You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/frontdoor/front-door-faq.yml
+7-10Lines changed: 7 additions & 10 deletions
Original file line number
Diff line number
Diff line change
@@ -6,17 +6,16 @@ metadata:
6
6
ms.author: halkazwini
7
7
ms.service: azure-frontdoor
8
8
ms.topic: faq
9
-
ms.date: 06/17/2024
9
+
ms.date: 03/23/2025
10
10
title: Frequently asked questions for Azure Front Door
11
11
summary: |
12
-
This article answers common questions about Azure Front Door features and functionality. If you don't see the answer to your question, you can contact us through the following channels (in escalating order):
12
+
This article provides answers to the most frequently asked questions about Azure Front Door features and functionality. If you don't see the answer to your question, you can contact us through the following channels (in escalating order):
13
13
14
14
1. The feedback section of this article.
15
15
16
16
2. [Azure Front Door Feedback](https://feedback.azure.com/d365community/forum/8ae9bf04-8326-ec11-b6e6-000d3a4f0789?c=d47b0f41-8326-ec11-b6e6-000d3a4f0789).
17
17
18
18
3. **Microsoft Support:** To create a new support request, in the Azure portal, on the **Help** tab, select the **Help + support** button, and then select **New support request**.
19
-
20
19
21
20
sections:
22
21
- name: General
@@ -124,7 +123,6 @@ sections:
124
123
Does Azure Front Door have the capability to load balance or route traffic within a virtual network?
125
124
answer: |
126
125
To use Azure Front Door Standard, or (classic) tier, you need a public IP or a DNS name that can be resolved publicly. This requirement of a public IP or a DNS name that can be resolved publicly allows Azure Front Door to route traffic to your backend resources. You can use Azure resources like Application Gateways or Azure Load Balancers to route traffic to resources in a virtual network. If you use Front Door Premium tier, you can use Private Link to connect to origins behind an internal load balancer with a private endpoint. For more information, see [Secure origins with Private Link](private-link.md).
127
-
128
126
129
127
- name: Deploying Front Door with other services
130
128
questions:
@@ -137,14 +135,14 @@ sections:
137
135
- You need Connection Draining, which Front Door doesn't support. Application Gateway can enable Connection Draining for your VMs or containers.
138
136
- You want to offload all the TLS/SSL processing and use only HTTP requests in your virtual network. Application Gateway behind Front Door can achieve this setup.
139
137
- You want to use session affinity at both the regional and the server level. Front Door can send the traffic from a user session to the same backend in a region, but Application Gateway can send it to the same server in the backend.
140
-
138
+
141
139
- question: |
142
140
Can I deploy another CDN from an external vendor behind or in front of Front Door?
143
141
answer: |
144
142
Chaining two CDNs is generally not a recommended approach, it would work but comes with the following cons
145
-
1. CDN’s last mile acceleration utilizes keeping the connection stream with the origin, and finding optimal path to the origin to achieve best results. Chaining two CDNs together typically negates some of the benefits from last mile acceleration.
146
-
2. Security controls become less effective at the second CDN. Any client IP based ACLing will not work at the second CDN as the second CDN will see the first CDN’s exit node as Client IPs. Content payload will still be inspected.
147
-
3. Many organizations can’t handle the complexity of troubleshooting two CDNs being chained and when a problem it becomes hard to figure out which CDN is having the issue.
143
+
1. CDN's last mile acceleration utilizes keeping the connection stream with the origin, and finding optimal path to the origin to achieve best results. Chaining two CDNs together typically negates some of the benefits from last mile acceleration.
144
+
2. Security controls become less effective at the second CDN. Any client IP based ACLing will not work at the second CDN as the second CDN will see the first CDN's exit node as Client IPs. Content payload will still be inspected.
145
+
3. Many organizations can't handle the complexity of troubleshooting two CDNs being chained and when a problem it becomes hard to figure out which CDN is having the issue.
148
146
149
147
- question: |
150
148
Can I deploy Azure Load Balancer behind Front Door?
@@ -209,7 +207,6 @@ sections:
209
207
answer: |
210
208
The configuration updates for most rule sets are done in less than 20 minutes. The rule will be applied right after the update is finished.
211
209
212
-
213
210
- question: |
214
211
What is the value of header timeout from client to Azure Front Door?
215
212
answer: |
@@ -325,6 +322,6 @@ sections:
325
322
additionalContent: |
326
323
327
324
## Related content
328
-
325
+
329
326
- Learn how to [create an Azure Front Door](quickstart-create-front-door.md) profile.
330
327
- Learn about the [Azure Front Door architecture](front-door-routing-architecture.md).
0 commit comments