You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/application-gateway/migrate-v1-v2.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -56,7 +56,7 @@ This article focuses on the configuration stage of migration. Migration of clien
56
56
> [!NOTE]
57
57
> Application Gateway V2 includes [customer-controlled backend TLS relaxation](configuration-http-settings.md#backend-https-validation-settings), a capability that streamlines backend certificate validation during migration. You can use this feature to temporarily relax TLS checks by skipping the certificate chain, skipping expiry validation, or overriding Server Name Indication (SNI) validation. This action aligns behavior with what's already permitted in V1.
58
58
>
59
-
> When the [enhanced migration script](migrate-v1-v2.md#enhanced-cloning-script---recommended) runs, it enables these relaxation settings by default for HTTPS backends to prevent disruptions caused by the stricter certificate enforcement in V2. After you complete the migration, you can upload the appropriate trusted root certificates and disable backend TLS relaxation to align with the recommended security posture for V2.
59
+
> When the [enhanced migration script](#enhanced-cloning-script-recommended) runs, it enables these relaxation settings by default for HTTPS backends to prevent disruptions caused by the stricter certificate enforcement in V2. After you complete the migration, you can upload the appropriate trusted root certificates and disable backend TLS relaxation to align with the recommended security posture for V2.
@@ -164,7 +164,7 @@ Private Application Gateway deployments must have subnet delegation configured t
164
164
165
165
- If you have FIPS mode enabled for your V1 gateway, it isn't migrated to your new V2 gateway.
166
166
167
-
- Web Application Firewall V2 is configured to use CRS 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set (DRS 2.2) after migration. For more information, refer to[Web Application Firewall DRS and CRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
167
+
- Web Application Firewall V2 is configured to use Core Rule Set (CRS) 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set after migration: Default Rule Set (DRS) 2.2. For more information, see[Web Application Firewall DRS and CRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
168
168
169
169
> [!NOTE]
170
170
> During migration, don't attempt any other operation on the V1 gateway or any associated resources.
@@ -323,10 +323,10 @@ The legacy script takes the following parameters:
323
323
324
324
- The Web Application Firewall V2 instance is created in the old Web Application Firewall configuration mode. Migration to the Web Application Firewall policy is required.
325
325
326
-
- Web Application Firewall V2 is configured to use CRS 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set (DRS 2.2) after migration. For more information, refer to[CRS and DRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
326
+
- Web Application Firewall V2 is configured to use CRS 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set (DRS 2.2) after migration. For more information, see[CRS and DRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
327
327
328
328
> [!NOTE]
329
-
> Application Gateway V2 supports NTLM and Kerberos passthrough authentication. For more information, refer to[Dedicated backend connection](configuration-http-settings.md#dedicated-backend-connection).
329
+
> Application Gateway V2 supports NTLM and Kerberos passthrough authentication. For more information, see[Dedicated backend connection](configuration-http-settings.md#dedicated-backend-connection).
330
330
331
331
## Installing the script
332
332
@@ -408,7 +408,7 @@ This script requires the following mandatory parameters:
408
408
- `v1resourceId`. The resource ID of the V1 gateway whose public IP will be reserved and associated with V2.
409
409
- `v2resourceId`. The resource ID of the V2 gateway to which the V1 public IP will be assigned. You can create the V2 gateway manually or by using any one of the cloning scripts.
410
410
411
-
After you download and [install the script](../application-gateway/migrate-v1-v2.md#installing-the-script), run `AzureAppGWIPMigrate.ps1` with the required parameters:
411
+
After you download and [install the script](#installing-the-script), run `AzureAppGWIPMigrate.ps1` with the required parameters:
412
412
413
413
```azurepowershell
414
414
./AzureAppGWIPMigrate.ps1
@@ -480,11 +480,11 @@ The scenarios in the following table are examples for illustration purposes only
480
480
| Standard Large | 467.2 | 179.58 | For these variants, in most cases, moving to a V2 gateway can provide a better price benefit compared to V1. |
481
481
| Web Application Firewall Large | 654.08 | 262.8 | Same as for Standard Large. |
482
482
483
-
For further concerns about the pricing, work with your account manager or get in touch with our support team for assistance.
483
+
For further concerns about the pricing, work with your customer success account manager (CSAM) or get in touch with our support team for assistance.
484
484
485
485
## Common questions
486
486
487
-
For answers to common questions about migration, see [Frequently asked questions about Application Gateway V1 retirement](./retirement-faq.md#faq-on-v1-to-v2-migration).
487
+
For answers to common questions about migration, see [Frequently asked questions about Application Gateway V1 retirement](./retirement-faq.md#common-questions-about-migration-from-v1-to-v2).
Copy file name to clipboardExpand all lines: articles/application-gateway/retirement-faq.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,7 +12,7 @@ ms.author: mbender
12
12
---
13
13
# Frequently asked questions about Application Gateway V1 retirement
14
14
15
-
On April 28, 2023, Microsoft announced that Application Gateway V1 is retiring on *April 28, 2026*. If you're still using V1 SKU resources, be sure to plan and complete your migration to V2 before this date to avoid service disruptions.
15
+
On April 28, 2023, Microsoft announced that Application Gateway V1 is retiring on *April 28, 2026*. If you're still using V1 resources, be sure to plan and complete your migration to V2 before this date to avoid service disruptions.
16
16
17
17
This article answers commonly asked questions about the V1 retirement timeline, what to expect after retirement, and how to migrate from V1 to V2. For migration guidance, see [Migrate Azure Application Gateway and Web Application Firewall from V1 to V2](./migrate-v1-v2.md).
18
18
@@ -103,7 +103,7 @@ No, the script doesn't replicate this configuration for V2. You must add the log
103
103
104
104
### Does the script support certificates uploaded to Azure Key Vault?
105
105
106
-
Yes, you can download the certificate from Azure Key Vault and provide it as input to the migration script. The [enhanced cloning script](./migrate-v1-v2.md#enhanced-cloning-script---recommended) automatically copies all the TLS/SSL certificates from V1 to the newly created V2 gateway.
106
+
Yes, you can download the certificate from Azure Key Vault and provide it as input to the migration script. The [enhanced cloning script](./migrate-v1-v2.md#enhanced-cloning-script-recommended) automatically copies all the TLS/SSL certificates from V1 to the newly created V2 gateway.
107
107
108
108
### I ran into some problems with the migration. How can I get help?
Copy file name to clipboardExpand all lines: articles/application-gateway/v1-retirement.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -47,7 +47,7 @@ Complete the migration as soon as possible to prevent business impact and to tak
47
47
48
48
> [!VIDEO 7ed01e33-80a9-4daa-9322-e771f963a2fe]
49
49
50
-
- For answers to frequently asked questions, see [FAQ on V1 to V2 migration](./retirement-faq.md#faq-on-v1-to-v2-migration).
50
+
- For answers to frequently asked questions, see [FAQ on V1 to V2 migration](./retirement-faq.md).
51
51
52
52
- For the announcement about the capabilities of V2, see the blog post [Taking advantage of the new Azure Application Gateway V2](https://azure.microsoft.com/blog/taking-advantage-of-the-new-azure-application-gateway-v2/).
0 commit comments