This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 79%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJA%3C/text%3E%3C/svg%3E)
I have a Azure Function which is enabled only for Http Get Method. I see that Azure returns 404 response for all the other Http request (except for GET) but for some reason it is returning 502 response for CONNECT Http Method. How can I send 404 response for CONNECT Http Method?
Azure functions are running under SSL. HTTP CONNECT is used for opening secure tunnel sites with SSL: HTTP tunnel. Not sure that it can be disabled because without it clients won't be able to connect to AF.
Thank you @sadomovalex
So this is the snapshot of how my Function API responds to different HTTP requests and if you can see TRACE and CONNECT methods use more resources to respond than other HTTP methods and these are the only 2 methods which do not send 404 response. And I am concerned if this will lead to potential Security risk.
How can I protect my Function API from security risk when using HTTP CONNECT/TRACE requests. Is there anyway Azure can block the requests?
I'm not sure that it brings any security risk with current configuration, but you may try to response with 404 code for CONNECT and TRACE using custom Azure functions filters: Do You Know Azure Functions Have Function Filters (didn't try that by myself)