Skip to content

Commit adc91dd

Browse files
Merge pull request #294791 from Harikrishnan-M-B/patch-29
backend pool -> backend
2 parents 1b76022 + 56901c9 commit adc91dd

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

articles/frontdoor/troubleshoot-issues.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -61,17 +61,17 @@ The cause of this issue can be one of three things:
6161

6262
The cause of this problem can be one of three things:
6363

64-
* The backend pool is an IP address.
65-
* The backend server returns a certificate that doesn't match the fully qualified domain name (FQDN) of the Azure Front Door backend pool.
66-
* The backend pool is an Azure Web Apps server.
64+
* The backend is an IP address.
65+
* The backend server returns a certificate that doesn't match the fully qualified domain name (FQDN) of the Azure Front Door backend.
66+
* The backend is an Azure Web Apps server.
6767

6868
### Troubleshooting steps
6969

70-
* The backend pool is an IP address.
70+
* The backend is an IP address.
7171

7272
`EnforceCertificateNameCheck` must be disabled.
7373

74-
Azure Front Door has a switch called `EnforceCertificateNameCheck`. By default, this setting is enabled. When enabled, Azure Front Door checks that the backend pool host name FQDN matches the backend server certificate's certificate name or one of the entries in the subject alternative names extension.
74+
Azure Front Door has a switch called `EnforceCertificateNameCheck`. By default, this setting is enabled. When enabled, Azure Front Door checks that the backend host name FQDN matches the backend server certificate's certificate name or one of the entries in the subject alternative names extension.
7575

7676
- How to disable `EnforceCertificateNameCheck` from the Azure portal:
7777

@@ -83,12 +83,12 @@ The cause of this problem can be one of three things:
8383

8484
:::image type="content" source="./media/troubleshoot-issues/validation-checkbox.png" alt-text="Screenshot of the certificate subject name validation checkbox.":::
8585

86-
* The backend server returns a certificate that doesn't match the FQDN of the Azure Front Door backend pool. To resolve this issue, you have two options:
86+
* The backend server returns a certificate that doesn't match the FQDN of the Azure Front Door backend. To resolve this issue, you have two options:
8787

8888
- The returned certificate must match the FQDN.
8989
- `EnforceCertificateNameCheck` must be disabled.
9090

91-
* The backend pool is an Azure Web Apps server:
91+
* The backend is an Azure Web Apps server:
9292

9393
- Check if the Azure web app is configured with IP-based SSL instead of being SNI (server name indication) based. If the web app is configured as IP based, it should be changed to SNI.
9494
- If the backend is unhealthy because of a certificate failure, a 503 error message is returned. You can verify the health of the backends on ports 80 and 443. If only 443 is unhealthy, it's likely an issue with SSL. Because the backend is configured to use the FQDN, we know it's sending SNI.

0 commit comments

Comments
 (0)