Is it possible to do geo detection by IP with Azure Front Door (not geo filtering by IP)

Jack Jin MSFT Accenture 80 Microsoft Vendor

Hello!

We're currently planning on using Azure Front Door and we saw that it's possible to do geo filtering by IP. However our requirement would like to have the geo detection (not filtering) by IP, so we can add in countries to functionalities if the user does not choose one.

Has anyone gotten geo detection by IP to work with Azure Front Door?

KapilAnanth-MSFT 35,591 Reputation points Microsoft Employee

2024-01-11T09:50:06.9333333+00:00
@Jack Jin MSFT Accenture

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to use the Geo Filtering property of AFD WAF within your backend to provide added services to the Clients. As mentioned by Silvia Wibowo ,

This option is only available at the WAF Custom Rules.

And the Rules can only perform the below actions

If your end goal is to perform one of the above actions, you may do it from the Platform (AFD) itself.

Instead, what you must do it to make use of the X-Azure-ClientIP and X-Azure-SocketIP headers in your application.

AFD adds the headers X-Azure-SocketIP and X-Azure-ClientIP to the requests going to the Origin

Now, in your application, you can use the IP Address value and arrive at the Geographic location of the Client.

See : Protocol support for HTTP headers in Azure Front Door

Thanks,

Kapil

Please Accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer.
KapilAnanth-MSFT 35,591 Reputation points Microsoft Employee

2024-01-12T16:55:36.5233333+00:00

@Jack Jin MSFT Accenture
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks, Kapil
KapilAnanth-MSFT 35,591 Reputation points Microsoft Employee

2024-01-15T04:48:06.8733333+00:00

@Jack Jin MSFT Accenture

Reaching out to check if there are any questions on this. Please let us know if we can be of any further assistance here.

Thanks, Kapil

Please Accept an answer if correct. *Original posters help the community find answers faster by identifying the correct answer. *

Accepted answer

Silvia Wibowo 3,086 Reputation points Microsoft Employee

2024-01-10T05:30:04.38+00:00

Hi @Jack Jin MSFT Accenture , I understand that you want to detect the country of an IP address.

Azure Front Door and Azure App Gateway have WAF (Web Application Firewall) that enables you to filter requests only from a specific country based on requester IP address. However, it can only be used in WAF custom rule, with operator "GeoMatch" of "RemoteAddr" header value.

If you want to detect the country on an IP address in your app, you can use 3rd party API such as https://api.iplocation.net/ which will tell you the country_name and country_code2 (2-digit country code).

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
Please sign in to rate this answer.

1 person found this answer helpful.
Jack Jin MSFT Accenture 80 Reputation points Microsoft Vendor

2024-02-26T17:53:52.42+00:00

Accepting Answer - thank you!
Sign in to comment

Is it possible to do geo detection by IP with Azure Front Door (not geo filtering by IP)

Kapil

0 additional answers