Microsoft Azure Mastery for .NET Architects

Azure Application Gateway (WAF): Protecting the front-end

1 Views Updated 5/4/2026

Layer 7 Load Balancing

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.

1. WAF Integration

The Application Gateway **WAF** skew provides centralized protection of your web applications from common exploits and vulnerabilities. It is based on the **OWASP Core Rule Set (CRS)** and can be run in 'Detection' or 'Prevention' mode. **Architect Tip:** Always start in Detection mode to ensure no false positives are blocking real users.

2. Path-Based Routing

You can route traffic based on URL paths. For example, toolliyo.com/images/* goes to an S3-equivalent storage pool, while toolliyo.com/api/* goes to your .NET container fleet. This allows you to build a unified URL structure for a complex microservice architecture.

3. Architect Insight

Q: "Does Application Gateway support WebSockets?"

Architect Answer: "YES! It has full support for **WebSockets** and **HTTP/2**. This is critical if you are building real-time .NET applications with **SignalR**. Just ensure that you enable 'Cookie-Based Affinity' if your SignalR setup hasn't been configured with a backplane like Redis."

Microsoft Azure Mastery for .NET Architects
1. Azure Identity & Governance
Microsoft Entra ID (Azure AD): Scaling identity for .NET apps App Registrations & Service Principals: Secure machine identity Azure Policy & Blueprints: Enforcing architecture standards Resource Groups & Management Groups: Organizing the Cloud
2. Azure Web & Compute
Azure App Service: Managed hosting for ASP.NET Core Azure Functions: Serverless logic with Durable Functions Azure Container Apps (ACA): Serverless K8s for microservices Azure Kubernetes Service (AKS): Enterprise orchestration
3. Azure Databases
Azure SQL Database: The king of cloud-native SQL Azure Cosmos DB: Global scale with multi-model NoSQL Azure Cache for Redis: Managed memory performance Azure Database for PostgreSQL/MySQL: Flexible server scaling
4. Networking & Security
Azure Virtual Network (VNet): Subnets, Peering, and Gateways Azure Front Door: Global CDN & Load Balancing Azure Key Vault: Managing secrets, keys, and certificates Azure Application Gateway (WAF): Protecting the front-end
5. Messaging & Integration
Azure Service Bus: Enterprise-grade message queuing Azure Event Grid: Building reactive, event-driven systems Azure Event Hubs: Large-scale data ingestion for .NET Logic Apps: No-code orchestration for .NET developers
6. AI & Data Services
Azure OpenAI Service: Integrating GPT into .NET apps Cognitive Services: Vision, Speech, and Language APIs Azure Search (AI Search): Semantic search and vector indexing Azure Data Factory: ETL and data movement
7. Monitoring & Hybrid
Azure Monitor & Application Insights: Deep .NET observability Log Analytics: KQL (Kusto) for large-scale log analysis Azure Arc: Managing on-premise and multi-cloud from Azure Azure Bicep: Modern Infrastructure as Code for Azure
8. Enterprise Scale & Patterns
Cloud Adoption Framework (CAF): The Architect's strategy Case Study: Global retail scaling with Cosmos DB and AKS