Azure / apim-landing-zone-accelerator

The Azure API Management landing zone accelerator provides an architectural approach and reference implementation to prepare landing zone subscriptions for a secure API Management infrastructure.
https://aka.ms/apim-lza
MIT License
152 stars 153 forks source link

Network Considerations Lacking #83

Open liamfoneill opened 1 year ago

liamfoneill commented 1 year ago

There are lots of gaps in this landing zone accelerator particularly around Network Design. There is no mention of Azure Firewall or VWAN hubs which are the most common seen in Enterprise Scale Network topologies.

jagslab commented 1 year ago

I too have fallen into this gap. I was trying to figure out how to design APIM in a hub (vWAN hub) and spoke network, protected by Azure Firewall. I cannot find any documentation on the best way to do this.

perrylambr commented 1 year ago

Same here. We wanted to create an Azure Landing Zone based on the Hub/Spoke model of the Cloud Adoption Framework using an Application Gateway, Azure Firewall and API Management with forced tunneling. In the end we build our own solution based on the following articles. Maybe it can help you as well.

anwarnk commented 2 months ago

@liamfoneill did you find a working solution for APIM in a vWAN hub?