Search code examples
azuredevopsazure-virtual-networkweb-application-firewallazure-waf

Using Azure WAF for my server(not in Azure)

I have a server at my home with static IP and website in IIS, which available from internet. I wanted to protect it by Azure Web Application Firewall, but it works only in Azure Virtual Network.

Can I add my server to Azure Virtual Network? Is it possible to protect my server which is not placed in cloud by WAF?

I know, that I can use other services and apps, but I'm interested in only this setup🙂

Example

Solution

  • according with your case scenario and considering application Gateway backend pools can contain:

    • NICs
    • Virtual machine scale sets
    • Public IP addresses
    • Internal IP addresses
    • FQDN
    • Multitenant backends (such as App Service)

    as per Application gateway components, you should be able to use your public IP address if the "On Prem" host is exposed to Internet. If the "On Prem" host is not exposed to Internet, you should use a VPN or Expressroute allowing traffic from "on Prem" to the VNET.