{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "slug": "dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway", "url": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/" }, "title": "Test each hostname-to-backend mapping on a multi-site Application Gateway", "summary": "Verify routing identity when several websites share the gateway.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:32:18+00:00", "modified_at": "2026-09-17T16:46:29+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 2, "word_count": 230, "potentially_affected": "Apply this review to a gateway serving multiple approved hostnames. Identify the real listeners, routing rules, backend settings and pools. Use the current platform requirements for the actual deployment; this article does not prescribe the tutorial's example operating system or public-access configuration.", "dse_recommendation": "DSE recommends a hostname mapping table owned jointly by the application and gateway teams.", "primary_source": { "name": "Tutorial: Create and configure an application gateway to host multiple web sites using the Azure portal - Azure Application Gateway | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/application-gateway/create-multiple-sites-portal", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft’s multi-site Application Gateway tutorial defines separate backend pools and configures listeners and routing rules around two domain names. The stated purpose is to direct each website’s requests to the appropriate servers. The tutorial’s example domains and virtual machines illustrate the mapping rather than identifying an organization’s production resources. Microsoft Learn.

\n

Applicability

\n

Apply this review to a gateway serving multiple approved hostnames. Identify the real listeners, routing rules, backend settings and pools. Use the current platform requirements for the actual deployment; this article does not prescribe the tutorial’s example operating system or public-access configuration.

\n

DSE recommendation

\n

DSE recommends a hostname mapping table owned jointly by the application and gateway teams. Record the expected backend and response for every site, plus the intended handling of an unknown hostname. Review changes that reuse an existing listener or backend setting against all affected sites. Preserve the old mapping and an approved restoration sequence.

\n

Verification

\n

From an authorized client, send a representative request for each configured hostname and correlate it with backend-side observations. Confirm the content and application behavior as well as the destination pool. Test the agreed unknown-host case. Repeat all relevant mappings after a listener or rule change so a working first website does not conceal an incorrect second-site route.

\n

Official references

\n

Microsoft Learn: Tutorial: Create and configure an application gateway to host multiple web sites using the Azure portal.

", "content_text": "Source facts\nMicrosoft’s multi-site Application Gateway tutorial defines separate backend pools and configures listeners and routing rules around two domain names. The stated purpose is to direct each website’s requests to the appropriate servers. The tutorial’s example domains and virtual machines illustrate the mapping rather than identifying an organization’s production resources. Microsoft Learn.\nApplicability\nApply this review to a gateway serving multiple approved hostnames. Identify the real listeners, routing rules, backend settings and pools. Use the current platform requirements for the actual deployment; this article does not prescribe the tutorial’s example operating system or public-access configuration.\nDSE recommendation\nDSE recommends a hostname mapping table owned jointly by the application and gateway teams. Record the expected backend and response for every site, plus the intended handling of an unknown hostname. Review changes that reuse an existing listener or backend setting against all affected sites. Preserve the old mapping and an approved restoration sequence.\nVerification\nFrom an authorized client, send a representative request for each configured hostname and correlate it with backend-side observations. Confirm the content and application behavior as well as the destination pool. Test the agreed unknown-host case. Repeat all relevant mappings after a listener or rule change so a working first website does not conceal an incorrect second-site route.\nOfficial references\nMicrosoft Learn: Tutorial: Create and configure an application gateway to host multiple web sites using the Azure portal.", "content_markdown": "## Source facts\n\nMicrosoft’s multi-site Application Gateway tutorial defines separate backend pools and configures listeners and routing rules around two domain names. The stated purpose is to direct each website’s requests to the appropriate servers. The tutorial’s example domains and virtual machines illustrate the mapping rather than identifying an organization’s production resources. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/application-gateway/create-multiple-sites-portal).\n\n## Applicability\n\nApply this review to a gateway serving multiple approved hostnames. Identify the real listeners, routing rules, backend settings and pools. Use the current platform requirements for the actual deployment; this article does not prescribe the tutorial’s example operating system or public-access configuration.\n\n## DSE recommendation\n\nDSE recommends a hostname mapping table owned jointly by the application and gateway teams. Record the expected backend and response for every site, plus the intended handling of an unknown hostname. Review changes that reuse an existing listener or backend setting against all affected sites. Preserve the old mapping and an approved restoration sequence.\n\n## Verification\n\nFrom an authorized client, send a representative request for each configured hostname and correlate it with backend-side observations. Confirm the content and application behavior as well as the destination pool. Test the agreed unknown-host case. Repeat all relevant mappings after a listener or rule change so a working first website does not conceal an incorrect second-site route.\n\n## Official references\n\n[Microsoft Learn: Tutorial: Create and configure an application gateway to host multiple web sites using the Azure portal](https://learn.microsoft.com/en-us/azure/application-gateway/create-multiple-sites-portal)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "url": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Test each hostname-to-backend mapping on a multi-site Application Gateway", "item": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "url": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/", "headline": "Test each hostname-to-backend mapping on a multi-site Application Gateway", "description": "Verify routing identity when several websites share the gateway.", "abstract": "Verify routing identity when several websites share the gateway.", "articleBody": "Source facts\nMicrosoft’s multi-site Application Gateway tutorial defines separate backend pools and configures listeners and routing rules around two domain names. The stated purpose is to direct each website’s requests to the appropriate servers. The tutorial’s example domains and virtual machines illustrate the mapping rather than identifying an organization’s production resources. Microsoft Learn.\nApplicability\nApply this review to a gateway serving multiple approved hostnames. Identify the real listeners, routing rules, backend settings and pools. Use the current platform requirements for the actual deployment; this article does not prescribe the tutorial’s example operating system or public-access configuration.\nDSE recommendation\nDSE recommends a hostname mapping table owned jointly by the application and gateway teams. Record the expected backend and response for every site, plus the intended handling of an unknown hostname. Review changes that reuse an existing listener or backend setting against all affected sites. Preserve the old mapping and an approved restoration sequence.\nVerification\nFrom an authorized client, send a representative request for each configured hostname and correlate it with backend-side observations. Confirm the content and application behavior as well as the destination pool. Test the agreed unknown-host case. Repeat all relevant mappings after a listener or rule change so a working first website does not conceal an incorrect second-site route.\nOfficial references\nMicrosoft Learn: Tutorial: Create and configure an application gateway to host multiple web sites using the Azure portal.", "datePublished": "2026-09-17T16:32:18+00:00", "dateModified": "2026-09-17T16:46:29+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-162-test-each-hostname-to-backend-mapping-on-a-multi-site-application-gateway/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Test each hostname-to-backend mapping on a multi-site Application Gateway" }, "articleSection": [ "Cybersecurity", "Networks & Infrastructure" ], "keywords": [ "Cybersecurity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 230, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Tutorial: Create and configure an application gateway to host multiple web sites using the Azure portal - Azure Application Gateway | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/application-gateway/create-multiple-sites-portal" } } ] } }