Azure Front Door Integration to External ASE

Question

Hi Team, I am having Web app and API deployed in App Service and having a Front Door on top of it to load balance it across region. Since now we need to move to App Service Environment, we are deploying this web app and API to external ASE. Can you confirm if Azure Front Door can work with external ASE or not as i feel ASE is tightly coupled to isolated secured environment in a region?

Answer 1

@Balachandar Ramalingam I understand you are move you existing app service to an external ASE and wish to understand if it will still work with your Azure FrontDoor as your Layer-7 load balancer.

I do not think there will be any issue here:

• As an External ASE has a public VIP, which means that all HTTP/HTTPS traffic to the apps in the ASE hits an internet-accessible IP address.
• For Azure Front Door the origin must have a public IP or a DNS hostname that can be resolved publicly.

So, you should not face any issue in adding the External ASE domain name or public IP address as an origin to your front door. Although it is highly recommended to test this scenario in Test environment first as you have will have to make changes to your origin in your front door more details here.

Reference:

https://learn.microsoft.com/en-us/azure/frontdoor/front-door-faq#what-type-of-resources-are-currently-compatible-as-an-origin-

https://learn.microsoft.com/en-us/azure/app-service/environment/create-external-ase#three-ways-to-create-an-ase

Hope this helps! Please let me know if you have any questions. Thank you!

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.