Azure Front Door with Storage Account Containers for Each Environment – 404 Issue
Hello, I am implementing Azure Front Door with a single Azure Storage Account that contains multiple containers, each designated for a specific environment (e.g., dev, QA, UAT, etc.). My goal is to use Azure Front Door Private Endpoints to securely…
Can I set WAF rules to Log by default and override specific ones to Block?
Hey, I have set the WAF in Prevention mode to allow my custom rules like Rate limiting to be in effect with Blocking action. However as I was facing so many false positives with Microsoft_DefaultRuleSet 2.1, I changed the action as Log for it so that I…
I have app service protected by built-in auth, how to set it's health probe to Azure Front Door
As described in the title. I have 2 app service in different regions, they are protected by build-in auth. And I want to set up a azure front door with 2 origin groups for them. The question is how to set their health probe path in AFD ? since they…
How to limit Azure Front Door Cipher Suites Manually - Repeat
Previous thread stated; "Since this thread is too old, I would recommend creating a new thread on the same forum with as many details about your issue as possible. That would make sure your issue has better visibility in the community" Hence,…
Resource Health alert for front door is raised frequently for expiring custom domains
I have an Activity Log Alert Rule configured as follows: I have a custom domain with our own certificate that will expire in 29 days. Yesterday, I got almost 40 alerts for the expiration, and it's like this: Critical alert ("custom domain…
Private Endpoint NSLookup Resolving to Public IP Instead of Private IP for AppConfiguration
I have set up a Private Endpoint for my Azure resource (AppConfiguration) and followed all the necessary steps as per the Microsoft documentation, including: Created a Private Endpoint. Configured a Private DNS Zone (privatelink.azconfig.io). Linked…
Azure Front Door with Azure Storage Blobs
Hello! We have an Azure Blob Storage account containing a large number of media files (.MP4). These files are manually organized into categorized folders under a single container. Our goal is to allow all corporate users to access the container and…
Entra Private Access
We use Microsoft Always on VPN service for user to acecss on-premise resources when they are outisde the office netwok. This service is deployed in West-US datacenter. We have user group in India who need RDP and file service hosted in that brach office.…
Azure Front Door URL Rewriting for Dynamic Paths
During the migration from Azure CDN to Azure Front Door, URL rewriting issues are being encountered. In Azure CDN, the pattern (.*) was used to replace matched content with a new address while preserving unmatched content and appending a SAS token. Now,…
Domain Fronting Blocking vs SNI/Host-Header mismatch on the way to the origin
As Microsoft has announced block domain fronting behavior on newly created Azure Front Door (AFD) profiles (and in 11/2023 also on existing ones) is going to be blocked I'd like to verify whether anything changes in below scenario: Setup: We…
![](https://techprofile.blob.core.windows.net/images/f9ZqiPUeoEaKE0ziLYxdRw.png?8DA3FF)
Is to possible to set up an alias in Azure DNS to point to a Front Door configuration in another account / tenant?
I'm looking to point an apex domain to an Azure Front door configuration, which from what I understand can be achieved with Azure DNS using an alias, however the challenge I am facing is that the Azure DNS setup and the Front Door set up are in different…
Connecting Azure FrontDoor to Azure app services through VWAN integrated with Azure firewall
Here is the scenario for the setup we have: We have one subscription (HUB ) created to deploy secured Azure virtual WAN integrated with Azure firewall with Microsoft paired regions East US (primary region) and West US (secondary region). This is…
![](https://techprofile.blob.core.windows.net/images/Z5INGQQc9Uy45E6S986Teg.png?8DD4A2)
![](https://techprofile.blob.core.windows.net/images/Z5INGQQc9Uy45E6S986Teg.png?8DD4A2)
Azure front Door url rewriting
We are migrating from Azure CDN to Azure Front Door and are encountering URL rewrite issues. Previously, in CDN, we could use (.*) to replace the matched content with a new address, while preserving any unmatched content and appending a SAS token to the…
How to move custom domain from App Service to Front Door?
We are going to configure/setup an additional Front Door between enduser and App Service. Right now a custom domain is configured to the App Service directly (and validated with TXT record). In future this domain should point to the Front Door endpoint…
Adding firewall in front of web apps in Hub-and-Spoke architecture
Hi, I am shifting towards hub & spoke model in my Azure subscription so that all the traffic coming into my subscription goes through the firewall. I have multiple types of resources but I am more concerned about web apps and function apps. How can…
How to disable Microsoft_DefaultRuleSet-2.0-BLOCKING-EVALUATION-949110?
Hi Team, We are using Azure Front Door. And using by default WAF rules. But WAF is blocking some requests, in diagnostic logs we found rule_name Microsoft_DefaultRuleSet-2.0-BLOCKING-EVALUATION-949110 Please let us know is there any way…
Azure front door reading post method parameters and setting in query string.
How to set Azure front door rules for incoming request with post method parameters to query string parameter in url redirect? i tried below using in Azure front door rules sets but not able to read the values which are coming as post method …
ADF custom domain validation is pending for few days
Hi, I added a domain in Azure Front Door Standard, added the TXT record in my DNS provider, however, it still pending few days. Then, I tried to regenerate the TXT record but it still pending May I know how to fix it Thanks
Unable to create a custom domain in Azure Front Door because a "custom domain with the same host name already exists"
I am creating a Front Door standard tier route and adding a set of domain names. All but one have been added successfully. A attempt to add a specific domain name (in fact a www subdomain) fails repeatedly with the error: Failed to create the custom…
How to perform authentication in container apps through Front Door's custom domain?
I have a container app hosting a service that's currently publicly accessible. I'd like to add an authentication/authorization mechanism to the container app so it requires a login from Entra ID first(via front door custom domain). Our container app and…