Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)

Author: Learn Build Service GitHub App

articles/active-directory-b2c/partner-bloksec.md

@@ -38,7 +38,7 @@ BlokSec integration includes the following components:
 * **BlokSec Decentralized Identity Router** – gateway for services that apply BlokSec DIaaS to route authentication and authorization requests to user Personal Identity Provider (PIdP) applications
   * It's an OpenID Connect (OIDC) identity provider in Azure AD B2C
 * **BlokSec SDK-based mobile app** – user PIdP in the decentralized authentication scenario. 
-  * If you're not using the BlokSec SDK, go to Google Play for the free [BlokSec yuID](https://play.google.com/store/apps/details?id=com.bloksec)
+  * If you're not using the BlokSec SDK, go to Google Play for the free [BlokSec yuID](https://play.google.com/store/apps/details/Google?id=com.google.android.googlequicksearchbox&hl=en-US)
 
 The following architecture diagram illustrates the sign-up, sign-in flow in the BlokSec solution implementation.
 

articles/api-management/validate-graphql-request-policy.md

@@ -90,8 +90,10 @@ Available actions are described in the following table.
     * Fragments
     * Unions
     * Interfaces
-    * The schema element  
-     
+    * The schema element
+ 
+* The policy can validate GraphQL requests with up to 250 query fields across all levels.
+  
 ## Error handling
 
 Failure to validate against the GraphQL schema, or a failure for the request's size or depth, is a request error and results in the request being failed with an errors block (but no data block). 

articles/app-service/overview-wordpress.md

@@ -3,6 +3,7 @@ title: 'An overview of WordPress'
 description: An overview of WordPress on App Service. You can focus on creating WordPress content while Azure takes care of the infrastructure, security, and performance needs.
 keywords: app service, azure app service, wordpress, preview, app service on linux, plugins, mysql flexible server, wordpress on linux, php
 author: msangapu-msft
+ai-usage: ai-assisted
 ms.topic: overview
 ms.date: 12/10/2024
 # ms.devlang: wordpress

articles/app-service/toc.yml

@@ -420,6 +420,9 @@
     - name: Customize API Management developer portal
       displayName: API Management and WordPress
       href: /azure/api-management/developer-portal-wordpress-plugin
+    - name: WordPress FAQ
+      displayName: WordPress frequently asked questions
+      href: wordpress-faq.md
 - name: WebJobs
   items:
     - name: Create WebJobs
@@ -522,8 +525,6 @@
           href: /azure/developer/java/migration/migrate-weblogic-to-jboss-eap-on-azure-app-service?toc=/azure/app-service/toc.json&bc=/azure/bread/toc.json
         - name: Migrate WebSphere
           href: /azure/developer/java/migration/migrate-websphere-to-jboss-eap-on-azure-app-service?toc=/azure/app-service/toc.json&bc=/azure/bread/toc.json
-        - name: Migrate WordPress
-          href: migrate-wordpress.md
     - name: Cookbooks
       items:
         - name: Reference Architectures

articles/app-service/wordpress-faq.md

@@ -0,0 +1,135 @@
+---
+title: 'Frequently asked questions about WordPress on App Service'
+description: Use this article to find frequently asked questions and answers about WordPress on Azure App Service.
+keywords: app service, azure app service, wordpress, preview, app service on linux, plugins, mysql flexible server, wordpress on linux, php
+ai-usage: ai-assisted
+author: reddyabhishek
+ms.topic: faq
+ms.date: 12/13/2024
+# ms.devlang: wordpress
+ms.author: areddys
+ms.custom: mvc, linux-related-content
+---
+# WordPress on App Service: Frequently Asked Questions
+
+## Are there limits on the number of sites, visits, storage, or bandwidth?
+
+The allocated resources for an App Service plan and database tier determine the hosting capacity. For example:
+- **App Service B1 Plan:** Includes 1 core, 1.75 GB RAM, and 10 GB storage.
+- **Database B1ms Instance:** Offers 1 vCore, 2 GB RAM, and storage up to 16 GB.
+
+There's no fixed limit on the number of sites you can host, but recommended app limits by SKU are:
+
+| **SKU**           | **Recommended Max Apps** |
+|--------------------|---------------------------|
+| B1, S1, P1v2, I1v1 | 8                         |
+| B2, S2, P2v2, I2v1 | 16                        |
+| B3, S3, P3v2, I3v1 | 32                        |
+| P1v3, I1v2         | 16                        |
+| P2v3, I2v2         | 32                        |
+| P3v3, I3v2         | 64                        |
+
+Bandwidth is unlimited, but [charges apply for internet egress](https://azure.microsoft.com/pricing/details/bandwidth/).
+
+## How are security patches updated?
+Azure manages security patches for core technologies, while WordPress-specific updates may require manual or semi-automated steps:
+- **PHP Major Versions:** Update manually under **App Service > Settings > Configuration**.
+- **WordPress Core:** Minor updates are automatic, while major updates need manual configuration.
+- **Plugins and Themes:** Perform manual updates after backing up your site to avoid issues. WordPress also offers auto update options.
+
+See [How to keep your WordPress website stack on Azure App Service up to date](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-keep-your-wordpress-website-stack-on-azure-app-service-up-to-date/3832193) for more information.
+
+## What security features are available to protect my website?
+Azure App Service integrates robust security features to safeguard WordPress sites:
+- **[App Service Security](overview-security.md):** HTTPS, IP restrictions, certificates, authentication, and network isolation.
+- **[Easy Authentication](overview-authentication-authorization.md):** Built-in identity provider integration with minimal effort.
+- **[Azure Database for MySQL](/security/benchmark/azure/baselines/azure-database-for-mysql-flexible-server-security-baseline):** Advanced protections for Azure MySQL servers, including encryption and backup capabilities.
+- **[Virtual Network (VNET)](/azure/virtual-network/virtual-networks-overview):** Secure communication between Azure resources, the internet, and on-premises networks.
+- **[Managed Identities](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities):** Credential-free access to resources using Microsoft Entra tokens.
+- **[Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction):** Proactive threat detection with DevSecOps integration.
+- **[Azure Key Vault](/azure/key-vault/):** Secure storage for keys, secrets, and certificates.
+- **[Microsoft Entra ID](/entra/identity/):** Single sign-On (SSO) for seamless authentication.
+
+
+
+## How can I set up WordPress Multisite?
+WordPress Multisite allows managing multiple sites from a single installation. To enable:
+Set up a **[subdirectory-based Multisite](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-set-up-subdirectory-multisite-in-wordpress-on-azure-app/ba-p/3791071)** or **[subdomain-based Multisite](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-set-up-subdomain-multisite-in-wordpress-on-app-service/ba-p/3886283)**.
+
+> [!NOTE]
+> - Conversion to Multisite is permanent; reverting to a single site is unsupported.
+> - Switching between subdirectory and subdomain setups isn't allowed.
+>
+
+## How do I access my WordPress website's database?
+The database can be accessed using **phpMyAdmin** at: `https://<your-site-link>/phpmyadmin`.
+Use the `DATABASE_USERNAME` as the username and a generated token as the password (tokens can be retrieved via **Kudu SSH**).
+
+## How do I enable a custom domain for my WordPress website?
+Custom domains can be set up with these resources:
+- [Using custom domains with WordPress on Azure App Service](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-use-custom-domains-with-wordpress-on-app-service/ba-p/3886247)
+- [Configuring custom domains with Azure Front Door](/azure/frontdoor/front-door-custom-domain)
+
+## Does WordPress on App Service have email functionality?
+Yes, email functionality is supported through **[Azure Communication Services](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/wordpress-on-azure-appservice-email-integration/ba-p/3890486)**. [Custom email domains can be also be configured](/azure/communication-services/quickstarts/email/add-custom-verified-domains).
+
+## How can I update NGINX configurations for my WordPress website?
+NGINX configurations can be updated using a **startup script**. Detailed instructions are available in the [startup script guide](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/updating-nginx-default-configurations-on-azure-app-services/ba-p/3710146).
+
+## How can I access error logs for my WordPress website?
+Access error logs for debugging via **App Service logs** or the **Kudu dashboard**. Refer to the [documentation](troubleshoot-diagnostic-logs.md) for detailed steps.
+
+## How do I estimate pricing for hosting a WordPress site on Azure?
+Use the [Azure Pricing Calculator](https://azure.microsoft.com/pricing/) to estimate hosting costs, considering App Service, MySQL, CDN, Blob Storage, and other components. Use this [pricing estimate guide](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/how-to-estimate-pricing-for-wordpress-on-app-service/ba-p/4029262) for more information.
+
+## How can I debug and monitor my WordPress site?
+Key tools for debugging and monitoring WordPress sites include:
+- **[App Service Logs](troubleshoot-diagnostic-logs.md)**
+- **[Kudu](https://techcommunity.microsoft.com/blog/appsonazureblog/kudu-dashboard-explained---wordpress-on-app-service/4030035)**
+- **[SSH Access](configure-linux-open-ssh-session.md?pivots=container-linux)**
+
+### PhpMyAdmin
+WordPress on App Service utilizes an Azure Database for MySQL flexible server, which is integrated into a VNET. This setup restricts database access to within the VNET. WordPress on App Service includes phpMyAdmin by default. You can access it at: https://`<your-site-link>`/phpmyadmin. 
+ 
+If you are using Managed Identities, you can log in to phpMyAdmin by using the value from DATABASE_USERNAME environment variable as the username and the token as the password. To find the token use your Kudu SSH to run the following command: 
+ 
+/usr/local/bin/fetch-mysql-access-token.sh 
+ 
+Or you can find the database username and password from App Service environment variables 
+
+## What features can I use to boost my WordPress site's performance?
+
+Enhance performance with these features / plugins:
+- **[Content Delivery Network (CDN)](/azure/cdn/)**
+- **[Azure Front Door (AFD)](/azure/frontdoor/)**
+- **[Blob Storage](/azure/storage/blobs/)**
+- **Dynamic Caching**
+- **[Image Compression (Smush)](https://wordpress.org/plugins/wp-smushit/)**
+- **[Scaling Up](/azure/app-service/manage-scale-up) and [Out](/azure/app-service/manage-automatic-scaling)**
+- **[Redis Cache](https://techcommunity.microsoft.com/blog/appsonazureblog/distributed-caching-with-azure-redis-to-boost-your-wordpress-sites-performance/3974605)**
+
+## What are the options for configuring and setting up my WordPress site?
+
+Options for setting up WordPress include:
+- **[FTP File Transfers](/azure/app-service/deploy-ftp)**
+- **[NGINX Configuration Updates](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/updating-nginx-default-configurations-on-azure-app-services/ba-p/3710146)**
+- **[App Service settings](/azure/app-service/configure-common)**
+
+## How can I build a headless WordPress site?
+Enable **WP REST APIs** and integrate with **Static Web Apps** to create a decoupled front-end experience. Learn more [here](https://techcommunity.microsoft.com/blog/appsonazureblog/integrating-wordpress-on-app-service-with-azure-static-web-apps/4004955).
+
+## What features are available for creating an enterprise-grade production website?
+Key features include:
+- [Staging slots](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-set-up-staging-slots-in-wordpress-on-app-service/4144847) for safe testing
+- [Custom domains](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-use-custom-domains-with-wordpress-on-app-service/3886247) and SSL certificates
+- [CI/CD](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-integrate-continuous-integration-and-deployment-with-wordpress-on-app-ser/4144886) pipelines for automated deployments
+- [Startup scripts](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-run-bash-scripts-in-wordpress-on-azure-app-service/3625692) for configuration
+- [Emails with custom domain](/azure/communication-services/quickstarts/email/add-custom-verified-domains)
+- [Scaling](/azure/app-service/manage-scale-up) and [load testing](/azure/load-testing/concept-load-test-app-service) capabilities
+
+## What are common errors for WordPress on App Service, and how can I troubleshoot?
+Typical issues and resolutions:
+- **[Debug Logs](https://github.com/Azure/wordpress-linux-appservice/blob/main/WordPress/enabling_debug_logs_for_wordpress.md):** Enable for troubleshooting.
+- **[CORS Issues](https://github.com/Azure/wordpress-linux-appservice/blob/main/WordPress/cors_issue_with_azure_cdn_frontdoor_blob.md):** Adjust settings in CDN or Azure Front Door.
+- **[Existing WordPress Detected Warning](https://github.com/Azure/wordpress-linux-appservice/blob/main/WordPress/troubleshooting-guides/tsg_existing_wordpress_installation_detected.md):** Follow [troubleshooting steps](#).
+- **[Intl Extension issues](https://techcommunity.microsoft.com/blog/appsonazureblog/how-to-install-intl-extension-on-wordpress-on-azure-app-service/4138353):** Install via the configuration panel.

articles/azure-cache-for-redis/managed-redis/managed-redis-planning-faq.yml

@@ -37,7 +37,7 @@ sections:
       - question: |
           How am I billed for Azure Managed Redis?
         answer: |
-          Azure Managed Redis pricing is [here](https://azure.microsoft.com/pricing/details/cache/). The pricing page lists pricing as an hourly and monthly rate. Caches are billed on a per-minute basis. The period is measured from time a cache is created until the time that a cache is deleted.
+          Azure Managed Redis pricing is [here](https://azure.microsoft.com/pricing/details/managed-redis/). The pricing page lists pricing as an hourly and monthly rate. Caches are billed on a per-minute basis. The period is measured from time a cache is created until the time that a cache is deleted.
           There's no option for stopping or pausing the billing of a cache.
           
       - question: |

articles/azure-maps/itinerary-optimization-service.md

@@ -370,9 +370,9 @@ After the locations in the cuOpt response are mapped to the corresponding coordi
 [Azure Maps Route Matrix API]: /rest/api/maps/route/post-route-matrix
 [Azure Maps]: /azure/azure-maps/
 [Azure Marketplace]: https://azuremarketplace.microsoft.com/en-us/marketplace/apps/nvidia.nvidia-ai-enterprise?tab=Overview
-[cuOpt best practices]: https://docs.nvidia.com/cuopt/user-guide/best-practices.html
-[cuOpt Supported Features]: https://docs.nvidia.com/cuopt/user-guide/supported-features.html
-[List of cuOpt supported features]: https://docs.nvidia.com/cuopt/user-guide/supported-features.html
+[cuOpt best practices]: https://docs.nvidia.com/cuopt/service/latest/best-practices.html
+[cuOpt Supported Features]: https://docs.nvidia.com/cuopt/user-guide/index.html
+[List of cuOpt supported features]: https://docs.nvidia.com/cuopt/user-guide/index.html
 [Multi Itinerary Optimization]: https://samples.azuremaps.com/rest-services/mio
 [NVIDIA cuOpt]: https://www.nvidia.com/en-us/ai-data-science/products/cuopt/
 [Route Directions]: /rest/api/maps/route/post-directions

articles/azure-vmware/attach-azure-netapp-files-to-azure-vmware-solution-hosts.md

@@ -3,7 +3,7 @@ title: Attach Azure NetApp Files datastores to Azure VMware Solution hosts
 description: Learn how to create Azure NetApp Files-based NFS datastores for Azure VMware Solution hosts.
 ms.topic: how-to
 ms.service: azure-vmware
-ms.date: 10/15/2024
+ms.date: 12/13/2024
 ms.custom: "references_regions, engagement-fy23"
 ---
 
@@ -21,6 +21,9 @@ The following diagram demonstrates a typical architecture of Azure NetApp Files
 
 :::image type="content" source="media/attach-netapp-files-to-cloud/architecture-netapp-files-nfs-datastores.png" alt-text="Diagram shows the architecture of Azure NetApp Files backed NFS datastores attached to an Azure VMware Solution private cloud." lightbox="media/attach-netapp-files-to-cloud/architecture-netapp-files-nfs-datastores.png"::: 
 
+>[!Note]
+> NFS traffic from the ESXi hosts does not traverse any NSX components. Traffic traverses the ESXi VMkernel port directly to the NFS mount via the Azure network. 
+
 ## Prerequisites
 
 Before you begin the prerequisites, review the [Performance best practices](#performance-best-practices) section to learn about optimal performance of NFS datastores on Azure NetApp Files volumes.
@@ -107,7 +110,7 @@ Under **Manage**, select **Storage**.
 1. Select **Connect Azure NetApp Files volume**.
 1. In **Connect Azure NetApp Files volume**, select the **Subscription**, **NetApp account**, **Capacity pool**, and **Volume** to be attached as a datastore.
 
-    :::image type="content" source="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png" alt-text="Image shows the navigation to Connect Azure NetApp Files volume pop-up window." lightbox="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png":::
+:::image type="content" source="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png" alt-text="Image shows the navigation to Connect Azure NetApp Files volume pop-up window." lightbox="media/attach-netapp-files-to-cloud/connect-netapp-files-portal-experience-1.png":::
 
 1. Verify the protocol is NFS. You need to verify the virtual network and subnet to ensure connectivity to the Azure VMware Solution private cloud.
 1. Under **Associated cluster**, in the **Client cluster** field, select one or more clusters to associate the volume as a datastore.
@@ -243,3 +246,7 @@ Now that you attached a datastore on Azure NetApp Files-based NFS volume to your
 - **Can a single Azure NetApp Files datastore be added to multiple clusters within different Azure VMware Solution private clouds?**
 
     Yes, you can connect an Azure NetApp Files volume as a datastore to multiple clusters in different private clouds. Each private cloud needs connectivity via the ExpressRoute gateway in the Azure NetApp Files virtual network. Latency considerations apply.
+
+- **Does NFS Traffic traverse NSX components?**
+
+    No, NFS traffic from the ESXi hosts does not traverse any NSX components. Traffic traverses the ESXi VMkernel port directly to the NFS mount via the Azure network. 

articles/azure-vmware/configure-identity-source-vcenter.md

@@ -3,7 +3,7 @@ title: Set an external identity source for vCenter Server
 description: Learn how to set Windows Server Active Directory over LDAP or LDAPS for VMware vCenter Server as an external identity source.
 ms.topic: how-to
 ms.service: azure-vmware
-ms.date: 3/29/2024
+ms.date: 12/13/2024
 ms.custom: engagement-fy23
 ---
 
@@ -18,7 +18,6 @@ You can set up vCenter Server to use an external Lightweight Directory Access Pr
 In this article, you learn how to:
 
 > [!div class="checklist"]
->
 > - Export a certificate for LDAPS authentication. (Optional)
 > - Upload the LDAPS certificate to blob storage and generate a shared access signature (SAS) URL. (Optional)
 > - Configure NSX DNS for resolution to your Windows Server Active Directory domain.
@@ -139,6 +138,9 @@ To add Windows Server Active Directory over LDAP with SSL as an external identit
 
 1. To monitor progress and confirm successful completion, check **Notifications** or the **Run Execution Status** pane.
 
+> [!IMPORTANT]
+> If the Run command **New-LDAPSIdenitySource** fails, utilize the Run command **Debug-LDAPSIdentitySources** to troubleshoot the issue.
+
 ## Add Windows Server Active Directory by using LDAP
 
 > [!NOTE]