Public Preview: Web Application Firewall (WAF) running on Application Gateway for Containers

Application Gateway for Containers, Azure’s application (layer 7) load balancing and dynamic traffic management solution for workloads running in a Kubernetes cluster, now supports Web Application Firewall (WAF) in public preview. Application Gateway for Containers is the next evolution of Application Gateway + Application Gateway Ingress Controller. With the addition of Azure WAF support, Application Gateway for Containers workloads can now protect workloads from web-based attacks like SQL injections, cross-site scripting, protocol anomalies, and more. 

  

When using WAF to protect your Application Gateway for Containers resources you get access to the Azure-managed Default Rulesets (DRS), providing protection not only from threats identified by the Open Web Application Security Project (OWASP), but also additional protections provided by Microsoft’s Threat Intelligence Center (MSTIC). Application Gateway for Containers WAF users also have access to bot protection via bot manager rulesets and protection against DDoS attacks using rate limiting custom rules. 

Learn more.