An Azure service that provides a cloud content delivery network with threat protection.
Entra Documentation for External ID is WILDLY Wrong
https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/external-id/customers/concept-custom-url-domain.md indicates that the x-forwarded-for header provided by Azure Front Door to CIAM Login when using custom domains WILL use the actual user IP…
Azure Front Door
How to point the root record to the FQDN of application gateway for containers??
We are using Azure Application Gateway for Containers to expose our AKS workloads. Unlike the standard Application Gateway, Application Gateway for Containers provides an Azure-managed frontend FQDN rather than a static public IP address. We need to map…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AllowFrontdoor feature registration stuck in Pending for 24+ hours — blocking WAF policy deployment
Subscription ID: 05a6bdcf-f4aa-4d4e-8a7e-48c5b95f846a The Microsoft.Network/AllowFrontdoor feature registration has been stuck in "Pending" state for over 24 hours on the subscription above. Steps taken: Registered via: az feature register…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door certificate auto-renewal with Azure Public DNS Alias record?
If a domain is validated by Azure Front Door via a TXT record, and the DNS apex (contoso.com) is hosted in Azure Public DNS, and a certificate is issued through Azure Front Door, the documentation states that a CNAME DNS record needs to point to AFD for…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Getting more 502 Bad Gateway from Front Door to Docker Container webapp
I'm wondering if other are experiencing the same thing. Starting August 21th, 2026 I'm seeing more HTTP 502 Bad Gateway errors from Azure Front Door on API requests that just pass-through to my backend server (see graph below). I'm trying to understand…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door gRPC support
We have a tenant that is part of the private preview for gRPC through Azure Front Door, and that works well for our dev/testing, but our MS contact seems to have left. We'd like to understand the ETA for getting gRPC working with Azure Front Door, as…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Standard WAF creation fails while AllowFrontdoor remains Pending I cannot create an Azure Front Door Standard WAF policy.
The Azure subscription is enabled. I have Owner access. Microsoft.Network and Microsoft.Cdn are Registered. After requesting the feature registration, this remains Pending: Microsoft.Network/AllowFrontdoor Creating…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AFD custom domain validation stuck in Pending despite correct TXT record on all authoritative nameservers
Custom domain on Front Door Premium profile is stuck in domainValidationState=Pending and never validates, despite the DNS TXT record being provably correct. Evidence (verified repeatedly since 2026-07-18): All three authoritative nameservers for the…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Premium: Deployment Stuck at NotStarted Despite Private Link Approval
Problem description I am experiencing an issue where my Azure Front Door Premium deployment remains in a 'NotStarted' state for deploymentStatus, despite all resources reporting provisioningState as 'Succeeded' and the Private Link connection being…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Standard WAF creation fails while AllowFrontdoor remains Pending
I cannot create an Azure Front Door Standard WAF policy. The Azure subscription is enabled. I have Owner access. Microsoft.Network and Microsoft.Cdn are Registered. After requesting the feature registration, this remains…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
WAF policy custom rules performance and processing load impact
https://learn.microsoft.com/en-au/answers/questions/2105310/waf-rule-processing-load-and-its-impact-analysis This question mentioned that individual custom rule does have very slight delay. Currently we have a single regex rule as very first rule and…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Join: Microsoft Azure Q&A Champions Program
The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Active-Active routing not distributing traffic evenly between two AKS regions
Hi Microsoft Azure Community, We have an Azure Front Door Premium setup for an Active-Active application deployed in two Azure regions: Region 1: East US 2 Region 2: Central US Both regions have identical application workloads running on private AKS…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Microsoft.Network/AllowFrontdoor remains Pending after feature registration
Hi, I’m experiencing the same issue described here: https://learn.microsoft.com/en-us/answers/questions/5945711/azure-front-door-waf-creation-fails-and-microsoft I have already run: az feature registration create --namespace Microsoft.Network --name…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door custom domain with Power Pages causing ExternalAuthenticationFailed during Azure AD login
I am trying to configure a custom subdomain for a Power Pages website using Azure Front Door as the entry point. The DNS is managed externally. Setup Power Pages site has the default URL: *.powerappsportals.com A custom subdomain is configured to…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AFD health probe failures- DNS failures and Connection timeouts seen in logs
Our AFD health probes started experiencing drops, and specifically DNS or connection failures. This started happening when we made a small change to disable a region in the AFD. After which, all the origin group and all the origins within started…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
"az afd rule create" is not working properly
Hello, Recently, the Azure CLI CDN functionality was migrated, starting with CLI version 2.88.0. As a result, some of the parameters previously used in our pipeline are no longer available, causing the pipeline to fail. When I check the new documentation…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door route/endpoint deploymentStatus stuck at NotStarted for 5+ hours, persists after full endpoint recreation
Details: Azure Front Door Standard profile "raar-dev-afd" (resource group "raar-dev-rg") is not routing any traffic to its origin. Every request to the custom domain returns HTTP 504. Symptom: az afd route show and az afd endpoint…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Does Disabling Azure Front Door Caching Reduce Premium Data Transfer Out Cost?
Our Azure Front Door Premium profile, afd-ui-prod, shows approximately 3.45 TB of data transfer, with 99.65% originating from Thailand. Azure Front Door analytics indicate that almost all transferred data comes from clients located in Thailand, while our…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door Standard custom domain validation stuck in Pending for days , Azure's own diagnostics confirm the TXT record matches
A custom domain on an Azure Front Door Standard profile (managed certificate, TXT validation, deployed via Bicep) is stuck in Pending validation despite correct DNS. Timeline 2026-08-08: custom domain created; token issued; Pending as expected. …
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.