Allow Mutual SSL Auth on Application Gateway
At the moment SSL termination is possible with Application Gateway but it doesn't cater for instances where client authentication is required (mutual auth). So if client auth is required, SSL needs to be passed through and terminated on each of the web servers. This increases load across the server farm and makes management of certificates more difficult since all certs need to be maintained on all servers. I believe this function is available with API Management but the additional cost is hard to justify if one doesn't require the other additional features. So having mutual SSL auth capability built into the Application Gateway would be fantastic.
Thanks for all your feedback so far. This is something we are looking to address relatively soon. Please stay tuned.
Shaw, David commented
Come on Microsoft, this is painful. AppGw v2 runs on nginx now so implementing mTLS should be a straightforward piece of work!
Wow, nothing yet still?
Any update on this? its surprising to see this feature in planned state for years.
Rune Synnevåg commented
Any updates on this? Cannot have Planned for 2 years 😔
Ross Baker commented
Hi any update please this has nee requested for nearly 5 years now ?
Azure Networking Team (Product Manager, Microsoft Azure) commented · November 05, 2015 23:15 · Flag as inappropriate
Mutual Auth is already in the product backlog based on similar asks from other customers and it is something we will consider in the next planning phase.
This is reaching fevered pitch with clients.
Hi a vote from me for this as well. When can we expect a release please?
Mitesh Chauhan commented
Hello, any timelines for this fix please ? Workaround I am told is to use App GW v1. This is a step backwards which we want to avoid...
Duane Benson commented
Please Please Please! Can we at least have an update on this? It's really the achilles heel of Azure and will drive us to other platforms.
Carrington Richards commented
I was about to based my entire application around your gateway.. then i hit this tread and requirement number 1 isn't satisfied..
Really basic feature here Ms, would rather not head over to google but looks like you forced me!
Roman Greil commented
Please provide an update. It's 2020 already :-)
Alexander Viken commented
ok... what is relatively soon? and will it be available on the WAF_v2 SKU too?
Hi, this was changed into planned in October 2018. Is there any indication that this is actually being worked on? We really need this feature.... thanks.
John Davies commented
Any updates please? Looking at the first comment, this was planned in 2015 we are now in 2020......
Pratheep kumar R.C. commented
What is the status of this feature? Please update.
Agree w/ Kevin...
Also json schema validation... =)
Kevin King commented
Status please? This is a big miss on this product. We need this capability.
Hans Kindberg commented
What is the status of this feature?
Desperate for this feature, please can we get an update?