Azure Front Door Global to Block traffic to App Service on Azure - Possible or Not

Peter Wilcox 1 Reputation point
2024-01-31T20:30:21.2933333+00:00

Right now my challenge is that I am running up against Adding exception to an App Service for a Azure Function Consumption Plan but I am having issues because the IP's are dynamic. So my thought is to move the WAF blocking for that App Service to Azure Front Door WAF Prevention. My question is this possible and if so what do you suggest that I do and I need to add the traffic to flow to Front Door?

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
627 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Priya Kumar 1,096 Reputation points Microsoft Employee
    2024-02-01T04:18:51.36+00:00

    Hello @Peter Wilcox ,

    Thanks for reaching Azure Q and A platform.

    According to your requirement, I would suggest you to place the App Service behind the Frontdoor and let the traffic towards the App Service hit the Front door WAF first, gets filtered and then gets into the App Service.

    You could place the access restriction from the Frontdoor, to accept the traffic which only the front door forwards.

    https://video2.skills-academy.com/en-us/azure/app-service/app-service-ip-restrictions?tabs=azurecli#restrict-access-to-a-specific-azure-front-door-instance

    App Service access restriction with Front Door

    Please do let us know more about your requirement, if this did not answer your query.

    Regards, Priya Kumar

    0 comments