SPA with API Management Instance with Custom URL from Azure Front Door?

Question

SPA with API Management Instance with Custom URL from Azure Front Door?

hampton123 1,175

I have a SPA connected to my API Management instance, hosted by my Azure Storage account. I want a more memorable/user-friendly URL to direct our users to the SPA, and in my research I saw that Azure Front Door would be able to do this. How can I configure my SPA with Azure Front Door, and change the URL?

Silvia Wibowo 6,041 Reputation points Microsoft Employee Volunteer Moderator

2024-01-23T22:45:30.5733333+00:00

Hi @hampton123 , I understand that you want to put Azure Front Door in front of Azure API Management.

Please note it is not yet supported to have Private Link for Azure Front Door (Premium) accessing APIM through private inbound. You need to use Azure Front Door accessing APIM through public inbound, as described in this guide: Configure Front Door in front of Azure API Management.

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
hampton123 1,175 Reputation points

2024-01-24T03:27:54.4633333+00:00

Hi Silvia Wibow, thank you for your response! Just for clarification, I wanted to make sure it is ok to use my API Management service's SPA to link Azure Front Door with. Is this possible? For reference, this is the tutorial I initially followed to integrate the SPA to my API Management instance - users first go through this page to access my API: https://learn.microsoft.com/en-us/azure/api-management/howto-protect-backend-frontend-azure-ad-b2c
Silvia Wibowo 6,041 Reputation points Microsoft Employee Volunteer Moderator

2024-01-24T04:16:32.3533333+00:00

Hi @hampton123, Azure Front Door provides multiple entry endpoints around the world, so your user can connect to the nearest Front Door endpoint, and then from there the traffic flows on Microsoft's backbone to where your APIM instance is. If your SPA uses authentication, it may render Front Door's caching feature useless, as any user traffic needs to authenticate to APIM instance (and to Azure AD B2C), so the content may be hard to cache: some apps put unique parameter inside the URL, while cache is based on URL - if it's unique everytime, cache is useless. So the answer for your question "Is it possible?" is Yes, provided that you realize that you may not be able to use Front Door's caching feature. You can activate WAF (Web Application Firewall) on Front Door to protect your APIM instance and your back-end API against well-known attacks or malicious bots.

Your answer

Silvia Wibowo 6,041 Reputation points Microsoft Employee Volunteer Moderator

2024-01-23T22:45:30.5733333+00:00

Hi @hampton123 , I understand that you want to put Azure Front Door in front of Azure API Management.

Please note it is not yet supported to have Private Link for Azure Front Door (Premium) accessing APIM through private inbound. You need to use Azure Front Door accessing APIM through public inbound, as described in this guide: Configure Front Door in front of Azure API Management.

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
hampton123 1,175 Reputation points

2024-01-24T03:27:54.4633333+00:00

Hi Silvia Wibow, thank you for your response! Just for clarification, I wanted to make sure it is ok to use my API Management service's SPA to link Azure Front Door with. Is this possible? For reference, this is the tutorial I initially followed to integrate the SPA to my API Management instance - users first go through this page to access my API: https://learn.microsoft.com/en-us/azure/api-management/howto-protect-backend-frontend-azure-ad-b2c
Silvia Wibowo 6,041 Reputation points Microsoft Employee Volunteer Moderator

2024-01-24T04:16:32.3533333+00:00

Hi @hampton123, Azure Front Door provides multiple entry endpoints around the world, so your user can connect to the nearest Front Door endpoint, and then from there the traffic flows on Microsoft's backbone to where your APIM instance is. If your SPA uses authentication, it may render Front Door's caching feature useless, as any user traffic needs to authenticate to APIM instance (and to Azure AD B2C), so the content may be hard to cache: some apps put unique parameter inside the URL, while cache is based on URL - if it's unique everytime, cache is useless. So the answer for your question "Is it possible?" is Yes, provided that you realize that you may not be able to use Front Door's caching feature. You can activate WAF (Web Application Firewall) on Front Door to protect your APIM instance and your back-end API against well-known attacks or malicious bots.

Share via

SPA with API Management Instance with Custom URL from Azure Front Door?

Your answer