Application Gateway Ingress Controller (AGIC) Made Easy

Name: Application Gateway Ingress Controller (AGIC) Made Easy
Rating: 4.9 (36 reviews)

A Comprehensive and Practical Course: Containers, K8s, Web Applications, Routing, Security, Monitoring, HA and others

Highest Rated

Created bycourscape.com by Andrei Barbu | Microsoft employee working daily with AKS, ARO, ACI, ACR

Last updated 5/2025

English

What you'll learn

Containerization, Kubernetes, AKS, Application Gateway basics
What Application Gateway Ingress Controller (AGIC) is, networking considerations, deployment methods
How to expose applications via custom domain name
AGIC routing and other AGIC-related annotations
How to create multiple types of TLS/SSL certificates and expose applications via HTTPS, using TLS/SSL termination or End-to-End TLS/SSL
AGIC-related security, including Web Application Firewall (WAF)
Other AGIC-related configurations like restricting it to specific namespaces or sharing the Application Gateway with other Azure services
How to monitor and troubleshoot the Application Gateway and its traffic
How to achieve reliability and high availability

Course content

9 sections • 73 lectures • 7h 35m total length

Introduction about instructor and course8:15
Meet your instructor and explore the Azure application gateway ingress controller and its use with Azure Kubernetes Service. Learn core topics from installation to gateway configuration and practical integration.
Good to know / Recommended background3:32
Connect with me

What is a container and how is it different from a VM?9:06
Microservices architecture2:10
Explore how microservices split a monolithic app into independent services, boosting flexibility and scalability, with containers providing portability and resilient cloud deployments.
Install Docker and Azure CLI on an Ubuntu VM and other considerations7:45
What are Docker, Dockerfile and Docker Hub?7:12
Understand how Docker enables containerized apps by building images with a Dockerfile, running containers with docker run, and storing them in Docker Hub registries.
Create a container app (web app), pushing it to Docker Hub and running it7:19
Create and test a containerized Flask web app, log request data across routes, and build, tag, push, and run its Docker image on port 80 via Docker Hub.

What is the Azure Application Gateway?9:41
What is Azure Kubernetes Service (AKS)?8:04
Explore how Kubernetes and Azure Kubernetes Service (AKS) simplify deploying, scaling, and upgrading containerized apps; discover how the Application Gateway Ingress Controller integrates with AKS for seamless traffic management.
Understand basic Kubernetes objects and what an ingress controller is16:07
Configure Application Gateway and AKS (without AGIC) to understand the downside8:27
Kubectl and Visual Studio Code tips and tricks3:42
What is the Application Gateway Ingress Controller (AGIC)?4:26
Azure free account and AGIC pricing (Application Gateway and AKS pricings)13:52
AGIC installation methods (Greenfield / Brownfield and Add-on / Helm)8:31
Learn AGIC installation methods for greenfield and brownfield deployments, using add-on or helm, and compare identities, complexity, version updates, and features like prohibited targets across AKs.
Networking considerations, network plugins in AKS and their relevance in AGIC17:00
Create AGIC with the Greenfield method and add-on (using Azure CNI)4:22
Deploy an AKS cluster with the greenfield method and the Azure CNI add-on using the Azure CLI, provisioning an application gateway within the infrastructure resource group.
Create AGIC with the Brownfield method and add-on (using kubenet)4:44
Create AGIC with the Greenfield/Brownfield method and Helm (Workload Identity)8:24
How and why to Stop/Start the AKS cluster and the Application Gateway4:29
Deploy an application in AKS and see it exposed via the Application Gateway4:39
Learn to deploy an application in an AKS cluster and automatically configure the Azure Application Gateway with the ingress pod and AGIC, exposing the app via an ingress rule.
Basic components-IP, backend pool, backend setting, listener, rule, health probe13:12
Understand how application gateway components—backend pool, listener, rule, backend settings, and health probes—work together to route traffic from a front-end IP to Kubernetes pods, with basic and path-based routing.
Understand Application Gateway Backend Health2:29
Create AGIC with both public and private IP5:45
Create AGIC with private IP only7:30
Create an application gateway with a private IP only using AGIC, including enabling the preview network isolation feature, deploying with helm, and testing with nginx behind the private gateway.
Understand and use VNET peering6:14
Understand Application Gateway scaling3:27
Understand annotations in AGIC2:38
Learn how annotations attach metadata to Kubernetes ingresses to enable application gateway features in AGIC, translating to http settings, backend pools, listeners, and SSL/TLS for advanced routing.
Starting with Application Gateway Ingress Controller (AGIC) quiz

Configure a custom domain with the help of an Azure Public DNS zone and use it4:11
Host Multiple Sites5:13
Host Multiple Subdomains3:27
Host multiple subdomains on a single domain by configuring nginx and httpd via ingress, updating YAML rules, and pointing A records to the application gateway for subdomain routing.
URL / Path Based Routing4:15
Implement url or path based routing with an application gateway, directing requests to images and videos backends via ingress rules and Dockerized Flask apps.
Avoid this confusion when using URL / Path Based Routing6:06
Clarifies URL and path based routing in the application gateway ingress controller. Shows that paths must be defined at the application level to avoid not found and 502 errors.
Expose using a different path than the one at app level (Backend Path Prefix)3:33
Implement Rule Priority6:27
Append additional hostnames (Hostname Extension)2:46
Specify the hostname used while talking to the pods (Backend Hostname)5:00
Use the backend host annotation to specify the hostname the application gateway uses when talking to pods, and see how hostname override directs traffic for domains like football.com and basketball.com.
Override Frontend Port1:50
Use a Rewrite Rule Set4:03
Customize the Health Probe6:46
Cookie Based Affinity6:59
Connection Draining2:42
Specify a Request Timeout after which the request will fail if not received2:45
AGIC routing and usage of other configuration annotations - quiz

Create a self-signed certificate2:19
Setup a bought/paid trusted SSL certificate8:41
Create a Let's encrypt SSL certificate (manually)10:11
Understand SSL Termination and End-to-End (E2E) SSL6:36
Expose via HTTPS with a certificate in a Kubernetes TLS secret9:04
Configure SSL redirection3:25
Expose via HTTPS with a certificate uploaded in the Application Gateway7:24
Expose via HTTPS with Cert-Manager and Let's Encrypt certificate (autogenerated)12:08
Setup End-to-End (E2E) SSL8:45
Use a Network Security Group (NSG) to restrict traffic8:33
Use a network security group to restrict inbound traffic to an application gateway by applying subnet-level rules with priorities, enabling gateway manager ports, while observing default inbound internet blocking.
Understand Web Application Firewall (WAF)5:56
Understand how the azure application gateway's web application firewall protects web apps from common vulnerabilities like sql injection and xss, with detection and prevention modes, policies, and custom rules.
Deploy and test WAF6:19
Deploy and test a waf v2 on the application gateway with ingress exposure, enable prevention mode, verify cross-site scripting, and enable diagnostic logging to a log analytics workspace.
Create and use a WAF policy7:16
Create and apply a web application firewall policy on the application gateway. Block traffic from Romania using a custom geo-location rule in prevention mode to return 403.
Certificates, Security and Web Application Firewall (WAF) in AGIC - quiz

Restrict AGIC access to specific namespaces5:07
Share an AGIC-managed Application Gateway with other Azure resources12:38
Learn how to share an application gateway with other Azure resources using Helm with shared set to true, and manage Azure ingress prohibited targets to protect backend pools and listeners.
Use AGIC and other ingress controller (like nginx) in the same AKS cluster6:24
Disable the managed add-on and considerations2:13
Learn how to disable the AGIC managed add-on, prevent automatic application gateway deletion by removing the created by ingress app gw tag, and re-enable with the gateway ID.
Other AGIC-related configurations and considerations - Quiz

Understand AGIC-related reliability, including Availability Zones4:47
How to specify Availability Zones during AKS and Application Gateway creation1:48
Specify availability zones during AKS and Application Gateway creation using the zones option in the portal and the create command; this supports templates like bicep or terraform for deployment.
Use Azure Front Door to route traffic between multiple AGICs13:28
Use a custom domain and Azure Front Door certificate to expose apps in AGIC3:19
Reliability and high availability (HA) - Quiz

Requirements

It is good to have basic knowledge of Containerization, Linux, Networking, Kubernetes, Azure, Application Gateway, and Azure Kubernetes Service (AKS) but I am explaining most of the concepts at specific points in the course

Description

This comprehensive course on Application Gateway Ingress Controller (AGIC) provides in-depth knowledge and hands-on experience to effectively deploy and manage web applications in Azure. You will learn the fundamentals of containers, Kubernetes, Azure Kubernetes Service (AKS), and the Azure Application Gateway, and then dive into the intricacies of AGIC setup, configuration, and advanced usage scenarios.

Starting with an introduction to containers and microservices architecture, you will explore Docker, Docker Hub, and container app deployment. You will gain understanding of the Azure Application Gateway and Azure Kubernetes Service (AKS), including basic Kubernetes objects and ingress controllers.

The course covers various installation methods for AGIC, networking considerations, and the deployment process using both the Greenfield and Brownfield methods, as well as the installation via AKS managed add-on or via Helm. You will learn how to configure AGIC for both public and private IPs, utilize VNET peering, scale application gateways, and manage annotations.

With a focus on routing and configuration, you will discover how to implement URL/path-based routing, host multiple sites and subdomains, customize health probes, utilize cookie-based affinity and more. The course also covers SSL certificate creation or importation, security considerations, and implementing Web Application Firewall (WAF) for enhanced application protection.

You will explore additional AGIC configurations and considerations, such as namespace restrictions, sharing AGIC-managed gateways with other Azure resources, and integrating multiple ingress controllers in the same AKS cluster. Monitoring and troubleshooting AGIC/Application Gateway, high availability, and using Azure Front Door for traffic routing are also covered in detail.

By the end of this course, you will have the knowledge and skills to confidently deploy and manage application gateways using AGIC, leverage advanced configuration options, ensure reliability and high availability, and effectively monitor and troubleshoot your deployments.

Join this course and unlock the power of Azure Application Gateway Ingress Controller (AGIC) to streamline your web application delivery!

Who this course is for:

Anyone that would like to expose containerized web application running in Azure
Developers and architects interested in learning how to deploy and manage applications using AGIC
AKS/Kubernetes administrators or operators who want to understand how to integrate AGIC into their AKS/Kubernetes clusters for advanced ingress capabilities
DevOps engineers responsible for managing and optimizing application delivery in Azure Kubernetes Service (AKS) using AGIC
IT professionals interested in leveraging the benefits of Web Application Firewall (WAF) and other security features provided by AGIC in Azure
Administrators that looking to achieve high availability for their web applications
Anyone who is looking to learn a new skill

Application Gateway Ingress Controller (AGIC) Made Easy

What you'll learn

Explore related topics

Course content

Course introduction3 lectures • 12min

Understanding containers5 lectures • 34min

Starting with Application Gateway Ingress Controller (AGIC)21 lectures • 2hr 38min

AGIC routing and usage of other configuration annotations15 lectures • 1hr 6min

Certificates, Security and Web Application Firewall (WAF) in AGIC13 lectures • 1hr 37min

Other AGIC-related configurations and considerations4 lectures • 26min

Monitor and troubleshoot AGIC/Application Gateway7 lectures • 40min

Reliability and high availability (HA)4 lectures • 23min

Bonus Lecture1 lecture • 1min

Requirements

Description

Who this course is for: