Skip to content

Commit 51aea04

Browse files
committed
edit pass: migrating-to-application-gateway-v2
1 parent 2e30b3a commit 51aea04

3 files changed

Lines changed: 10 additions & 10 deletions

File tree

articles/application-gateway/migrate-v1-v2.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ This article focuses on the configuration stage of migration. Migration of clien
5656
> [!NOTE]
5757
> Application Gateway V2 includes [customer-controlled backend TLS relaxation](configuration-http-settings.md#backend-https-validation-settings), a capability that streamlines backend certificate validation during migration. You can use this feature to temporarily relax TLS checks by skipping the certificate chain, skipping expiry validation, or overriding Server Name Indication (SNI) validation. This action aligns behavior with what's already permitted in V1.
5858
>
59-
> When the [enhanced migration script](migrate-v1-v2.md#enhanced-cloning-script---recommended) runs, it enables these relaxation settings by default for HTTPS backends to prevent disruptions caused by the stricter certificate enforcement in V2. After you complete the migration, you can upload the appropriate trusted root certificates and disable backend TLS relaxation to align with the recommended security posture for V2.
59+
> When the [enhanced migration script](#enhanced-cloning-script-recommended) runs, it enables these relaxation settings by default for HTTPS backends to prevent disruptions caused by the stricter certificate enforcement in V2. After you complete the migration, you can upload the appropriate trusted root certificates and disable backend TLS relaxation to align with the recommended security posture for V2.
6060
6161
[!INCLUDE [cloud-shell-try-it.md](~/reusable-content/ce-skilling/azure/includes/cloud-shell-try-it.md)]
6262

@@ -164,7 +164,7 @@ Private Application Gateway deployments must have subnet delegation configured t
164164

165165
- If you have FIPS mode enabled for your V1 gateway, it isn't migrated to your new V2 gateway.
166166

167-
- Web Application Firewall V2 is configured to use CRS 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set (DRS 2.2) after migration. For more information, refer to [Web Application Firewall DRS and CRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
167+
- Web Application Firewall V2 is configured to use Core Rule Set (CRS) 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set after migration: Default Rule Set (DRS) 2.2. For more information, see [Web Application Firewall DRS and CRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
168168

169169
> [!NOTE]
170170
> During migration, don't attempt any other operation on the V1 gateway or any associated resources.
@@ -323,10 +323,10 @@ The legacy script takes the following parameters:
323323

324324
- The Web Application Firewall V2 instance is created in the old Web Application Firewall configuration mode. Migration to the Web Application Firewall policy is required.
325325

326-
- Web Application Firewall V2 is configured to use CRS 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set (DRS 2.2) after migration. For more information, refer to [CRS and DRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
326+
- Web Application Firewall V2 is configured to use CRS 3.0 by default. Because CRS 3.0 is on the path to deprecation, upgrade to the latest rule set (DRS 2.2) after migration. For more information, see [CRS and DRS rule groups and rules](../web-application-firewall/ag/application-gateway-crs-rulegroups-rules.md).
327327

328328
> [!NOTE]
329-
> Application Gateway V2 supports NTLM and Kerberos passthrough authentication. For more information, refer to [Dedicated backend connection](configuration-http-settings.md#dedicated-backend-connection).
329+
> Application Gateway V2 supports NTLM and Kerberos passthrough authentication. For more information, see [Dedicated backend connection](configuration-http-settings.md#dedicated-backend-connection).
330330
331331
## Installing the script
332332

@@ -408,7 +408,7 @@ This script requires the following mandatory parameters:
408408
- `v1resourceId`. The resource ID of the V1 gateway whose public IP will be reserved and associated with V2.
409409
- `v2resourceId`. The resource ID of the V2 gateway to which the V1 public IP will be assigned. You can create the V2 gateway manually or by using any one of the cloning scripts.
410410
411-
After you download and [install the script](../application-gateway/migrate-v1-v2.md#installing-the-script), run `AzureAppGWIPMigrate.ps1` with the required parameters:
411+
After you download and [install the script](#installing-the-script), run `AzureAppGWIPMigrate.ps1` with the required parameters:
412412
413413
```azurepowershell
414414
./AzureAppGWIPMigrate.ps1
@@ -480,11 +480,11 @@ The scenarios in the following table are examples for illustration purposes only
480480
| Standard Large | 467.2 | 179.58 | For these variants, in most cases, moving to a V2 gateway can provide a better price benefit compared to V1. |
481481
| Web Application Firewall Large | 654.08 | 262.8 | Same as for Standard Large. |
482482

483-
For further concerns about the pricing, work with your account manager or get in touch with our support team for assistance.
483+
For further concerns about the pricing, work with your customer success account manager (CSAM) or get in touch with our support team for assistance.
484484

485485
## Common questions
486486

487-
For answers to common questions about migration, see [Frequently asked questions about Application Gateway V1 retirement](./retirement-faq.md#faq-on-v1-to-v2-migration).
487+
For answers to common questions about migration, see [Frequently asked questions about Application Gateway V1 retirement](./retirement-faq.md#common-questions-about-migration-from-v1-to-v2).
488488

489489
## Related content
490490

articles/application-gateway/retirement-faq.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.author: mbender
1212
---
1313
# Frequently asked questions about Application Gateway V1 retirement
1414

15-
On April 28, 2023, Microsoft announced that Application Gateway V1 is retiring on *April 28, 2026*. If you're still using V1 SKU resources, be sure to plan and complete your migration to V2 before this date to avoid service disruptions.
15+
On April 28, 2023, Microsoft announced that Application Gateway V1 is retiring on *April 28, 2026*. If you're still using V1 resources, be sure to plan and complete your migration to V2 before this date to avoid service disruptions.
1616

1717
This article answers commonly asked questions about the V1 retirement timeline, what to expect after retirement, and how to migrate from V1 to V2. For migration guidance, see [Migrate Azure Application Gateway and Web Application Firewall from V1 to V2](./migrate-v1-v2.md).
1818

@@ -103,7 +103,7 @@ No, the script doesn't replicate this configuration for V2. You must add the log
103103

104104
### Does the script support certificates uploaded to Azure Key Vault?
105105

106-
Yes, you can download the certificate from Azure Key Vault and provide it as input to the migration script. The [enhanced cloning script](./migrate-v1-v2.md#enhanced-cloning-script---recommended) automatically copies all the TLS/SSL certificates from V1 to the newly created V2 gateway.
106+
Yes, you can download the certificate from Azure Key Vault and provide it as input to the migration script. The [enhanced cloning script](./migrate-v1-v2.md#enhanced-cloning-script-recommended) automatically copies all the TLS/SSL certificates from V1 to the newly created V2 gateway.
107107

108108
### I ran into some problems with the migration. How can I get help?
109109

articles/application-gateway/v1-retirement.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ Complete the migration as soon as possible to prevent business impact and to tak
4747

4848
> [!VIDEO 7ed01e33-80a9-4daa-9322-e771f963a2fe]
4949
50-
- For answers to frequently asked questions, see [FAQ on V1 to V2 migration](./retirement-faq.md#faq-on-v1-to-v2-migration).
50+
- For answers to frequently asked questions, see [FAQ on V1 to V2 migration](./retirement-faq.md).
5151

5252
- For the announcement about the capabilities of V2, see the blog post [Taking advantage of the new Azure Application Gateway V2](https://azure.microsoft.com/blog/taking-advantage-of-the-new-azure-application-gateway-v2/).
5353

0 commit comments

Comments
 (0)