可以使用WAF（Web访问防火墙）代替Azure API管理服务吗？ [英] Can WAF ( Web Access Firewall ) be used in place of Azure API Management service ?

问题描述

您好，

在其中一个解决方案架构中 - 我建议使用API​​管理服务1. 

• 接受API调用并将它们路由到后端。
• 跟踪调用特定API的调用次数

但有人建议Azure Web Access防火墙也可以执行同样，为什么我们需要API管理。虽然我不同意他，但我想知道它的确切区别和目的是什么？

我们可以使用WAG代替API管理吗？

<问候，

Snehal

解决方案

我猜考虑到你提到的2点，WAF（而不是使用WAF的App Gateway）确实支持这些。

但是 APIM提供还有更多功能，这不仅限于强大的策略引擎，API分离到产品，用户组，OAuth 2.0 / OpenID Connect集成，API订阅等。

您可以阅读更多关于APIM的
官方概述文档。

话虽这么说，如果你的解决方案只是期待反向代理的某些东西，虽然APIM仍然可以使用，你可能最好只用一个简单的应用离子网关。

Hello,

In one of the solution architectures - I proposed to use API Management service to 1. 

• Accepts API calls and routes them to your backends.
• To keep track of how many calls were made to specific API for auditing

However some one suggested that the Azure Web Access Firewall can also do the same, so why do we need API Management. Though I dont agree with him, I want to know what is the exact difference and purpose of it?

Can we use WAG instead of API Management?

Regards,

Snehal

解决方案

I guess considering the 2 points that you have mentioned, WAF (rather App Gateway with WAF) surely does support these.

But APIM offers a LOT more functionality that this not limited to a powerful policy engine, segregation of APIs into products, user groups, OAuth 2.0 / OpenID Connect integration, APIs subscriptions, etc.

You can read more about APIM in its official overview doc.

That being said, if your solution is just expecting something in the lines of a reverse proxy, though APIM can still be used, you are probably better off with just a simple Application Gateway.

这篇关于可以使用WAF（Web访问防火墙）代替Azure API管理服务吗？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！