Azure web application firewall waf on azure front door provides centralized protection for your web applications.
Front door application gateway.
Application gateway provides application delivery controller adc as a service offering various layer 7 load balancing capabilities for your application.
Refer to front door s routing architecture details and traffic routing methods to learn more about the service.
Waf with application gateway is a regional dedicated solution.
It keeps your service highly available for your users and helps you meet compliance requirements.
Through a single pane of glass and global infrastructure azure front door enables azure customers to securely deliver and manage their global applications and content migrate to cloud and modern microservice architectures and improve their users experience.
Vpn gateway establish secure cross premises connectivity.
App gateway sits in your vnet in a special subnet like a dmz.
Application gateway build secure scalable and highly available web front ends in azure.
While front door can load balance between your different scale units clusters stamp units across regions application gateway allows you to load balance between your vms containers etc.
I m considering using something in k8s for north south routing like traefik ambasador or contour.
Key vault safeguard and maintain control of keys and other secrets.
While both front door and application gateway are layer 7 http https load balancers the primary difference is that front door is a global service whereas application gateway is a regional service.
Application gateway build secure scalable and highly available web front ends in azure azure information protection better protect your sensitive information anytime anywhere vpn gateway establish secure cross premises connectivity.
Waf with azure front door is a globally distributed edge security solution.
We recommend you choose a solution based on your overall performance and security requirements.
Waf defends your web services against common exploits and vulnerabilities.
With front door you can transform your global multi region consumer and enterprise applications into robust high performance personalized modern applications apis and content that reaches a global audience with azure.
However i m also not happy with app gateway.
Just like the azure application gateway front door can allow you to route traffic based on url paths of the request but it does allow for more complex route matching scenarios azure traffic manager enables you to control how traffic is distributed across your application endpoints.
For more information see load balancing with azure s application delivery suite.
That is within the scale unit.
Azure front door enables you to define manage and monitor the global routing for your web traffic by optimizing for best performance and quick global failover for high availability.
Waf on front door is a global and centralized solution.
