Application Gateway for Containers,
Azure’s application (layer 7) load balancing and dynamic traffic management
solution for workloads running in a Kubernetes cluster, now supports Web
Application Firewall (WAF) in public preview.
Application Gateway for Containers is the next evolution of Application Gateway
+ Application Gateway Ingress Controller. With the addition of Azure WAF
support, Application Gateway for Containers workloads can now protect workloads
from web-based attacks like SQL injections, cross-site scripting, protocol
anomalies, and more.
When using WAF to protect your Application Gateway for Containers
resources you get access to the Azure-managed Default Rulesets (DRS),
providing protection not only from threats identified by the Open Web
Application Security Project (OWASP), but also additional protections provided
by Microsoft’s Threat Intelligence Center (MSTIC). Application Gateway for
Containers WAF users also have access to bot protection via bot manager rulesets and
protection against DDoS attacks using rate limiting custom rules.
Learn more.