Application Gateway Limits

This document outlines the limits and constraints for Azure Application Gateway. Understanding these limits is crucial for designing and deploying scalable and reliable solutions.

General Limits

These limits apply to most Application Gateway configurations.

Feature Limit Notes
Maximum number of Application Gateway instances 100 Per subscription
Maximum number of backend pools 400
Maximum number of backend HTTP settings 400
Maximum number of listeners 400
Maximum number of rules (Request Routing Rules) 400
Maximum number of SSL certificates 100 Per Application Gateway instance
Maximum size of request header 8 KB
Maximum size of response header 8 KB
Maximum size of URL 2048 characters

SKU-Specific Limits

The following table details limits that vary based on the Application Gateway SKU (Standard_V2, WAF_V2).

Standard_V2 SKU

Feature Small Medium Large
Throughput (Gbps) 1 4 10
Connections per second 2500 10000 25000
Concurrent connections 100000 200000 500000

WAF_V2 SKU (Web Application Firewall)

Feature Small Medium Large
Throughput (Gbps) 0.5 2 5
Connections per second 1250 5000 12500
Concurrent connections 50000 100000 250000

Web Application Firewall (WAF) Specific Limits

These limits apply specifically to WAF-enabled Application Gateways.

Feature Limit Notes
Number of custom rules 1000 Per Application Gateway
Number of managed rule sets 1 For OWASP rule sets. You can enable specific rule groups.
Maximum size of request body 2048 KB Configurable up to this limit
Maximum file upload size 100 MB Configurable up to this limit
Important: Limits are subject to change. Always refer to the official Azure documentation for the most up-to-date information.

Considerations

Related Topics