Question

Your company hosts two public web applications, shop.contoso.com and portal.contoso.com, behind a single Azure Application Gateway v2. Both must be reachable over HTTPS on TCP port 443 using the same public frontend IP, and each site must present its own dedicated TLS certificate to clients. What is the minimum configuration you must implement to satisfy this requirement?

Accepted Answer

Create two multi-site HTTPS listeners on port 443, each with a host name and its own uploaded TLS certificate, then associate each listener with a routing rule.

Answer

Create a single basic HTTPS listener on port 443 with both certificates uploaded, and use a path-based rule to select the correct certificate per site.

Answer

Create two separate frontend public IP addresses, one per site, each with a basic HTTPS listener bound to a single certificate.

Answer

Create one HTTPS listener on port 443 using a wildcard *.contoso.com certificate and rely on host header rewrite rules to differentiate the sites.