应用程序网关前端 IP 地址配置Application Gateway front-end IP address configuration

可将应用程序网关配置为使用公共 IP 地址和/或专用 IP 地址。You can configure the application gateway to have a public IP address, a private IP address, or both. 托管需要由客户端在 Internet 中通过面向 Internet 的虚拟 IP (VIP) 访问的后端时,必须使用公共 IP 地址。A public IP address is required when you host a back end that clients must access over the Internet via an Internet-facing virtual IP (VIP).

公共和专用 IP 地址支持Public and private IP address support

应用程序网关 V2 目前不支持专用 IP 模式。Application Gateway V2 currently does not support only private IP mode. 它支持以下组合:It supports the following combinations:

  • 专用 IP 地址和公共 IP 地址Private IP address and public IP address
  • 仅限公共 IP 地址Public IP address only

有关详细信息,请参阅有关应用程序网关的常见问题解答For more information, see Frequently asked questions about Application Gateway.

不向 Internet 公开的内部终结点不需要公共 IP 地址。A public IP address isn't required for an internal endpoint that's not exposed to the Internet. 该终结点称为内部负载均衡器 (ILB) 终结点或专用前端 IP。That's known as an internal load-balancer (ILB) endpoint or private frontend IP. 应用程序网关 ILB 适合用于不向 Internet 公开的内部业务线应用程序。An application gateway ILB is useful for internal line-of-business applications that aren't exposed to the Internet. 对于位于不向 Internet 公开的安全边界内的多层级应用程序中的服务和层级,ILB 也很有用,但需要启用轮循机制负载分配、会话粘性或 TLS 终止。It's also useful for services and tiers in a multi-tier application within a security boundary that aren't exposed to the Internet but that require round-robin load distribution, session stickiness, or TLS termination.

仅支持一个公共 IP 地址或一个专用 IP 地址。Only one public IP address or one private IP address is supported. 在创建应用程序网关时选择前端 IP。You choose the front-end IP when you create the application gateway.

  • 对于公共 IP 地址,可以在应用程序网关所在的位置创建新的公共 IP 地址或使用现有的公共 IP。For a public IP address, you can create a new public IP address or use an existing public IP in the same location as the application gateway. 有关详细信息,请参阅静态与动态公共 IP 地址For more information, see static vs. dynamic public IP address.

  • 对于专用 IP 地址,可以在创建应用程序网关的子网中指定一个专用 IP 地址。For a private IP address, you can specify a private IP address from the subnet where the application gateway is created. 如果不显式指定专用 IP 地址,则系统会在子网中自动选择一个任意 IP 地址。If you don't specify one, an arbitrary IP address is automatically selected from the subnet. 以后无法更改选定的 IP 地址类型(静态或动态)。The IP address type that you select (static or dynamic) can't be changed later. 有关详细信息,请参阅创建包含内部负载均衡器的应用程序网关For more information, see Create an application gateway with an internal load balancer.

某个前端 IP 地址将关联到检查前端 IP 上的传入请求的侦听器。A front-end IP address is associated to a listener, which checks for incoming requests on the front-end IP.

后续步骤Next steps