Container Apps Networking

VNet integration, ingress configuration, custom domains, and TLS for Container Apps.

Ingress Modes

Mode	Visibility	Use Case
External	Internet-accessible	Public APIs, web apps
Internal	Not internet-accessible; reachable within the environment and VNet (if VNet-injected)	Microservices, back-end APIs
Disabled	No HTTP ingress	Background workers, queue processors

Bicep — External Ingress

configuration: {
  ingress: {
    external: true
    targetPort: 8080
    transport: 'auto'
    allowInsecure: false
  }
}

Bicep — Internal Ingress

configuration: {
  ingress: {
    external: false
    targetPort: 8080
  }
}