Share via

AKS Networking with Application Gateway and Azure Firewall

krutibasa majhi 0 Reputation points
2024-12-13T13:48:50.45+00:00

Hello everyone,

I am currently implementing a solution in Azure that involves using Azure Kubernetes Service (AKS) as a backend, along with an Application Gateway for incoming traffic. Additionally, I have configured an Azure Firewall to manage outbound traffic. My goal is to ensure that the traffic routing is symmetric.

In my current setup, incoming traffic is routed through the Application Gateway, and I have attached a route table in the AKS subnet directing 0.0.0.0/0 traffic to the Azure Firewall.

Could anyone please advise me on the best practices or steps to achieve symmetric routing in this configuration? Any insights or recommendations would be greatly appreciated!

Thank you !

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
703 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,098 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,207 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ibrahima Mbodji 90 Reputation points MVP
    2024-12-13T14:09:58.78+00:00

    Hi

    If you want to redirect the traffic to Azure Firewall make sur you select the outbound type user-defined routing

    https://zcusa.951200.xyz/en-us/azure/aks/egress-outboundtype?WT.mc_id=AZ-MVP-5004274

    This article will help you to make the right choices and has a ready to test example (video +script)

    https://zcusa.951200.xyz/en-us/azure/firewall/protect-azure-kubernetes-service?WT.mc_id=AZ-MVP-5004274

    If you want to avoid potential asymmetric routing issue that could happen if you have public load balancer scenario check the link below

    https://zcusa.951200.xyz/en-us/azure/firewall/integrate-lb?WT.mc_id=AZ-MVP-5004274

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.