Merge branch 'MicrosoftDocs:main' into Provisioning-Strategies-for-Configure-Cluster-and-Cluster-Runtime-Upgrade

Author: jmmason70

articles/active-directory-b2c/partner-bloksec.md

@@ -38,7 +38,7 @@ BlokSec integration includes the following components:
 * **BlokSec Decentralized Identity Router** – gateway for services that apply BlokSec DIaaS to route authentication and authorization requests to user Personal Identity Provider (PIdP) applications
   * It's an OpenID Connect (OIDC) identity provider in Azure AD B2C
 * **BlokSec SDK-based mobile app** – user PIdP in the decentralized authentication scenario. 
-  * If you're not using the BlokSec SDK, go to Google Play for the free [BlokSec yuID](https://play.google.com/store/apps/details?id=com.bloksec)
+  * If you're not using the BlokSec SDK, go to Google Play for the free [BlokSec yuID](https://play.google.com/store/apps/details/Google?id=com.google.android.googlequicksearchbox&hl=en-US)
 
 The following architecture diagram illustrates the sign-up, sign-in flow in the BlokSec solution implementation.
 

articles/app-service/overview-wordpress.md

@@ -3,6 +3,7 @@ title: 'An overview of WordPress'
 description: An overview of WordPress on App Service. You can focus on creating WordPress content while Azure takes care of the infrastructure, security, and performance needs.
 keywords: app service, azure app service, wordpress, preview, app service on linux, plugins, mysql flexible server, wordpress on linux, php
 author: msangapu-msft
+ai-usage: ai-assisted
 ms.topic: overview
 ms.date: 12/10/2024
 # ms.devlang: wordpress

articles/app-service/toc.yml

@@ -420,6 +420,9 @@
     - name: Customize API Management developer portal
       displayName: API Management and WordPress
       href: /azure/api-management/developer-portal-wordpress-plugin
+    - name: WordPress FAQ
+      displayName: WordPress frequently asked questions
+      href: wordpress-faq.md
 - name: WebJobs
   items:
     - name: Create WebJobs
@@ -522,8 +525,6 @@
           href: /azure/developer/java/migration/migrate-weblogic-to-jboss-eap-on-azure-app-service?toc=/azure/app-service/toc.json&bc=/azure/bread/toc.json
         - name: Migrate WebSphere
           href: /azure/developer/java/migration/migrate-websphere-to-jboss-eap-on-azure-app-service?toc=/azure/app-service/toc.json&bc=/azure/bread/toc.json
-        - name: Migrate WordPress
-          href: migrate-wordpress.md
     - name: Cookbooks
       items:
         - name: Reference Architectures

articles/app-service/wordpress-faq.md

@@ -0,0 +1,135 @@
+---
+title: 'Frequently asked questions about WordPress on App Service'
+description: Use this article to find frequently asked questions and answers about WordPress on Azure App Service.
+keywords: app service, azure app service, wordpress, preview, app service on linux, plugins, mysql flexible server, wordpress on linux, php
+ai-usage: ai-assisted
+author: reddyabhishek
+ms.topic: faq
+ms.date: 12/13/2024
+# ms.devlang: wordpress
+ms.author: areddys
+ms.custom: mvc, linux-related-content
+---
+# WordPress on App Service: Frequently Asked Questions
+
+## Are there limits on the number of sites, visits, storage, or bandwidth?
+
+The allocated resources for an App Service plan and database tier determine the hosting capacity. For example:
+- **App Service B1 Plan:** Includes 1 core, 1.75 GB RAM, and 10 GB storage.
+- **Database B1ms Instance:** Offers 1 vCore, 2 GB RAM, and storage up to 16 GB.
+
+There's no fixed limit on the number of sites you can host, but recommended app limits by SKU are:
+
+| **SKU**           | **Recommended Max Apps** |
+|--------------------|---------------------------|
+| B1, S1, P1v2, I1v1 | 8                         |
+| B2, S2, P2v2, I2v1 | 16                        |
+| B3, S3, P3v2, I3v1 | 32                        |
+| P1v3, I1v2         | 16                        |
+| P2v3, I2v2         | 32                        |
+| P3v3, I3v2         | 64                        |
+
+Bandwidth is unlimited, but [charges apply for internet egress](https://azure.microsoft.com/pricing/details/bandwidth/).
+
+## How are security patches updated?
+Azure manages security patches for core technologies, while WordPress-specific updates may require manual or semi-automated steps:
+- **PHP Major Versions:** Update manually under **App Service > Settings > Configuration**.
+- **WordPress Core:** Minor updates are automatic, while major updates need manual configuration.
+- **Plugins and Themes:** Perform manual updates after backing up your site to avoid issues. WordPress also offers auto update options.
+
+See [How to keep your WordPress website stack on Azure App Service up to date](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-keep-your-wordpress-website-stack-on-azure-app-service-up-to-date/3832193) for more information.
+
+## What security features are available to protect my website?
+Azure App Service integrates robust security features to safeguard WordPress sites:
+- **[App Service Security](overview-security.md):** HTTPS, IP restrictions, certificates, authentication, and network isolation.
+- **[Easy Authentication](overview-authentication-authorization.md):** Built-in identity provider integration with minimal effort.
+- **[Azure Database for MySQL](/security/benchmark/azure/baselines/azure-database-for-mysql-flexible-server-security-baseline):** Advanced protections for Azure MySQL servers, including encryption and backup capabilities.
+- **[Virtual Network (VNET)](/azure/virtual-network/virtual-networks-overview):** Secure communication between Azure resources, the internet, and on-premises networks.
+- **[Managed Identities](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities):** Credential-free access to resources using Microsoft Entra tokens.
+- **[Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction):** Proactive threat detection with DevSecOps integration.
+- **[Azure Key Vault](/azure/key-vault/):** Secure storage for keys, secrets, and certificates.
+- **[Microsoft Entra ID](/entra/identity/):** Single sign-On (SSO) for seamless authentication.
+
+
+
+## How can I set up WordPress Multisite?
+WordPress Multisite allows managing multiple sites from a single installation. To enable:
+Set up a **[subdirectory-based Multisite](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-set-up-subdirectory-multisite-in-wordpress-on-azure-app/ba-p/3791071)** or **[subdomain-based Multisite](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-set-up-subdomain-multisite-in-wordpress-on-app-service/ba-p/3886283)**.
+
+> [!NOTE]
+> - Conversion to Multisite is permanent; reverting to a single site is unsupported.
+> - Switching between subdirectory and subdomain setups isn't allowed.
+>
+
+## How do I access my WordPress website's database?
+The database can be accessed using **phpMyAdmin** at: `https://<your-site-link>/phpmyadmin`.
+Use the `DATABASE_USERNAME` as the username and a generated token as the password (tokens can be retrieved via **Kudu SSH**).
+
+## How do I enable a custom domain for my WordPress website?
+Custom domains can be set up with these resources:
+- [Using custom domains with WordPress on Azure App Service](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-use-custom-domains-with-wordpress-on-app-service/ba-p/3886247)
+- [Configuring custom domains with Azure Front Door](/azure/frontdoor/front-door-custom-domain)
+
+## Does WordPress on App Service have email functionality?
+Yes, email functionality is supported through **[Azure Communication Services](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/wordpress-on-azure-appservice-email-integration/ba-p/3890486)**. [Custom email domains can be also be configured](/azure/communication-services/quickstarts/email/add-custom-verified-domains).
+
+## How can I update NGINX configurations for my WordPress website?
+NGINX configurations can be updated using a **startup script**. Detailed instructions are available in the [startup script guide](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/updating-nginx-default-configurations-on-azure-app-services/ba-p/3710146).
+
+## How can I access error logs for my WordPress website?
+Access error logs for debugging via **App Service logs** or the **Kudu dashboard**. Refer to the [documentation](troubleshoot-diagnostic-logs.md) for detailed steps.
+
+## How do I estimate pricing for hosting a WordPress site on Azure?
+Use the [Azure Pricing Calculator](https://azure.microsoft.com/pricing/) to estimate hosting costs, considering App Service, MySQL, CDN, Blob Storage, and other components. Use this [pricing estimate guide](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-estimate-pricing-for-wordpress-on-app-service/ba-p/4029262) for more information.
+
+## How can I debug and monitor my WordPress site?
+Key tools for debugging and monitoring WordPress sites include:
+- **[App Service Logs](troubleshoot-diagnostic-logs.md)**
+- **[Kudu](https://techcommunity.microsoft.com/blog/appsonazureblog/kudu-dashboard-explained---wordpress-on-app-service/4030035)**
+- **[SSH Access](configure-linux-open-ssh-session.md?pivots=container-linux)**
+
+### PhpMyAdmin
+WordPress on App Service utilizes an Azure Database for MySQL flexible server, which is integrated into a VNET. This setup restricts database access to within the VNET. WordPress on App Service includes phpMyAdmin by default. You can access it at: https://`<your-site-link>`/phpmyadmin. 
+ 
+If you are using Managed Identities, you can log in to phpMyAdmin by using the value from DATABASE_USERNAME environment variable as the username and the token as the password. To find the token use your Kudu SSH to run the following command: 
+ 
+/usr/local/bin/fetch-mysql-access-token.sh 
+ 
+Or you can find the database username and password from App Service environment variables 
+
+## What features can I use to boost my WordPress site's performance?
+
+Enhance performance with these features / plugins:
+- **[Content Delivery Network (CDN)](/azure/cdn/)**
+- **[Azure Front Door (AFD)](/azure/frontdoor/)**
+- **[Blob Storage](/azure/storage/blobs/)**
+- **Dynamic Caching**
+- **[Image Compression (Smush)](https://wordpress.org/plugins/wp-smushit/)**
+- **[Scaling Up](/azure/app-service/manage-scale-up) and [Out](/azure/app-service/manage-automatic-scaling)**
+- **[Redis Cache](https://techcommunity.microsoft.com/blog/appsonazureblog/distributed-caching-with-azure-redis-to-boost-your-wordpress-sites-performance/3974605)**
+
+## What are the options for configuring and setting up my WordPress site?
+
+Options for setting up WordPress include:
+- **[FTP File Transfers](/azure/app-service/deploy-ftp)**
+- **[NGINX Configuration Updates](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/updating-nginx-default-configurations-on-azure-app-services/ba-p/3710146)**
+- **[App Service settings](/azure/app-service/configure-common)**
+
+## How can I build a headless WordPress site?
+Enable **WP REST APIs** and integrate with **Static Web Apps** to create a decoupled front-end experience. Learn more [here](https://techcommunity.microsoft.com/blog/appsonazureblog/integrating-wordpress-on-app-service-with-azure-static-web-apps/4004955).
+
+## What features are available for creating an enterprise-grade production website?
+Key features include:
+- [Staging slots](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-set-up-staging-slots-in-wordpress-on-app-service/4144847) for safe testing
+- [Custom domains](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-use-custom-domains-with-wordpress-on-app-service/3886247) and SSL certificates
+- [CI/CD](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-integrate-continuous-integration-and-deployment-with-wordpress-on-app-ser/4144886) pipelines for automated deployments
+- [Startup scripts](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-run-bash-scripts-in-wordpress-on-azure-app-service/3625692) for configuration
+- [Emails with custom domain](/azure/communication-services/quickstarts/email/add-custom-verified-domains)
+- [Scaling](/azure/app-service/manage-scale-up) and [load testing](/azure/load-testing/concept-load-test-app-service) capabilities
+
+## What are common errors for WordPress on App Service, and how can I troubleshoot?
+Typical issues and resolutions:
+- **[Debug Logs](https://github.com/Azure/wordpress-linux-appservice/blob/main/WordPress/enabling_debug_logs_for_wordpress.md):** Enable for troubleshooting.
+- **[CORS Issues](https://github.com/Azure/wordpress-linux-appservice/blob/main/WordPress/cors_issue_with_azure_cdn_frontdoor_blob.md):** Adjust settings in CDN or Azure Front Door.
+- **[Existing WordPress Detected Warning](https://github.com/Azure/wordpress-linux-appservice/blob/main/WordPress/troubleshooting-guides/tsg_existing_wordpress_installation_detected.md):** Follow [troubleshooting steps](#).
+- **[Intl Extension issues](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-install-intl-extension-on-wordpress-on-azure-app-service/4138353):** Install via the configuration panel.

articles/azure-cache-for-redis/managed-redis/managed-redis-planning-faq.yml

@@ -37,7 +37,7 @@ sections:
       - question: |
           How am I billed for Azure Managed Redis?
         answer: |
-          Azure Managed Redis pricing is [here](https://azure.microsoft.com/pricing/details/cache/). The pricing page lists pricing as an hourly and monthly rate. Caches are billed on a per-minute basis. The period is measured from time a cache is created until the time that a cache is deleted.
+          Azure Managed Redis pricing is [here](https://azure.microsoft.com/pricing/details/managed-redis/). The pricing page lists pricing as an hourly and monthly rate. Caches are billed on a per-minute basis. The period is measured from time a cache is created until the time that a cache is deleted.
           There's no option for stopping or pausing the billing of a cache.
           
       - question: |

articles/azure-maps/itinerary-optimization-service.md

@@ -370,9 +370,9 @@ After the locations in the cuOpt response are mapped to the corresponding coordi
 [Azure Maps Route Matrix API]: /rest/api/maps/route/post-route-matrix
 [Azure Maps]: /azure/azure-maps/
 [Azure Marketplace]: https://azuremarketplace.microsoft.com/en-us/marketplace/apps/nvidia.nvidia-ai-enterprise?tab=Overview
-[cuOpt best practices]: https://docs.nvidia.com/cuopt/user-guide/best-practices.html
-[cuOpt Supported Features]: https://docs.nvidia.com/cuopt/user-guide/supported-features.html
-[List of cuOpt supported features]: https://docs.nvidia.com/cuopt/user-guide/supported-features.html
+[cuOpt best practices]: https://docs.nvidia.com/cuopt/service/latest/best-practices.html
+[cuOpt Supported Features]: https://docs.nvidia.com/cuopt/user-guide/index.html
+[List of cuOpt supported features]: https://docs.nvidia.com/cuopt/user-guide/index.html
 [Multi Itinerary Optimization]: https://samples.azuremaps.com/rest-services/mio
 [NVIDIA cuOpt]: https://www.nvidia.com/en-us/ai-data-science/products/cuopt/
 [Route Directions]: /rest/api/maps/route/post-directions

articles/azure-vmware/attach-azure-netapp-files-to-azure-vmware-solution-hosts.md

@@ -3,7 +3,7 @@ title: Attach Azure NetApp Files datastores to Azure VMware Solution hosts
 description: Learn how to create Azure NetApp Files-based NFS datastores for Azure VMware Solution hosts.
 ms.topic: how-to
 ms.service: azure-vmware
-ms.date: 10/15/2024
+ms.date: 12/13/2024
 ms.custom: "references_regions, engagement-fy23"
 ---
 
@@ -21,6 +21,9 @@ The following diagram demonstrates a typical architecture of Azure NetApp Files
 
 :::image type="content" source="media/attach-netapp-files-to-cloud/architecture-netapp-files-nfs-datastores.png" alt-text="Diagram shows the architecture of Azure NetApp Files backed NFS datastores attached to an Azure VMware Solution private cloud." lightbox="media/attach-netapp-files-to-cloud/architecture-netapp-files-nfs-datastores.png"::: 
 
+>[!Note]
+> NFS traffic from the ESXi hosts does not traverse any NSX components. Traffic traverses the ESXi VMkernel port directly to the NFS mount via the Azure network. 
+
 ## Prerequisites
 
 Before you begin the prerequisites, review the [Performance best practices](#performance-best-practices) section to learn about optimal performance of NFS datastores on Azure NetApp Files volumes.
@@ -107,7 +110,7 @@ Under **Manage**, select **Storage**.
 1. Select **Connect Azure NetApp Files volume**.
 1. In **Connect Azure NetApp Files volume**, select the **Subscription**, **NetApp account**, **Capacity pool**, and **Volume** to be attached as a datastore.
 
-    :::image type="content" source="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png" alt-text="Image shows the navigation to Connect Azure NetApp Files volume pop-up window." lightbox="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png":::
+:::image type="content" source="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png" alt-text="Image shows the navigation to Connect Azure NetApp Files volume pop-up window." lightbox="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png":::
 
 1. Verify the protocol is NFS. You need to verify the virtual network and subnet to ensure connectivity to the Azure VMware Solution private cloud.
 1. Under **Associated cluster**, in the **Client cluster** field, select one or more clusters to associate the volume as a datastore.
@@ -243,3 +246,7 @@ Now that you attached a datastore on Azure NetApp Files-based NFS volume to your
 - **Can a single Azure NetApp Files datastore be added to multiple clusters within different Azure VMware Solution private clouds?**
 
     Yes, you can connect an Azure NetApp Files volume as a datastore to multiple clusters in different private clouds. Each private cloud needs connectivity via the ExpressRoute gateway in the Azure NetApp Files virtual network. Latency considerations apply.
+
+- **Does NFS Traffic traverse NSX components?**
+
+    No, NFS traffic from the ESXi hosts does not traverse any NSX components. Traffic traverses the ESXi VMkernel port directly to the NFS mount via the Azure network. 

articles/azure-vmware/azure-vmware-solution-platform-updates.md

@@ -11,6 +11,10 @@ ms.date: 12/12/2024
 
 Microsoft regularly applies important updates to the Azure VMware Solution for new features and software lifecycle management. You should receive a notification through Azure Service Health that includes the timeline of the maintenance. For more information, see [Host maintenance and lifecycle management](architecture-private-clouds.md#host-maintenance-and-lifecycle-management).
 
+## December 2024
+
+Resource Health for Azure VMware Solution is now available in Public Preview. Resource Health, an Azure native feature, now monitors the health of Azure VMware Solution private cloud resources, provides recommended actions for current issues, and allows reporting on past and present resource health. [Learn more](ecosystem-app-monitoring-solutions.md#azure-resource-health-for-azure-vmware-solution-private-cloud-public-preview) 
+
 ## November 2024
 
 Azure VMware Solution is now ready to update all existing Azure Commercial customers from vSphere 7 to vSphere 8 (Stretched Clusters & Azure Government still pending). Over the coming months, all customers will receive a scheduling notice for this upgrade. If you want to prioritize your vSphere 8 upgrade, open a [Service Request](https://rc.portal.azure.com/#create/Microsoft.Support) with Microsoft requesting a "Priority vSphere 8 upgrade" for your private cloud. [Learn more](architecture-private-clouds.md#vmware-software-versions)