Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.

4.3.3. TLS Configuration

SSL Termination (SSL Offload):
  • App Gateway decrypts, inspects, routes
  • Backend receives unencrypted traffic
  • Certificate on App Gateway
End-to-End SSL:
  • App Gateway decrypts, re-encrypts
  • Traffic encrypted to backend
  • Certificates on both App Gateway and backends
Rewrite Sets:

Modify headers and URLs:

  • Add/modify request/response headers
  • Rewrite URL path
  • Rewrite URL query string

Use cases:

  • Add security headers
  • Remove server information
  • Redirect HTTP to HTTPS
Alvin Varughese
Written byAlvin Varughese
Founder15 professional certifications