As you click the Add button, a new window would allow you to choose the type of endpoint along with the custom domain name you would like to configure.Under the Settings section, navigate to the Custom Domains blade on your API Management service.However, you can also expose your APIM endpoints using your own custom domain name, such as xyz.com When you create an Azure APIM service, Azure assigns it a subdomain of (for example, ). The following public documentation highlights these in detail and specifies all the ports that you would need to set in order to enable accessibility to the APIM service:.When the APIM service is in Internal VNet mode and the associated subnet has an NSG configured, there are certain network configurations that you need to add to the NSG associated to the subnet within which the APIM service resides.Once configured, you would observe a Private IP for your APIM service on the Overview blade of the APIM Azure Portal.Use this same VNet to deploy the APIM service in Internal VNet mode. Create a Virtual network under your Azure Subscription in the same location as that of APIM.Create an APIM Service following the steps explained in the below article :.Since there is only one private IP designated to all the endpoints of APIM service, we need to configure Application Gateway in such a manner that the respective host name is supplied to the APIM internal load balancer as per the call that needs to be routed to the designated endpoint (portal, management, proxy, et cetera)

A blocker here could be that Application Gateway routes the calls using IP address However, APIM works on the basis of host names.

In this configuration, all the calls that hit the APIM Service pass through the Application Gateway. Application gateway is a reverse proxy service which has a 7-layer load balancer and provides Web Application Firewall (WAF) as one of the services in this use case.

Using Application Gateway provides users the ability to protect the API Management service from OWASP vulnerabilities. Integrating Application Gateway (v2) with API Management service in Internal Virtual networkĪPI Management service can be configured in Internal Virtual Network mode which makes it accessible only from within the Virtual Network.

Api gateway waf