Issue with a static page using a root domain in Azure CDN and DNS zone

Marc Cortada 21

Hello,

I have an issue with a static page trying to use the root domain in Azure CDN.
• This URL works: https://markcortada.azureedge.net/
• This URL also works: https://www.markcortada.com
• But this does not: https://markcortada.com

The response code is 400 and the response body is:

<h2>Our services aren't available right now</h2><p>We're working to restore all services as soon as possible. Please check back soon.</p>0Qim4XwAAAACqEsBrRU//Tpz70Wiwo+RoQlJVMzBFREdFMDQwOABFZGdl

Doing the request in http instead of https I get the same result (the code is different in each request).

The root domain is set using the Azure DNS zone and the A record seems to point to the correct Azure resource (the CDN). These are the meaningful records:
• CNAME www -> markcortada.azureedge.net
• CNAME cdnverify -> cdnverify.markcortada.azureedge.net
• @ A Azure CDN (Alias resource type) and target alias markcortada

It seems that the ip is properly resolved, but the service does not respond with the content that belongs to the domain.

Am I doing anything wrong? Am I missing any configuration?

Thanks in advance.

GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee

2020-11-23T16:19:56.54+00:00

Hello @Marc Cortada ,

Could you please check if you have followed all the steps mentioned in the "Map a custom domain with HTTPS enabled" section of the below article:
https://learn.microsoft.com/en-us/azure/storage/blobs/storage-custom-domain-name?tabs=azure-portal#map-a-custom-domain-with-https-enabled

Also, could you please let me which Azure CDN provider/product you are using?

Thanks,
Gita
Marc Cortada 21 Reputation points

2020-11-24T21:11:01.483+00:00

Hello @GitaraniSharma-MSFT ,
The CDN type is the Microsoft.
I reviewed the steps that you mentioned and I see everything done. In fact, if I would made something wrong this address wouldn't work https://www.markcortada.com
But all the settings related with the certificate are ok and everything is working. In my opinion is some issue identifying the root domain when receiving a request, due some misconfiguration or technical problem.
See some screenshots about the configuration and the certificate:
GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee

2020-11-25T14:37:26.29+00:00

Hello @Marc Cortada ,

Thank you for the update. Since you have the A record correctly pointed and alias records and custom domains properly setup, I would suggest performing a Purge on the Azure CDN for a quick check to see if it is an issue with the cache as most of times, purging fixes these types of issues and if it doesn't help, we can look into it further and investigate to find the root cause.

Please refer the below article to Purge an Azure CDN endpoint:
https://learn.microsoft.com/en-us/azure/cdn/cdn-purge-endpoint

NOTE : Purge requests take approximately 10 minutes to process with Azure CDN from Microsoft

Thanks,
Gita
Marc Cortada 21 Reputation points

2020-11-26T13:53:50.44+00:00

Hello @GitaraniSharma-MSFT
The content is purged properly (see the screeshot below) but didn't fix the issue.
The URL http://markcortada.com and https://markcortada.com are not working.
GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee

2020-11-27T11:55:37.027+00:00

Hello @Marc Cortada ,

I see you have created an alias record for your root domain but have you onboarded the root domain to Azure CDN endpoint as mentioned in the below article:
https://learn.microsoft.com/en-us/azure/cdn/onboard-apex-domain

And for HTTP, you can elect to redirect HTTP traffic to HTTPS by creating a URL redirect rule with the Standard rules engine available for Azure CDN from Microsoft profiles as below:
https://learn.microsoft.com/en-us/azure/cdn/cdn-storage-custom-domain-https#http-to-https-redirection

Let me know if the above steps fix your issue. If it doesn't, this may require deeper investigation. Hence, if you have a support plan, I would request you to file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Thank you for your cooperation on this matter and look forward to your reply.
Marc Cortada 21 Reputation points

2020-11-27T16:05:15.727+00:00

Hello @GitaraniSharma-MSFT
That was the issue: to add the root domain as a custom domain. It is written in this part of the document: https://learn.microsoft.com/en-us/azure/cdn/onboard-apex-domain#onboard-the-custom-domain-on-your-cdn
I have to say that I already tried to add the root domain as a customised one in the CDN, but I was getting an error at the very first step when the root domain was being validated. Probably I did just after setting up the DNS records and it might be not propagated.
The step about the https rules is already done.
Thank you so much! The last post fixed the issue.
Regards,
Marc.
GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee

2020-11-27T16:28:28.99+00:00

Hello @Marc Cortada ,

I am really glad to hear that it fixed your issue. I have added the same as answer below. Please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
GIta

Accepted answer

GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee

2020-11-27T16:26:56.657+00:00

Hello @Marc Cortada ,

In order for your root domain to work with Azure CDN, you have create an alias record for your root domain and then onboard the root domain to Azure CDN endpoint as mentioned in the below article:
https://learn.microsoft.com/en-us/azure/cdn/onboard-apex-domain

And for HTTP, you can elect to redirect HTTP traffic to HTTPS by creating a URL redirect rule with the Standard rules engine available for Azure CDN from Microsoft profiles as below:
https://learn.microsoft.com/en-us/azure/cdn/cdn-storage-custom-domain-https#http-to-https-redirection

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

1 person found this answer helpful.
Marc Cortada 21 Reputation points

2020-11-28T18:25:24.127+00:00

Thanks @GitaraniSharma-MSFT for helping!
After setting the DNS properly you have to onboard the root domain to Azure CDN endpoint. At that point, you can still get an error in the very first step when trying to add the root domain. This might be caused because the DNS configuration can take some time to be propagated. Just wait some time and try it again.

GitaraniSharma-MSFT 49,356 Reputation points Microsoft Employee

2020-12-01T05:29:04.19+00:00

Happy to help! Thank you for the additional information @Marc Cortada . Really appreciate it!
Sign in to comment

Share via

Issue with a static page using a root domain in Azure CDN and DNS zone

0 additional answers