Hosting websites on a shared vm and pointing using Azure front door
Hi, I have an Azure VM hosting multiple websites. I would like to redirect users to mywebsite.eastus.cloudapp.azure.com/mysite when they route to mywebsite.com using Azure front door, I have a DNS zone hosted in Azure, the VM also has a public IP. Any…
As on today (19-Sep-2024), Does 'Azure Front Door' supports Web Sockets. My Aspnet Core Blazor Server App behind the AFD does not work and throw error
Error: Failed to start the transport 'WebSockets': Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy…
Front Door Log Analytics Workspace Cost
Hi, I have a question about Diagnostic Settings in Azure Front Door Premium. Currently the Azure Front Door Premium resource has Diagnostic Settings configured to use Log Analytic Workspace and its costing nearly one third of our total Azure spend.…
Want to deploy front door in Hub-Spoke architecture to use custom domain for ADB2C, using private endpoint
I am looking to deploy one Azure front door, we are in Hub Spoke architecture. Front door - will be deployed in Hub AD B2C - in different spoke, will be peered with Hub. I want to configure in a way that no public access is allowed on both frontdoor and…
Azure Front Door resource response with a lot of 429 HTTP errors
Hi, We manged to deploy a Azure Front Door resource in front of a website. In reports and metrics we see aprox 100 000 - 200 000 request/h, so I assume we don't fall into 100 000 req/s limit. Still, sometimes our developers our clients get 429 HTTP…
How to perform authentication in container apps through Front Door's custom domain?
I have a container app hosting a service that's currently publicly accessible. I'd like to add an authentication/authorization mechanism to the container app so it requires a login from Entra ID first(via front door custom domain). Our container app and…
Front Door (Premium) redirect to path rule remove query string
Hi, My use is to create a rewrite rule. First Rule if there's a query string replace the query string Second rule if there's no query string add a query string. How can I achieve this in rule set? It seems there's no way to test if the url has no query…
How do we integrate Azure Front Door with Application Gateway for Containers
How do we integrate Azure Front Door with Application Gateway for Containers? We had followed "Managed by ALB Controller" process. The challenge we are facing is integrating ALB Controller with Azure Front Door as application gateway for…
Request blocked by Microsoft_DefaultRuleSet-2.1-SQLI-942120 for russian language
When we try to submit the leads in our website We figured out that for Russian language characters Azure Front door firewall rule(942120 - SQL Injection Attack: SQL Operator Detected) was blocking the requests. Below is the screenshot of how we find it…
Custom Domain validation not working for non-Azure Domain
I have a static website in a storage account associated with Front Door. I have added a Custom Domain hosted by Squarespace but the domain validation is not completing after many hours. The custom domain is ppgstats.markallison.co.uk and when I click on…
Front door doesn't return 304 even if ETag matches
Hello! I am being charged significant amount for outbound traffic from Azure front door. So we started to dig in and I found out that the server returns 200 and full response even when it should return 304 with empty body. The response ETag matches with…
Add thousands of custom domains to Azure Web App or Static web app
Hi. We need to add multiple custom domains (will get to thousands) to an azure static web app and/or azure web app. The problem is the quota when it comes to adding custom domains to the web apps (up to 5 depending on your plan). It seems one option…
Front Door responds with OriginTimeout after ~4 seconds despite larger timeout setting
Hi! We have 90 seconds timeout configured as the origin timeout setting. However, from time to time Front Door fails just after 4 seconds with OriginTimeout setting, something like below. It looks like these requests don't even reach the origin. What…
Azure frontdoor blocking Cyrillic Characters and Chinese Language values in the request payload
Hi, One of our API providers facing ‘403 forbidden’ error due to Cyrillic and Chinese characters fields in their request payload. It’s get blocked in the Azure frontdoor by following rule sets. Microsoft_DefaultRuleSet-2.1-PHP-933210 - PHP Injection…
How can I create a private link between Azure FrontDoor and Azure Container App?
I have configured an Azure Container Apps environment with an application and aim to exclusively access it through Front Door. Despite the seemingly straightforward nature of this requirement, it has proven to be a challenging endeavor. I have…
Azure Storage Account - Public Access via Azure Front Door Endpoint - Firewall Setting
Hi, I have a storage account static website being accessed via Azure FrontDoor. It works well with "Public network access" option set to "Enabled from all networks". If I set it to "Enabled from selected VNETs and IPs" I'll…
How to limit Azure Front Door Cipher Suites Manually - Repeat
Previous thread stated; "Since this thread is too old, I would recommend creating a new thread on the same forum with as many details about your issue as possible. That would make sure your issue has better visibility in the community" Hence,…
Azure CDN on custom domain with HTTPS access and SIP parameter in SAS token uses the incorrect IP address
In april 2024 we encountered an issue where accessing a CDN on custom domain with HTTPS access and SIP parameter in SAS token uses the incorrect IP address always lead to a 401 response. Therefore i started support case 2404240050004042. The SAS-token…
How to limit Azure Front Door Cipher Suites Manually?
Hi, Right now there is a preview feature for Min TLS Cipher Suite on app Services and I know that we have a premium feature for End-to-end TLS with Azure Front Door. We are using Azure Front Door for our Static Website and we have the Premium tier…
How to block all geographic region and only allow specific regions to reach my Azure APIM ?
I have deployed multiple API Management Services (APIM) in my Azure Subscriptions. According to Application Insight, this APIM is hit or maybe attacked by a few thousand requests from around the world daily which my company and product do not have…