewall (use azure-web-application-firewall).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-31","generator":"docs2skills/1.0.0"}

Azure Application Gateway Skill

This skill provides expert guidance for Azure Application Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L42	Diagnosing and fixing common Application Gateway for Containers issues using ALB Controller backend health, metrics, and troubleshooting guides for connectivity, routing, and configuration errors.
Best Practices	L43-L48	Tuning health probes, understanding probe behavior, and planning Application Gateway capacity, scaling, and configuration for high-traffic workloads.
Decision Making	L49-L59	Guidance on choosing networking and pricing for Application Gateway for Containers and planning/migrating between AGIC, v1/v2 gateways, and classic vs ARM VMs.
Architecture & Design Patterns	L60-L64	Guidance on choosing and designing load-balancing strategies and traffic distribution patterns when using Azure Application Gateway for Containers.
Limits & Quotas	L65-L70	Configuring autoscaling, zone redundancy, and multi-site hosting limits for Application Gateway v2, including capacity, scaling behavior, and site/hostname constraints.
Security	L71-L111	Configuring TLS/SSL, certificates, mTLS, Key Vault, cipher suites, FIPS, WAF, Private Link, and security headers for secure Azure Application Gateway and Containers deployments
Configuration	L112-L174	Configuring Application Gateway and Application Gateway for Containers: listeners, routing, probes, health, headers/URL rewrites, WebSockets, mTLS, Private Link, monitoring, alerts, and AKS/Ingress integration.
Integrations & Coding Patterns	L175-L184	Configuring header rewrites, integrating App Gateway (incl. containers) with Key Vault, Prometheus/Grafana, Istio, Sentinel/Defender, and using its metrics to autoscale AKS pods.
Deployment	L185-L197	Deploying and scaling Application Gateway and AGIC: portal/ARM/PowerShell setup, IPv6 frontends, AKS add-on enable/disable, migrations, and Helm-based upgrades.

Troubleshooting

Topic	URL
Use ALB Controller backend health and metrics for troubleshooting	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/alb-controller-backend-health-metrics
Troubleshoot common issues in Application Gateway for Containers	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/troubleshooting-guide

Best Practices

Topic	URL
Health probe behavior and tuning for Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-probe-overview
Plan Application Gateway for high traffic volume scenarios	https://learn.microsoft.com/en-us/azure/application-gateway/high-traffic-support

Decision Making

Topic	URL
Choose container networking for Application Gateway for Containers	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/container-networking
Decide and plan migration from AGIC to Application Gateway for Containers	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/migrate-from-agic-to-agc
Estimate and understand pricing for Application Gateway for Containers	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/understanding-pricing
Migrate Azure Application Gateway from V1 to V2	https://learn.microsoft.com/en-us/azure/application-gateway/migrate-v1-v2
FAQ for Azure Application Gateway V1 retirement and migration	https://learn.microsoft.com/en-us/azure/application-gateway/retirement-faq
Plan migration from Application Gateway V1 to V2	https://learn.microsoft.com/en-us/azure/application-gateway/v1-retirement
Decide and plan migration from classic to Azure Resource Manager VMs	https://learn.microsoft.com/en-us/previous-versions/azure/virtual-machines/migration/migration-classic-resource-manager-faq

Architecture & Design Patterns

Topic	URL
Choose load balancing strategies in Application Gateway for Containers	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/load-balancing-strategies

Limits & Quotas

Topic	URL
Configure autoscaling and zone redundancy for Application Gateway v2	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-autoscaling-zone-redundant
Configure multi-site hosting limits on Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/multiple-site-overview

Security

Topic	URL
Configure listener-specific SSL policies in Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-configure-listener-specific-ssl-policy
Configure TLS policy and cipher suites for Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-configure-ssl-policy-powershell
Set up end-to-end TLS on Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-end-to-end-ssl-powershell
Restrict access with private Azure Application Gateway deployment	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-private-deployment
Secure Application Gateway session affinity cookie flags	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-secure-flag-session-affinity
Configure TLS policies for Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview
Plan for TLS 1.0/1.1 retirement on Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-tls-version-retirement
Prepare certificates for backend authentication in Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/certificates-for-backend-authentication
Configure Key Vault TLS termination for Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/configure-key-vault-portal

Configuration

Topic	URL
Use backend health reports in Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-backend-health
Configure custom probe in classic Application Gateway via PowerShell	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-classic-ps
Configure custom health probes for Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-create-probe-ps
Configure and interpret Application Gateway diagnostic logs	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics
Create and manage Application Gateway with ILB endpoint	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ilb-arm
Use Azure Monitor metrics for Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-metrics
Configure frontend IP addresses for Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/configuration-frontend-ip
Configure backend HTTP settings for Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/configuration-http-settings
Configure Azure Application Gateway network infrastructure	https://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure
Configure listeners and protocols on Azure Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/configuration-listeners

Integrations & Coding Patterns

Topic	URL
Configure HTTP header rewrite rules in Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/add-http-header-rewrite-rule-powershell
Integrate Key Vault certificates with Application Gateway via PowerShell	https://learn.microsoft.com/en-us/azure/application-gateway/configure-keyvault-ps
Integrate App Gateway for Containers with Prometheus and Grafana	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/prometheus-grafana
Integrate Application Gateway for Containers with Istio	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/service-mesh-integration
Integrate Application Gateway for Containers logs with Microsoft Sentinel and Defender	https://learn.microsoft.com/en-us/azure/application-gateway/for-containers/siem-integration-with-sentinel
Autoscale AKS pods using Application Gateway metrics	https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-autoscale-pods

Deployment

Topic	URL
Configure externally managed scheduled autoscaling for Application Gateway v2	https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-externally-managed-scheduled-autoscaling
Deploy Azure Application Gateway Basic via portal	https://learn.microsoft.com/en-us/azure/application-gateway/deploy-basic-portal
Disable and re-enable AGIC add-on on AKS clusters	https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-disable-addon
Deploy AGIC using an existing Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-existing
Deploy AGIC with a new Application Gateway instance	https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-new
Migrate AGIC from Helm deployment to AKS add-on	https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-migration
Upgrade Application Gateway Ingress Controller using Helm	https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-update-ingress-controller
ARM template for Application Gateway IPv6 frontend	https://learn.microsoft.com/en-us/azure/application-gateway/ipv6-application-gateway-arm-template
Deploy Application Gateway IPv6 frontend with PowerShell	https://learn.microsoft.com/en-us/azure/application-gateway/ipv6-application-gateway-powershell
Enable AGIC add-on for existing AKS and Application Gateway	https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing