question

kalyankkalapala-8623 avatar image
0 Votes"
kalyankkalapala-8623 asked SaiKishor-MSFT commented

Azure FrontDoor Vnet integration

I am having my azure web apps and storage apps connected to the azure virtual network (VNET) for network restriction. But is it possible to add azure front door to the azure paas services connected in the vnet.

azure-webappsazure-front-door
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

To follow-up, Please let us know if you have further query on this.
Please don’t forget to Accept the answer

0 Votes 0 ·

To follow-up, Please let us know if you have further query on this.
Please don’t forget to Accept the answer

0 Votes 0 ·

Hello @bhargaviannadevara-msft this is the question that I have asked you about.

0 Votes 0 ·

1 Answer

learn2skills avatar image
0 Votes"
learn2skills answered SaiKishor-MSFT commented

Hi @kalyankkalapala-8623

You can edit your AppService network restrictions to only allow the Front Door service tag, and restrict access to only your Front Door's origin ID.
refer - https://www.reddit.com/r/AZURE/comments/o04dx0/azure_front_door_connecting_to_app_service_in_a/

Azure Private Link enables you to access Azure PaaS Services and Azure hosted services over a Private Endpoint in your virtual network. Traffic between your virtual network and the service traverses over the Microsoft backbone network, eliminating exposure from the public Internet.

Azure Front Door Premium SKU can connect to your origin via private link service. Your applications can be hosted in your private VNet or behind a PaaS service such as Web App and Storage Account, removing the need for your origin to be publically accessible.

Note- Azure Front Door Standard/Premium (Preview) is currently in public preview. This preview version is provided without a service level agreement, and it's not recommended for production workloads.

Please refer below link for more details
https://docs.microsoft.com/en-us/azure/frontdoor/standard-premium/concept-private-link



If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.



· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I am not asking about restricting the webapp to the frontdoor traffic. I want to add my webapp traffic to my vnet and then add the frontdoor service to it.

0 Votes 0 ·

@kalyankkalapala-8623 Front Door enables you to define, manage, and monitor the global routing for your web traffic. Therefore, this is not ideal for associating it with your Web App in a single vnet. If you want to load balance between your servers in a region at the application layer, review Application Gateway.To do network layer load balancing, review Load Balancer. Hope this helps.

Please let us know if you need further assistance or have any other questions and we will be glad to assist further. Thank you!


1 Vote 1 ·