Azure App Gateway SSL

Yes, Azure Application Gateway supports SSL termination, allowing it to decrypt incoming HTTPS traffic at the gateway and forward requests to backend servers as unencrypted HTTP. This offloads CPU-intensive SSL processing from backend pools and centralizes certificate management at a single point.

Yes, Azure Application Gateway supports end-to-end SSL by terminating the client-side SSL connection and then re-encrypting traffic before forwarding it to backend servers. This provides both the performance benefit of SSL offload at the gateway and the security of encrypted communication all the way to the backend.

Azure Application Gateway accepts SSL certificates in PFX format uploaded directly to the gateway, and also supports certificates stored in Azure Key Vault. For serving multiple domains on a single listener, it supports Server Name Indication (SNI) to present the correct certificate per hostname.

Azure Front Door is a global, CDN-like service that also provides SSL termination and certificate management at the edge, while Application Gateway handles SSL at the regional level within a virtual network. Organizations can use both together—Front Door for global TLS and Application Gateway for regional SSL—to create layered traffic management and security.