Protecting Azure Container Apps with Azure Front Door WAF

[@ardeny100]

Hi, great video! I was tinkering arround and I've found out I was only able to recreate this with Container App with the workload type: Consumption, which doesnt support user defined routes (UDR). When I tried different workload profile It failed with the error "Private Link Service does not support a load balancer that has IP based backend pool, which is used in Consumption + Dedicated environments." I suspect this is caused because load balancer backends uses Ips and not DNS names in different profiles. I was just wondering if you have any tips to tackle this issue. Great content btw, keep it up!

[@Thojouno]

I've beat my head on this one for several days. The instructions in this video will only work with "Consumption Only" and not type "Workload profile". It appears this is a new feature added late last year. The Workload profile/Consumption type allows larger containers than Consumption Only. I believe the only recourse is you need to front the ACE with Azure Application Gateway, then you can front the agw with Front Door.