Upgrade from Azure Front Door Standard to Premium with Azure PowerShell
Azure Front Door allows upgrading from Standard to Premium for enhanced capabilities and increased quota limits. This upgrade doesn't cause any downtime to your services or applications. For more information on the differences between Standard and Premium, see Tier comparison.
This guide explains how to upgrade an Azure Front Door Standard profile to Premium. After the upgrade, you'll be charged the Azure Front Door Premium monthly base fee at an hourly rate.
Important
Downgrading from Premium to Standard is not supported.
Prerequisites
- Ensure you have an Azure Front Door Standard profile in your subscription.
- Install the latest Azure PowerShell module locally or use Azure Cloud Shell. For more information, see Install and configure Azure PowerShell.
Upgrade Tier
Run the Update-AzFrontDoorCdnProfile command to upgrade your Azure Front Door Standard profile to Premium. The following example upgrades a profile named myAzureFrontDoor in the resource group myAFDResourceGroup.
No WAF Policies Associated
Update-AzFrontDoorCdnProfile -ProfileName myAzureFrontDoor -ResourceGroupName myAFDResourceGroup -ProfileUpgradeParameter @{}
Example output:
Location Name Kind ResourceGroupName
-------- ---- ---- -----------------
Global myAzureFrontDoor frontdoor myAFDResourceGroup
WAF Policies Associated
Run the New-AzFrontDoorCdnProfileChangeSkuWafMappingObject command to create a WAF policy mapping object. This maps the standard WAF policy to the premium WAF policy resource ID. Replace the
WafPolicyId
value with the resource ID of the premium WAF policy. If creating a new one, replacepremiumWAFPolicyName
with the name of the new premium WAF policy. This example creates two premium WAF policies named myPremiumWAFPolicy1 and myPremiumWAFPolicy2.# Replace the following values: # <subscriptionId>: Your subscription ID. # <resourceGroupName>: The resource group name of the WAF policy. # <standardWAFPolicyName>: The name of the standard WAF policy. $waf1 = New-AzFrontDoorCdnProfileChangeSkuWafMappingObject SecurityPolicyName <standardWAFPolicyName> -WafPolicyId /subscriptions/<subscriptionId>/resourceGroups/<resourceGroupName>/providers/Microsoft.Network/frontDoorWebApplicationFirewallPolicies/myPremiumWAFPolicy1 $waf2 = New-AzFrontDoorCdnProfileChangeSkuWafMappingObject SecurityPolicyName <standardWAFPolicyName> -WafPolicyId /subscriptions/<subscriptionId>/resourceGroups/<resourceGroupName>/providers/Microsoft.Network/frontDoorWebApplicationFirewallPolicies/myPremiumWAFPolicy2
Run the New-AzFrontDoorCdnProfileUpgradeParametersObject command to create an upgrade parameters object.
$upgradeParams = New-AzFrontDoorCdnProfileUpgradeParametersObject -WafPolicyMapping @{$waf1, $waf2}
Run the Update-AzFrontDoorCdnProfile command to upgrade your Azure Front Door Standard profile to Premium. The following example upgrades a profile named myAzureFrontDoor in the resource group myAFDResourceGroup.
Update-AzFrontDoorCdnProfile -ProfileName myAzureFrontDoor -ResourceGroupName myAFDResourceGroup -ProfileUpgradeParameter $upgradeParams
Example output:
Location Name Kind ResourceGroupName -------- ---- ---- ----------------- Global myAzureFrontDoor frontdoor myAFDResourceGroup
Note
You will now be billed for Azure Front Door Premium at an hourly rate.
Next Steps
- Learn more about Managed rule for Azure Front Door WAF policy.
- Learn how to enable Private Link to origin resources in Azure Front Door.