会研究到 Azure Front Door (AFD) 是因为想安装 WAF. 结果研究了一圈, 发现 AFD 好弱啊. 有许多功能都有 limitation. Limitation & 不够好的地方 1. Not support web socket 参考:feedback.azure.com 另外CDN 也是不支持 web socket. Application Gateway 就支持. Cloudflare 也支持. 所以 AFD, ACDN 都很...
The fact that both profiles would use the same Azure edge sites to handle incoming requests causes this limitation that prevents you from nesting one Azure Front Door profile behind another. This setup would cause routing conflicts and performance issues. Therefore, you should ensure that your Azure...
参考:What is Azure Application Gateway? 它是Azure 的 load balancer 之一 (Azure 针对不同场合有不同的 load balance service), 我没有研究太多, 只知道它的 limitation 是 only region level. 不可以跨 region. 2. Azure Front Door (AFD) 参考:What is Azure Front Door? 它是global 的, 对比 Applicat...
The fact that both profiles would use the same Azure edge sites to handle incoming requests causes this limitation that prevents you from nesting one Azure Front Door profile behind another. This setup would cause routing conflicts and performance issues. Therefore, you should ensure that your Azure...
We want to relax or remove this limitation because it sometimes blocks our normal usage. Our Front Door WAF policy is currently set to Detection mode, so it should log but not block. We have not set up any custom WAF rules, and we cannot find any configuration related to the “Loca...
Hi, Our website deployed on Front Door is getting a lot of 429 HTTP errors (too many requests). We have never experienced such problems before configuring FD. WAF is completely turned of for domain, so it's not the case. I've checked the logs and I…
6. Select the Settings on the Azure Web Application Firewall plugin to configure the Log Analytics workspace, Log Analytics subscription ID, and the Log Analytics resource group name for Azure Front Door WAF and/or the Azure Application Gateway WAF. You can also configure the Application Gateway...
Many customers require Web Applications & APIs to only be accessible via a private IP address with a Web Application Firewall on the internet edge, to protect from common exploits and vulnerabilities... \n Origin - associates the ACA container app ingress hostname ...
limitation: no support for logout (yet) (but some people are working on it - activity in Oct./Nov. 2024) for reference: Orbeon Forms Docker image with WildFly Some problems encountered when using Entra ID: it's slightly tricky to include the roles in the access token instead of the ID...
NGINX provides much of the same functionality as these services but can reside deeper in the stack, and it has less configuration limitation. When delivering applications hosted in Microsoft Azure, you need to determine what controls are needed where, and how best to provide them....