+ Beginning November 8, 2022, all newly created Azure Front Door (Standard, Premium and Classic tier) or Azure CDN Standard from Microsoft (classic) resources will block any HTTP request that exhibits domain fronting behavior. Requests where the host header in HTTP/HTTPS requests that doesn't match the original TLS SNI extension used during the TLS negotiation gets blocked. Starting from September 25 2023, Azure Front Door updated the domain fronting blocking restrictions based on feedback from customers while not compromosing security. Instead of blocking a requests when the SNI and host headers do not match, AFD is allowing the mismatch as long as the two are added as domains in the same subscription. Starting from November 8 2023, AFD will enforce domain fronting blocking on all existing domains.
0 commit comments