separate WAF policy for each frontend domain on Frontdoor.
Hi Team, Greetings.. In Azure frontdoor can I setup different WAF and associate it for each frontend endpoint domain, for eg. abc.com -> waf1 api.abc.com -> waf2 api123.abc.com -> waf3 Many Thanks.
How to fix AFD Profile Security reports to show displays correctly
Hello Microsoft Q & A. I am currently testing Azure Front Door Premium with Azure WAF to be implemented for my organizations environment. When testing Azure WAF, I am looking at the security reports and see that activity and see the IP addresses but…
How to set cookie domain when using Azure Front Door Manager with NextJS Static Web App
I deployed a NextJS app (that uses SSR) as a Static Web App. This works really well and is available on a domain similar to https://jolly-beach-hidden.azurestaticapps.net. I added a cookie authentication mechanism that is available at /api/auth route…
Is Azure FrontDoor classic compatible with app service ?
Hi, Microsoft Team, I'm having trouble placing my app service behind azure frontdoor classic. My Backend config (App service) is this but i get this error message if i add my domain to allowed domain in my app service traffic is redirected to the app…
AFD WAF - How to configure custom rule for CookieName request attribute
@GitaraniSharma-MSFT Hoping you can help me. I have WAF on AFD with DefaultRuleSet_2.1. I am seeing blocks associated with matchVariableName value CookieName. Based on this resource, I understand that I cannot use an exclusion for this attribute type at…
Azure front door implementation with nginx ingress controller
Hi we are using Azure kubernetes service to run our microservices and we have a requirement to use azure front door as it has features like WAF, compression, caching, SSL offloading etc. We want to implement Azure front door in front of nginx ingress…
Seeking Advice on Achieving Full URL Customizability for Azure-hosted Application
Hello, currently I want to have a more custom domain for my application. Users first login through a SPA with B2C, and then after the user logs in, they navigate through HTML pages (served up by APIM through Azure Functions) to send requests for…
Azure CDN Custom Domain verification email not sent/received
I've been trying to pre-verify a custom domain in Azure. I'm looking to roll out an Azure Edgio Standard CDN in front of my live website www.live-website.com and I have added the required cdnverify records cdnverify.www.live-website.com CNAME to…
How to rate limit calls in azure function app?
Hi Team, We are using azure function app, whose various functions is being used as api. Is there any way we can limit the function calls e.g., 10 calls/min. from azure portal. Or anything that can be implemented from Azure front-door as well. Please,…
Is it possible to do geo detection by IP with Azure Front Door (not geo filtering by IP)
Hello! We're currently planning on using Azure Front Door and we saw that it's possible to do geo filtering by IP. However our requirement would like to have the geo detection (not filtering) by IP, so we can add in countries to functionalities if the…
Azure Front End with Origin Storage (Azure Blobs) with Enable Private Link Service not working
Hi, Below is my steps: Create Storage account. Create Azure front door link to Storage Blob as origin enable private link go to Storage Account, Networking approved Private Endpoint connections. After approved wait for few minutes, but when I…
Front door function change origin
I have an azure front door configuration that routes all requests to an origin which executes an azure function. That function queries a third party with the details about the request and needs to determine if the response should be redirected or sent to…
Front door invoke function app for every request
I have an azure front door configuration that I would like to handle requests for any path and execute a function that will either return a redirect to another path or will allow the request to continue to another origin. I am seeing a few problems, the…
How to use token authentication with Azure Premium Edgio CDN
I want to authenticate requests on CDN before serving static content. Is there any azure offering (other than Premium Edgio) that gives users such capability? When Premium Edgio, I can generate the token using azure portal (as described in…
What is wrong with our Azure Front Door CDN? Bad Gateway response caused by certificate issues?
We have an Azure Front Door CDN that handles all our static resources for our website. Everything has been working fine for a year or so until yesterday. A request to our front door, e.g. https://cdn.example.com/image.jpg now results in a 502 Bad Gateway…
Feature request - Az Frontdoor - Add Azure Tag capabilities to Frontdoor Endpoint level
We are planning on using Frontdoor centrally to solve ingress scenarios for "many teams". As such - each team are going to get their own set of Frontdoor endpoints (within the same AFD instance profile). We want to be able to distribute the…
Feature request - Az Frontdoor - Add shared logging capabilities to different endpoint(s)
We want to make use of Azure Frontdoor (centrally) for many consumers, using the same AFD profile instance(s). Idea is to handle ingress scenarios for developer teams (which are consumers in this scenario). As a developer it will be important to read the…
Azure Front Door will sometimes only deliver a certificate after repeated requests
I have configured Azure Front Door to deliver HTTPS-encrypted traffic on my Apex Domain. However, both I and some of my customers sometimes observe that the server will not offer a TLS certificate upon establishing the connection. For a customer, this…
Update Azure FrontdoorPremium Web Application Firewall Policy by API
How can I make an update to a custom rule of a WAF policy? I am using the following API endpoint, but I get an error message back. API endpoint:…
telnet/openssl connect to AFD custom domain times out after 5 seconds
Hello all, we have an Azure Front Door Premium on one of our customer projects. The customer has high level of incoming data, in average 200.000 per minute. Some of the devices that initiate connection to AFD don't support HTTPs and use HTTP for the…