Las plantillas de Inicio rápido de Azure están disponibles actualmente en inglés.
This template creates an Application Gateway with WAF configured along with a firewall policy
Esta plantilla de Azure Resource Manager (ARM) la creó un miembro de la comunidad, no Microsoft. Su propietario (no Microsoft) le permite usar las plantillas de ARM con arreglo a un contrato de licencia. Microsoft no se responsabiliza de ninguna plantilla de ARM que le proporcionen los miembros de la comunidad (o cuya licencia le otorguen) en cuanto a su seguridad, compatibilidad ni rendimiento. Las plantillas de ARM de la comunidad no reciben ningún tipo de soporte en ningún servicio ni programa de soporte de Microsoft. Dichas plantillas se proporcionan TAL CUAL, sin garantía de ningún tipo.
Parámetros
| Nombre del parámetro | Descripción |
|---|---|
| applicationGatewayName | Application gateway name |
| location | Application gateway location |
| tier | Application gateway tier |
| sku | Application gateway sku |
| http2Enabled | Enable HTTP/2 support |
| capacity | Capacity (instance count) of application gateway |
| autoScaleMaxCapacity | Autoscale capacity (instance count) of application gateway |
| publicIpAddressName | Public ip address name |
| vNetSubscriptionId | Virutal network subscription id |
| existingVnetResourceGroup | Virutal network resource group |
| existingVnetName | Virutal network name |
| existingSubnetName | Application gateway subnet name |
| sslCertificates | Array containing ssl certificates |
| trustedRootCertificates | Array containing trusted root certificates |
| httpListeners | Array containing http listeners |
| backendAddressPools | Array containing backend address pools |
| backendHttpSettings | Array containing backend http settings |
| rules | Array containing request routing rules |
| redirectConfigurations | Array containing redirect configurations |
| frontEndPorts | Array containing front end ports |
| customProbes | Array containing custom probes |
| managedIdentityResourceId | Resource id of an existing user assigned managed identity to associate with the application gateway |
| enableWebApplicationFirewall | Enable web application firewall |
| firewallPolicyName | Name of the firewall policy. Only required if enableWebApplicationFirewall is set to true |
| firewallPolicySettings | Array containing the firewall policy settings. Only required if enableWebApplicationFirewall is set to true |
| firewallPolicyCustomRules | Array containing the firewall policy custom rules. Only required if enableWebApplicationFirewall is set to true |
| firewallPolicyManagedRuleSets | Array containing the firewall policy managed rule sets. Only required if enableWebApplicationFirewall is set to true |
| firewallPolicyManagedRuleExclusions | Array containing the firewall policy managed rule exclusions. Only required if enableWebApplicationFirewall is set to true |
| enableDeleteLock | Enable delete lock |
| enableDiagnostics | Enable diagnostic logs |
| diagnosticStorageAccountId | Storage account resource id. Only required if enableDiagnostics is set to true |
| logAnalyticsWorkspaceId | Log analytics workspace resource id. Only required if enableDiagnostics is set to true |
Uso de la plantilla
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstalar y configurar PowerShell de Azure
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.network/application-gateway-waf-firewall-policy/azuredeploy.json
Línea de comandos
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstalación y configuración de la interfaz de línea de comandos multiplataforma de Azure
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.network/application-gateway-waf-firewall-policy/azuredeploy.json