How to configure a third-party DNS for apex domain on Azure Front Page?
I am configuring custom domains on Azure front door and the DNS service is not hosted on Azure (therefore using “all other DNS services” option when adding the custom domains. I configure the following in the DMS zone file for the domain (propagation is…
Azure Front Door Custom Domain Validation Fails & DNS Record Update Error
I am setting up a custom domain for my Azure Front Door private endpoint using an Azure DNS Zone. After adding a custom domain, I noticed that the validation state remains either "Pending" or "Rejected". Additionally, when I attempt…
DNS settings are correct but Custom domain remains in "pending" state on Azure Front Door
DNS settings are correct but Custom domain remains in "pending" state on Azure Front Door. TXT and CNAME records have been triple checked, are valid but the state does not change. Any ideas?
Azure Front Door with Azure Storage Blobs
Hello! We have an Azure Blob Storage account containing a large number of media files (.MP4). These files are manually organized into categorized folders under a single container. Our goal is to allow all corporate users to access the container and…
Homepage Redirect Issue with Custom Permalinks and Static Page on Azure Front Door
Hello, I've encountered a redirect issue with my WordPress site configured behind Azure Front Door, and I hope to receive some guidance. Setup Overview: Domain: I'm hosting the WordPress site on a custom domain using Azure Front Door. The application…
Issue with Migrated Domain on Azure Front Door - Unable to Associate New Route
Hello, I am facing an issue with my Azure Front Door on the Standard plan, which was migrated from the Classic plan. This Front Door uses a "migrated domain", which is the default domain generated by Microsoft (xxxx.azurefd.net), and all my…

Fix - The secret doesn't meet our certificate requirement. Please refer to "Certificate checklist"
Hi Team, I am getting an error while deploying Azure Front Door - CDN Profile using the ARM template with Terraform. For your reference, I have attached a code snippet here. Your help would be highly appreciated! Thank You! Bhavneet Kumar
Can I set WAF rules to Log by default and override specific ones to Block?
Hey, I have set the WAF in Prevention mode to allow my custom rules like Rate limiting to be in effect with Blocking action. However as I was facing so many false positives with Microsoft_DefaultRuleSet 2.1, I changed the action as Log for it so that I…
Azure Front Door Instance DNS State "CNAME/alias record is not currently detected"
I've been following this MS tutorial to connect my Front Door instance to a custom domain. My endgoal is to connect my Azure Front Door instance to my static website and give the static website the custom domain. I've completed the steps up to…
Azure Front Door with Storage Account Containers for Each Environment – 404 Issue
Hello, I am implementing Azure Front Door with a single Azure Storage Account that contains multiple containers, each designated for a specific environment (e.g., dev, QA, UAT, etc.). My goal is to use Azure Front Door Private Endpoints to securely…
Azure Front Door Classic Migration
Our solution have some static pages currently running on the Azure Front Door and CDN Profile, classic version. From Azure document, it seems straightforward steps to migrate from the classic version to standard / premium version. However, we have…
Frontdoor Health probe throws 404 with application gateway
Hi there, I've been facing an issue with FrontDoor health probe and the application gateway that I'm unable to find a solution to. I have the following architecture. Frontdoor has a few routes and origin groups with two origins configured with each…
Using a URL Rewrite in the Rule sets After Route is not working
I have two APIs, the structure is almost the same, but they should go to different backend pool, So I create "Resources" and "Resources2" as Routes Resources, pattern to match : "/app/api/resources" (origin…
I have app service protected by built-in auth, how to set it's health probe to Azure Front Door
As described in the title. I have 2 app service in different regions, they are protected by build-in auth. And I want to set up a azure front door with 2 origin groups for them. The question is how to set their health probe path in AFD ? since they…
How to limit Azure Front Door Cipher Suites Manually - Repeat
Previous thread stated; "Since this thread is too old, I would recommend creating a new thread on the same forum with as many details about your issue as possible. That would make sure your issue has better visibility in the community" Hence,…
Resource Health alert for front door is raised frequently for expiring custom domains
I have an Activity Log Alert Rule configured as follows: I have a custom domain with our own certificate that will expire in 29 days. Yesterday, I got almost 40 alerts for the expiration, and it's like this: Critical alert ("custom domain…
Private Endpoint NSLookup Resolving to Public IP Instead of Private IP for AppConfiguration
I have set up a Private Endpoint for my Azure resource (AppConfiguration) and followed all the necessary steps as per the Microsoft documentation, including: Created a Private Endpoint. Configured a Private DNS Zone (privatelink.azconfig.io). Linked…
Azure Front Door URL Rewriting for Dynamic Paths
During the migration from Azure CDN to Azure Front Door, URL rewriting issues are being encountered. In Azure CDN, the pattern (.*) was used to replace matched content with a new address while preserving unmatched content and appending a SAS token. Now,…
Domain Fronting Blocking vs SNI/Host-Header mismatch on the way to the origin
As Microsoft has announced block domain fronting behavior on newly created Azure Front Door (AFD) profiles (and in 11/2023 also on existing ones) is going to be blocked I'd like to verify whether anything changes in below scenario: Setup: We…

Is to possible to set up an alias in Azure DNS to point to a Front Door configuration in another account / tenant?
I'm looking to point an apex domain to an Azure Front door configuration, which from what I understand can be achieved with Azure DNS using an alias, however the challenge I am facing is that the Azure DNS setup and the Front Door set up are in different…