How do I get my apex domain working with Azure. http://www and https://www work fine.

Tom@gematrix 1

I've pointed the domain to azure from network solutions as instructed.
I have created a dns zone for gematrix.com.
I've added * and www for cname record.

apex gematrix.com still coming up gematrix.com’s server IP address could not be found.

GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-17T03:32:45.353+00:00

Hello @Tom@gematrix ,

Could you please provide some more details regarding your setup? Are you trying to create static websites using Azure storage and Azure CDN? Which article are you following for your setup?

Also, CNAME records aren't supported at the zone apex. So, you can’t use a CNAME record to point your apex domain to your CDN endpoint. Instead, you can use an alias record to point the zone apex to a CDN endpoint directly.

Please refer: https://learn.microsoft.com/en-us/azure/dns/dns-alias#point-zone-apex-to-azure-cdn-endpoints
https://learn.microsoft.com/en-us/azure/dns/tutorial-alias-tm
Tom@gematrix 1 Reputation point

2020-09-18T00:00:55.217+00:00

Hi @GitaraniSharma-MSFT ,
Yes I have a static website.
I created an alias A record today and now the apex works, thank you.

The problem I now face is that is only works with http not with https.

I've added this rule in the rules engine for the endpoint: If request url = gematrix.com lowercase then permanent redirect to https www.gematrix.com
GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-18T05:14:14.433+00:00

Hello @Tom@gematrix ,

I have combined answers for both of your issues and have posted it as an answer below. Please check and let us know if you have any further queries. And please do click "Accept the answer" if the information provided helps you.

Thanks,
Gita
GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-23T05:20:37.773+00:00

Hello @Tom@gematrix ,

Could you please provide an update on this post?

Kindly let us know if the below answer helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-24T11:09:49.747+00:00

Hello @Tom@gematrix ,

Any update on this post?

Thanks,
Gita

2 answers

GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-18T05:12:07.063+00:00

Hello @Tom@gematrix ,

You can use alias records to point your DNS zone apex to Azure CDN endpoints. This is useful when you create static websites using Azure storage and Azure CDN. You can then access the website without prepending "www" to your DNS name.

CNAME records aren't supported at the zone apex. So, you can’t use a CNAME record to point your apex domain to your CDN endpoint. Instead, you can use an alias record to point the zone apex to a CDN endpoint directly.

Please refer: https://learn.microsoft.com/en-us/azure/dns/dns-alias#point-zone-apex-to-azure-cdn-endpoints
https://learn.microsoft.com/en-us/azure/dns/tutorial-alias-tm

Also, if you require HTTPS access for your web content, then after mapping your Azure CDN content to a custom domain, you have to enable HTTPS on your Azure CDN custom domain.

Please refer : https://learn.microsoft.com/en-us/azure/storage/blobs/storage-custom-domain-name?tabs=azure-portal#map-a-custom-domain-with-https-enabled

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Please sign in to rate this answer.
GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-21T15:56:54.29+00:00

Hello @Tom@gematrix ,

Just checking in to see if the above answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Gita

Tom@gematrix 1 Reputation point

2020-09-25T04:32:17.143+00:00

I am still unable to configure https for my apex domain. Azure does not allow you to configure https for a custom apex domain.

Tom@gematrix 1 Reputation point

2020-09-25T04:33:25.4+00:00

Sorry @GitaraniSharma-MSFT , I am not able to configure https for my apex domain. Azure does not allow this in custom domain.

GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-28T11:39:36.22+00:00

Hello @Tom@gematrix ,

CDN-managed certificates are not available for root or apex domains. If your Azure CDN custom domain is a root or apex domain, you must use the Bring your own certificate feature.

Please refer : https://learn.microsoft.com/en-us/azure/cdn/cdn-custom-ssl?tabs=option-2-enable-https-with-your-own-certificate

Kindly let us know if the above helps or you need further assistance on this issue.

GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-09-30T09:43:52.15+00:00

Hello @Tom@gematrix ,

Could you please provide an update on this post?

Kindly let us know if the above helps or you need further assistance on this issue.

Thanks,
Gita

GitaraniSharma-MSFT 47,696 Reputation points Microsoft Employee

2020-10-05T07:41:04.527+00:00

Hello @Tom@gematrix ,

Any updates on this post?

Thanks,
Gita
Sign in to comment
Conor Manning 1 Reputation point

2020-09-26T12:05:40.23+00:00

Hi Tomgematrix-9953, Azure doesn't allow you to use the auto-configure SSL feature with apex domains, but if you obtain an SSL certificate yourself, you can use it through Azure with an apex domain.

I've just done this for myself by following this tutorial:
https://dev.to/ope/securing-your-azure-web-app-with-let-s-encrypt-4g99

The steps involved can be automated for automatic renewal of the certificate so you don't have to worry about it in future. I haven't done this for myself yet so I can't help you there.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment