Traffic Shapping with Azure App Gateway

[Ricardo Sousa da Silva]

Hello,

We are migrating a Jira Server to a Jira Datacenter using the Azure Template and now we are facing a Traffic Shapping issue.

We created a secondary VMSS (Virtual Machine Scale Set) to host API Nodes, configured a path-based rule on Azure App Gateway to use API Nodes for incoming request to /rest/api/*

It works if I use for example  Postman to retrieve info from /rest/api passing authentication (the connection goes directly to the API nodes).

However, when a normal connection occurs, we enter in a loop state where the login page continuously appear and each time we connect in a different node.
This seems that Azure App Gateway doesn't differ internal calls from outside calls to /rest/api and the affinity cookie is not observed.
My question is: is someone using Jira Datacenter deployed using Azure Template with Traffic Shapping out there?

[Dave Theodore [Coyote Creek Consulting] · Accepted solution]

You can't use Application Gateway to do this.  It does not support referrer based routing, as Microsoft considers that a vulnerability.  You'll need to use a 3rd party load balancer. Check the Atlassian doc for more info on why this is needed.

[Ricardo Sousa da Silva]

Thank you @Dave Theodore [Coyote Creek Consulting] , we decided at this point to not move with traffic shapping and on next phase we will use F5/BigIP Virtual appliance.