microsoft / azure-container-apps

Roadmap and issues for Azure Container Apps
MIT License
355 stars 27 forks source link

Feature Request: Support UDRs in consumption-only based environments #1175

Open audunsolemdal opened 1 month ago

audunsolemdal commented 1 month ago

Is your feature request related to a problem? Please describe.
As mentioned in #227, Container apps environments with workload profiles support UDRs. However, these plans are quite costly for the time being.

Describe the solution you'd like.
I would like Consumption based container app environments to support UDRs so that I can keep the Azure Firewall integration for my workloads without taking a cost bump when migrating away from my AKS clusters.

Describe alternatives you've considered.
Making available smaller / cheaper workload profile sizes could be an option (e.g. B-series v2)

yem583 commented 1 month ago

I'm not able to move to Workload/Dedicated Environment because of it not supporting Front door to Private endpoints - https://techcommunity.microsoft.com/t5/apps-on-azure-blog/configure-container-app-with-front-door/ba-p/3814998, so I'm kind of stuck, I need UDR to route traffic, but also want to use Front door to private endpoints

anthonychu commented 4 weeks ago

Private link for workload profile environments is tracked at #867 . @cachai2 can you please provide an update?

chinadragon0515 commented 4 weeks ago

@audunsolemdal we do not have plan to add UDR for consumption only environment. The workload profile environment consumption workload profile has exactly same billing as consumption only environment.

Can you use consumption workload profile in workload profile environment, and if you see cost increased, can you send detail information to acasupport(at)microsoft(dot)com and we can check.

yem583 commented 4 weeks ago

What about supporting front door to private endpoint of container app.  Currently this only works In consumption plan, and without udr can’t combine front door firewall and private endpoint?Sent from my iPhoneOn May 31, 2024, at 9:30 AM, Vincent He @.***> wrote: @audunsolemdal we do not have plan to add UDR for consumption only environment. The workload profile environment consumption workload profile has exactly same billing as consumption only environment. Can you use consumption workload profile in workload profile environment, and if you see cost increased, can you send detail information to acasupport(at)microsoft(dot)com and we can check.

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you commented.Message ID: @.***>

audunsolemdal commented 4 weeks ago

Sorry for being unclear, I meant consumption-only apps environments

Thanks for the clarification.

chinadragon0515 commented 4 weeks ago

@yem583 We will have two type of private endpoint support,

  1. private endpoint support on container app environment directly, it will be only for workload profile env, AFD support is being worked on, other part is ready for private preview.
  2. Private endpoint support via private link service created on load balancer (same as consumption only env), private preview is ready, but only few regions are ready only, if you want to try, can you share the region you require to us and we can check whether we have supported or not.
chinadragon0515 commented 4 weeks ago

@audunsolemdal we do not have plan to support UDR in consumption-only based environments at this moment. We recommend you to use consumption workload profile in workload profile environments which has exactly billing as consumption only environments and provide much more flexible network configurations.

yem583 commented 4 weeks ago

That’s good news, sounds like coverage for my use case is at least in the works.  Thanks so much for the quick response.  Sent from my iPhoneOn May 31, 2024, at 9:53 AM, Vincent He @.***> wrote: @audunsolemdal we do not have plan to support UDR in consumption-only based environments at this moment. We recommend you to use consumption workload profile in workload profile environments which has exactly billing as consumption only environments and provide much more flexible network configurations.

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: @.***>