6

Is it possible to set multiple Domains to point to an Azure Application Gateway Public IP and then upload SSL Certificates for each one that can then Offload on the Application Gateway?

For example if we'd like to have 200 LetsEncrypt certificates uploaded and terminating at the gateway, then forwarding traffic onto the internal VM IPs

2
  • I have been through the docs here: azure.microsoft.com/en-us/documentation/articles/… but it's unclear whether you can terminate multiple domains or only a single domain. Commented Dec 19, 2015 at 17:27
  • I'm a step behind you, how do you generate a PFX certificate for Application Gateway? Commented Jan 6, 2017 at 17:52

1 Answer 1

5

Is it possible to set multiple Domains to point to an Azure Application Gateway Public IP and then upload SSL Certificates for each one that can then Offload on the Application Gateway?

Yes, it is possible to set multiple domains to point to an Azure Application Gateway Public IP.

It is also possible to upload SSL certificates for each one so that Application Gateway offloads it.

However, there are limits. Please read below.

According to https://learn.microsoft.com/en-us/azure/azure-subscription-service-limits#application-gateway-limits you can upload a maximum of 20 certificates to a single Application Gateway resource, and only one certificate per HTTP listener.

You can however generate SAN certificate through LetsEncrypt and have a single certificate for multiple domains:

Can I get a certificate for multiple domain names (SAN certificates or UCC certificates)?

Yes, the same certificate can contain several different names using the Subject Alternative Name (SAN) mechanism.

https://letsencrypt.org/docs/faq/

I do not have experience yet with LetsEncrypt and do not know how to generate SAN certificate through LetsEncrypt.

We have SAN certificate (paid) through another company for multiple domains working in Application Gateway.

Sign up to request clarification or add additional context in comments.

1 Comment

Nice answer! Looks like a limit of 100 domains per SAN with LetsEncrypt.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.