This template deploys an Application Gateway with WAF, end to end SSL and HTTP to HTTPS redirect on the IIS servers.
此 Azure Resource Manager (ARM) 範本是由社群成員 (而非 Microsoft) 建立。每個 ARM 範本都是由其擁有者 (而非 Microsoft) 依據授權合約授權給您。Microsoft 並不負責社群成員所提供和授權的 ARM 範本，而不會為了安全性、相容性或效能進行篩選。社群 ARM 範本並未依據任何 Microsoft 支援方案或服務提供支援，而且會在沒有任何擔保的情況下依現況提供。
參數
| 參數名稱 | 說明 |
|---|---|
| adminUsername | Username for the Virtual Machine. |
| adminPassword | Password for the Virtual Machine. |
| windowsOSVersion | The Windows version for the VM. This will pick a fully patched image of this given Windows version. Allowed values: 2012-R2-Datacenter, 2016-Datacenter. |
| virtualMachineSize | The virtual machine size. Allowed values: Standard_A1, Standard_A2, Standard_A3. |
| applicationGatewaySize | Application Gateway size |
| capacity | Number of instances |
| wafMode | WAF Mode |
| frontendCertData | Base-64 encoded form of the .pfx file. This is the cert terminating on the Application Gateway. |
| frontendCertPassword | Password for .pfx certificate |
| backendCertData | Base-64 encoded form of the .pfx file. This is the cert installed on the web servers. |
| backendCertPassword | Password for .pfx certificate |
| backendPublicKeyData | Base-64 encoded form of the .cer file. This is the public key for the cert on the web servers. |
| backendCertDnsName | DNS name of the backend cert |
| _artifactsLocation | The base URI where artifacts required by this template are located. For example, if stored on a public GitHub repo, you'd use the following URI: https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/201-vmss-windows-webapp-dsc-autoscale. |
| _artifactsLocationSasToken | The sasToken required to access _artifactsLocation. If your artifacts are stored on a public repo or public storage account you can leave this blank. |
| location | Location for all resources. |
使用範本
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/201-application-gateway-2vms-iis-ssl/azuredeploy.json
命令列
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure 跨平台命令列介面
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/201-application-gateway-2vms-iis-ssl/azuredeploy.json