Skip to content

Commit 94f222e

Browse files
authored
Merge pull request #100896 from msrini-MSFT/patch-87
(AzureCXP) fixes MicrosoftDocs/azure-docs#45932
2 parents ddebbcf + a9ff9d7 commit 94f222e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/frontdoor/front-door-faq.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ To lock down your application to accept traffic only from your specific Front Do
9494
> Front Door's backend IP space may change later, however, we will ensure that before that happens, that we would have integrated with [Azure IP Ranges and Service Tags](https://www.microsoft.com/download/details.aspx?id=56519). We recommend that you subscribe to [Azure IP Ranges and Service Tags](https://www.microsoft.com/download/details.aspx?id=56519) for any changes or updates.
9595
9696
- Filter on the values for the incoming header '**X-Forwarded-Host**' sent by Front Door. The only allowed values for the header should be all of the frontend hosts as defined in your Front Door config. In fact even more specifically, only the host names for which you want to accept traffic from, on this particular backend of yours.
97-
- Example – let’s say your Front Door config has the following frontend hosts _`contoso.azurefd.net`_ (A), _`www.contoso.com`_ (B), _ (C), and _`notifications.contoso.com`_ (D). Let’s assume that you have two backends X and Y.
97+
- Example – let’s say your Front Door config has the following frontend hosts _`contoso.azurefd.net`_ (A), _`www.contoso.com`_ (B), _`api.contoso.com`_ (C), and _`notifications.contoso.com`_ (D). Let’s assume that you have two backends X and Y.
9898
- Backend X should only take traffic from host names A and B. Backend Y can take traffic from A, C, and D.
9999
- So, on Backend X you should only accept traffic that has the header '**X-Forwarded-Host**' set to either _`contoso.azurefd.net`_ or _`www.contoso.com`_. For everything else, backend X should reject the traffic.
100100
- Similarly, on Backend Y you should only accept traffic that has the header “**X-Forwarded-Host**” set to either _`contoso.azurefd.net`_, _`api.contoso.com`_ or _`notifications.contoso.com`_. For everything else, backend Y should reject the traffic.

0 commit comments

Comments
 (0)