|
1 | | -# Your Azure App Service Custom Domain & SSL Journey |
| 1 | +--- |
| 2 | +title: "Custom Domains & SSL Overview" |
| 3 | +description: "A technical roadmap for configuring custom domains and SSL/TLS in Azure App Service. Covers domain purchase, DNS mapping, certificate binding, and advanced security configurations." |
| 4 | +keywords: "Azure App Service, custom domain, SSL, TLS, HTTPS, DNS mapping, certificate binding, security configuration" |
2 | 5 |
|
3 | | -Building a secure and professional web presence with Azure App Service involves several important steps—from acquiring your domain name to ensuring your site is accessible via HTTPS. Whether you're launching a new app or migrating an existing domain, the process can feel overwhelming without a clear roadmap. This guide is designed to be your main entry point into the world of custom domains and SSL on Azure App Service. |
| 6 | +ms.topic: overview |
| 7 | +ms.date: 02/14/2025 |
| 8 | +ms.custom: mvc |
| 9 | +ms.author: msangapu |
| 10 | +author: msangapu-msft |
| 11 | +--- |
4 | 12 |
|
5 | | -Below, you'll find a series of common scenarios you might encounter, along with practical actions to take at each stage. Each scenario is linked to detailed tutorials that provide step-by-step instructions, helping you move seamlessly from one step to the next. Use the table below to quickly identify your current situation and find the right guidance for your custom domain and SSL journey. |
| 13 | +# Azure App Service domain name & SSL journey |
6 | 14 |
|
7 | | ---- |
| 15 | +Building a secure and professional web presence with Azure App Service involves several important steps — from acquiring your domain name to ensuring your site is accessible via HTTPS. This guide is designed to be your main entry point into custom domains and SSL on Azure App Service. |
8 | 16 |
|
9 | | -| **Scenario** | **Situation** | **Action (What to Do)** | **Next Step (Detailed Tutorial)** | |
10 | | -|--------------|---------------|-------------------------|-----------------------------------| |
11 | | -| **1. Need a Domain Name** | You’re just starting out and don’t have a domain name yet, or you prefer to purchase one within Azure. | Acquire your domain using Azure’s integrated purchase feature and update its DNS settings so it can later point to your app. | [Buy and Configure a Domain Name](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-buy-domain) | |
12 | | -| **2. Point Your Domain to Your Web App** | You have a domain (new or existing) and need to connect it to your Azure App Service. | Update your domain’s DNS records (using an A record or CNAME) to map it to your web app, replacing the default Azure subdomain. | [Map an Existing Custom DNS Name to Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=root%2Cazurecli) | |
13 | | -| **3. Secure Your Domain** | Once your domain is mapped, it’s crucial to protect it with HTTPS to ensure secure data transfer. | Obtain an SSL/TLS certificate—either a free, managed option or a third-party certificate—and bind it to your domain. | [Secure a Custom Domain with TLS/SSL](https://learn.microsoft.com/en-us/azure/app-service/tutorial-secure-domain-certificate) | |
14 | | -| **4. Ongoing Certificate Management** | You want a streamlined process to purchase, manage, and renew your SSL certificates within Azure. | Explore integrated certificate management options that simplify binding and renewal processes. | [Buy and Manage App Service Certificates](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2CRBAC) | |
15 | | -| **5. Bind Your SSL Certificate** | With your SSL/TLS certificate ready, you need to enforce secure connections on your custom domain. | Bind the certificate to your app via the Azure portal and verify that HTTPS is active. | [Add a TLS/SSL Certificate in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-bindings) | |
16 | | -| **6. Understand TLS/SSL Protocols** | You’re curious about the technical details behind data encryption and secure communications. | Learn about TLS/SSL protocols, their role in securing data, and the evolution from SSL to modern TLS. | [Overview of TLS/SSL in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/overview-tls) | |
17 | | -| **7. Advanced Integration** | For more complex scenarios, you might need to integrate certificate handling directly into your application code or implement mutual TLS. | Implement code-based SSL/TLS certificate integration and consider mutual TLS for two-way authentication where required. | [Use a TLS/SSL Certificate in Your Application Code](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code?tabs=linux) <br><br> [Configure TLS Mutual Authentication in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth?tabs=azureportal%2Cflask) | |
18 | | -| **8. Enhance Global Performance** | Your app serves a global audience and needs to optimize availability and responsiveness. | Leverage Azure Traffic Manager to distribute traffic efficiently across multiple endpoints. | [Use Traffic Manager with a Custom Domain for Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager) | |
19 | | -| **9. Migrate an Existing Domain** | You already manage a domain elsewhere and wish to transition it to Azure for better integration. | Plan the migration carefully, update your DNS records, and transfer domain management to Azure to minimize downtime. | [Migrate an Active Domain to Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-migrate-domain) | |
| 17 | +A series of common scenarios are listed below. Each scenario is linked to detailed tutorials that provide step-by-step instructions, helping you move seamlessly from one step to the next. Use the table below to quickly identify your situation and find the right guidance for your domain name and SSL journey. |
20 | 18 |
|
21 | | ---- |
| 19 | +This document provides a technical roadmap for configuring custom domains and SSL/TLS on Azure App Service. The table below outlines common scenarios, the required actions, and links to detailed documentation for each step. |
22 | 20 |
|
23 | | -By following this roadmap, you’ll ensure that your web app not only has a professional custom domain but also benefits from robust security and optimal performance. Each detailed tutorial linked in the table offers step-by-step guidance to help you through every stage of your journey. |
| 21 | +| **Scenario** | **Situation** | **Action** | **Reference** | |
| 22 | +|--------------|---------------|------------|---------------| |
| 23 | +| **1. Domain Acquisition** | No domain available; a domain must be acquired. | Purchase a domain via Azure and update DNS settings. | [Buy and Configure a Domain Name](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-buy-domain) | |
| 24 | +| **2. DNS Mapping** | Domain available; needs mapping to App Service. | Update DNS records (A record/CNAME) to point to the App Service. | [Map an Existing Custom DNS Name to Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=root%2Cazurecli) | |
| 25 | +| **3. SSL/TLS Binding** | Domain mapped; requires HTTPS for secure communication. | Obtain and bind an SSL/TLS certificate to the domain. | [Secure a Custom Domain with TLS/SSL](https://learn.microsoft.com/en-us/azure/app-service/tutorial-secure-domain-certificate) | |
| 26 | +| **4. Certificate Management** | Ongoing management and renewal of SSL certificates. | Purchase, manage, and renew certificates within Azure. | [Buy and Manage App Service Certificates](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2CRBAC) | |
| 27 | +| **5. SSL Certificate Binding** | Certificate available; binding required to enforce HTTPS. | Bind the certificate via the Azure portal. | [Add a TLS/SSL Certificate in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-bindings) | |
| 28 | +| **6. Protocol Fundamentals** | Need to understand encryption protocols for secure communications. | Study the technical details and evolution of TLS/SSL. | [Overview of TLS/SSL in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/overview-tls) | |
| 29 | +| **7. Advanced Integration** | Advanced scenarios: code-level integration or mutual authentication required. | Integrate SSL/TLS in application code; configure mutual TLS if needed. | [Use a TLS/SSL Certificate in Your Application Code](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code?tabs=linux) <br><br> [Configure TLS Mutual Authentication in Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth?tabs=azureportal%2Cflask) | |
| 30 | +| **8. Global Optimization** | App serves a global audience; high availability is critical. | Implement Azure Traffic Manager for efficient traffic distribution. | [Use Traffic Manager with a Custom Domain for Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager) | |
| 31 | +| **9. Domain Migration** | Domain is managed externally; migration to Azure is desired. | Update DNS and transfer domain management to Azure App Service. | [Migrate an Active Domain to Azure App Service](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-migrate-domain) | |
24 | 32 |
|
25 | | -Happy configuring! |
| 33 | +Use this roadmap to identify your current configuration requirements and refer to the appropriate guide for detailed, step-by-step instructions. |
0 commit comments