Application Gateway management operations are agonizingly slow
[Originally posted to Azure Portal forum - however should have been submitted here]
Most creates and updates for application gateway configuration (back-end pools, rules, listeners, certificates, etc.) take 5-10 minutes to apply. This is not a portal issue as it takes just as long via the API / CLI. (This is with even a single instance App Gateway)
Applying these same settings on Windows Server ARR directly takes only a minute or less, so I'm not sure where the performance issue lies, but there is tremendous room for improvement.
As it is currently, it provides waaaay too much time while waiting to consider the porting costs of a migration to the alternate cloud platform.
Kevin Piette
shared this idea
Update operations have been enhanced with fast update. The operations which continue to be slow are SSL Policy, SSL certificate, ports and scaling up/down. Most other operations like listener, rules, http settings, backend pool, backend pool members, probes should be of the order of ~1min now.
92 comments
-
Andres Barcenas
commented
Any updates on these improvements?
-
MikeN
commented
One suggestion I have for people complaining about this issue is if you have many different configuration changes to do, use PowerShell rather than the GUI. It seems that it's the saving of changes that takes a long time. You can make many different configuration changes, you only get the delay when you run set-azurermapplicationgateway to apply the configuration changes.
-
Johannes Edstoft Hansen commented
For comparison our backend deployment consists of; AppInsights, ADB PostgreSQL, and an AKS cluster (with 5 nodes), which takes about 15 minutes to provision. AKS being the slowest resource to provision as it needs to provision the nodes vnets oms resources etc.
However our frontend deployment consists of just an Application Gateway (Medium, 2 instances, WAF, minimum configuration, ~40 minutes to provision) and an API management (Basic, 1 instance, ~45-55 minutes to provision mostly spent "activating"). I feel both of these resources shouldn't take more than 10 minutes to provision each.
-
THis problem also exists for API Management instances. Painfully slow to provision and change scaling on add SSL to etc. Please fix both of these! Testing ARM templates that contain either an APIM or AG currently takes > 90 minutes just in the provisioning phase (>45 minutes to bring up & >45 minutes to delete resources), this is wasteful and frustrating as what you typically want to test is the integration between resources.
-
Chris Politz
commented
Working on this today in US South Central, 15-20 minutes to apply any rule change.
-
MikeN
commented
Is there any update on this? It was working better for a while but now it is back to being ridiculously slow in US East.
-
Luke
commented
As others have mentioned change and creation times for Application Gateway (West Europe) are ridiculous, taking an hour or more just to front a single scale set. Not even with SSL.
-
Jason
commented
As an update, just created a basic App Gateway in West Europe, with a single front-end IP, a single listener (https with a single ssl certificate attached) linked to a single backend linux VM. The App Gateway took 52 minutes 30 seconds to build....this really needs work please, it's not acceptable. It almost forces you to keep fail-over gateways up at all times because the deploy time kills any SLAs you consider sticking to. Not good for the company wallet.
-
Jason
commented
This is still way too slow to be a useful product. The grating part is knowing that we are being charged for resources that take so long to come up, you know you've just paid money for that privilege of waiting, and when it does come up, or doesn't because of an error, you have to got through the same waiting game again! Please make this far more slicker!!
-
Amit M
commented
The times are simply ridiculous. Cannot wait for an hour to get the gateway created!!!
-
MikeN
commented
This seems to be much better now. Configuration changes are now saving quickly.
Thanks for addressing this! -
Anonymous
commented
Hi! Our team is going to use Application Gateway on production environment.
When will it be fixed? Just simple deleting of listener takes an hour or more... -
Anonymous
commented
Any updates on this? It's still horribly slow!
-
Le Roi
commented
Halleluja ! Can't wait
-
Anonymous
commented
The speed is AMAZING!!! Makes me want to self F5 Networks WAF...
Alone the speed of this, will cost clients more in man hours... -
Anthony BOUQUET
commented
@Jasper Siegmund, 10-15 could be fine... Today, I'm waiting for an operation to end for more than 30 mins. Usually I love what Azure can provide but this particular service is too much annoying to use.
-
Jasper Siegmund
commented
It would already help quite a lot if we could queue up a bunch of changes and have those deploy in one go. Right now there's quite a few operations which all have to be executed step by step, each one taking 10 - 15 minutes to complete. As said already quite a few times: this is very annoying when working on it.
-
MikeN
commented
Glad to hear this is being worked on. I was seriously considering just using a Citrix virtual appliance for this purpose rather than application gateway. needing to wait 5+ minutes for every configuration change is painful.
-
Anthony BOUQUET
commented
+1, hope that it will be fixed soon on April or May like you said
-
Leow Kah Man
commented
Dead slow.
Almost a year since the issue was raised and still waiting for it to be fixed.