are these the right steps to change app gateway load balancer limited to a private network?

  • associate frontend ip pool to private IP

  • update the listener front end ip configuration to private IP

  • disassociate front end ip from app gateway load balancer?

appreciate any help.


  • According to you description, you want to use a Internal load balancer. You could check your load balancer, if you use Internet facing load balancer, you could not change the load balancer type. – Shui shengbao Jun 19 '17 at 2:00
  • Your app runs on Azure VM or web app? – Shui shengbao Jun 19 '17 at 2:02
  • we need to manage sticky sessions so we cannot use internal load balancer. hence we are going with app gateway load balancer. But we do not want public ip on it. Load balancer will be connected to virtual machine scale set on a private subnet. – Rajan Bhayana Jun 19 '17 at 2:40
  • Hi, do you use Azure Application Gateway? – Shui shengbao Jun 19 '17 at 2:45
  • yes. the question is around same. azure application gatwway load balancer (not WAF). can i make it private only? and use it like internal load balancer. – Rajan Bhayana Jun 19 '17 at 3:18

Yes, it is possible.

You could create an Application Gateway with an Internal Load Balancer with private VMSS behind it. It will achieve your scenario. More information about this please refer to this link.


Yes, I am also using an app gateway with an express route connection. What you listed are the correct steps. I did a split dns to handle routing from the fqdn to the private ip

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.