The Azure Quickstart templates are currently available in English
Resource Manager templates and parameters demonstrating how to deploy App Service environment with Azure Firewall integration
Ce modèle ARM (Azure Resource Manager) a été créé par un membre de la communauté et non par Microsoft. Chaque modèle ARM vous est concédé sous licence sous un contrat de licence par son propriétaire, et non par Microsoft. Microsoft ne peut pas être tenu responsable des modèles ARM fournis et concédés sous licence par les membres de la communauté, ni ne vérifie leur sécurité, leur compatibilité ou leurs performances. Les modèles ARM de la communauté ne sont pris en charge par aucun programme ou service de support Microsoft. Ils sont rendus disponibles EN L'ÉTAT sans garantie d'aucune sorte.
Paramètres
| Nom du paramètre | Description |
|---|---|
| location | Location (region) for all resources. Use the location value, not the display name, e.g. eastus, not East US 2 |
| aseName | Name of the ASE resource |
| vnetResourceName | The name of the vNet |
| applicationName | Name of the initial ASE App (without the FQDN) |
| internalLoadBalancingMode | 0 = public VIP only, 1 = only ports 80/443 are mapped to ILB VIP, 2 = only FTP ports are mapped to ILB VIP, 3 = both ports 80/443 and FTP ports are mapped to an ILB VIP. |
| aseSubnetName | Subnet name which will contain the App Service Environment |
| serverFarmsAseAspName | Name of the app service |
| _artifactsLocation | The location of resources, such as templates and DSC modules, that the template depends on |
| _artifactsLocationSasToken | The sasToken required to access _artifactsLocation. When the template is deployed using the accompanying scripts, a sasToken will be automatically generated. |
| vnetAddressRange | Address range for the virtual network in CIDR notation |
| aseSubnetAddressRange | Address range for the ASE subnet in CIDR notation within the vnetAddress range |
| aseNSGName | Name for the NSG attached to the ASE subnet |
| aseRouteTableName | Name of the Route Table attached to the ASE subnet |
| azureFirewallName | Name of the Azure Firewall |
| deployAzureFirewall | Toggle whether to deploy the Azure Firewall |
| azureFirewallRouteTableName | Name of the Azure Firewall Route Table |
| azureFirewallSubnetAddressRange | Address range that will be used by the Azure Firewall Subnet within the vnetAddress range |
| azureFirewallPublicIP | Name for the Azure Firewall public IP resource |
| tags | The collection of resource tags passed from parameters file |
| aseSubnetServiceEndpoints | Service Endpoints enabled on the ASE subnet |
| aseManagementIps | List of ASE management IP addresses |
| azureMonitorFQDNs | FQDNs to whitelist for Azure Monitor |
Utiliser le modèle
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstaller et configurer Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/demos/app-service-environment-azfirewall/azuredeploy.json
Ligne de commande
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstaller et configurer l'interface de ligne de commande multiplateforme Azure
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/demos/app-service-environment-azfirewall/azuredeploy.json