An Azure service that provides a cloud content delivery network with threat protection.
WAF policy custom rules performance and processing load impact
https://learn.microsoft.com/en-au/answers/questions/2105310/waf-rule-processing-load-and-its-impact-analysis This question mentioned that individual custom rule does have very slight delay. Currently we have a single regex rule as very first rule and…
Azure Front Door
Join: Microsoft Azure Q&A Champions Program
The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Active-Active routing not distributing traffic evenly between two AKS regions
Hi Microsoft Azure Community, We have an Azure Front Door Premium setup for an Active-Active application deployed in two Azure regions: Region 1: East US 2 Region 2: Central US Both regions have identical application workloads running on private AKS…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Microsoft.Network/AllowFrontdoor remains Pending after feature registration
Hi, I’m experiencing the same issue described here: https://learn.microsoft.com/en-us/answers/questions/5945711/azure-front-door-waf-creation-fails-and-microsoft I have already run: az feature registration create --namespace Microsoft.Network --name…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AFD custom domain validation stuck in Pending despite correct TXT record on all authoritative nameservers
Custom domain on Front Door Premium profile is stuck in domainValidationState=Pending and never validates, despite the DNS TXT record being provably correct. Evidence (verified repeatedly since 2026-07-18): All three authoritative nameservers for the…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door custom domain with Power Pages causing ExternalAuthenticationFailed during Azure AD login
I am trying to configure a custom subdomain for a Power Pages website using Azure Front Door as the entry point. The DNS is managed externally. Setup Power Pages site has the default URL: *.powerappsportals.com A custom subdomain is configured to…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AFD health probe failures- DNS failures and Connection timeouts seen in logs
Our AFD health probes started experiencing drops, and specifically DNS or connection failures. This started happening when we made a small change to disable a region in the AFD. After which, all the origin group and all the origins within started…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Standard WAF creation fails while AllowFrontdoor remains Pending
I cannot create an Azure Front Door Standard WAF policy. The Azure subscription is enabled. I have Owner access. Microsoft.Network and Microsoft.Cdn are Registered. After requesting the feature registration, this remains…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
"az afd rule create" is not working properly
Hello, Recently, the Azure CLI CDN functionality was migrated, starting with CLI version 2.88.0. As a result, some of the parameters previously used in our pipeline are no longer available, causing the pipeline to fail. When I check the new documentation…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door route/endpoint deploymentStatus stuck at NotStarted for 5+ hours, persists after full endpoint recreation
Details: Azure Front Door Standard profile "raar-dev-afd" (resource group "raar-dev-rg") is not routing any traffic to its origin. Every request to the custom domain returns HTTP 504. Symptom: az afd route show and az afd endpoint…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Does Disabling Azure Front Door Caching Reduce Premium Data Transfer Out Cost?
Our Azure Front Door Premium profile, afd-ui-prod, shows approximately 3.45 TB of data transfer, with 99.65% originating from Thailand. Azure Front Door analytics indicate that almost all transferred data comes from clients located in Thailand, while our…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door Standard custom domain validation stuck in Pending for days , Azure's own diagnostics confirm the TXT record matches
A custom domain on an Azure Front Door Standard profile (managed certificate, TXT validation, deployed via Bicep) is stuck in Pending validation despite correct DNS. Timeline 2026-08-08: custom domain created; token issued; Pending as expected. …
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AFD origin sharedPrivateLinkResource stuck at deploymentStatus=NotStarted ; status=null despite target-side Private Endpoint connection being Approved (target = ACA managed environment)
Summary An Azure Front Door Premium origin configured with a sharedPrivateLinkResource targeting an Azure Container Apps managed environment (groupId managedEnvironments) never propagates the private link to the AFD edge. The origin remains at…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Custom domain validation stuck in Pending 60+ hours
My Front Door Standard profile has a custom domain stuck in domainValidationState: Pending / deploymentStatus: NotStarted since creation on 2026-08-02 (60+ hours). The _dnsauth validation TXT record has been publicly resolvable since 2026-08-03 and is…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Managed Certificate Showing Expired Status
Hello Team, We have observed an issue with a custom domain configured in Azure Front Door. The domain is configured with an AFD-managed certificate, and the following status is currently displayed: Provisioning State: Succeeded Validation State:…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Question on deletion of classic profile after Migration to standard
Hi, Need help if I can delete the classic profile after migration to standard SKU. Is there anything which I need to update anywhere?
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
When i try load my certificate on my custom domain on Azure front door. I am getting this error. I am using a cert from godaddy which is not self signed cert.
Issue When creating an Azure Front Door Secret from Key Vault, the operation fails with the following error: "The certificate imported from the Key Vault is a Self Signed certificate and is not permitted for Bring Your Own…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door Standard custom domain stuck at "Pending" validation — correct _dnsauth TXT record, survives token regeneration
I have two Azure Front Door Standard custom domains, in two separate profiles (staging and production), configured identically. Production validated. Staging will not, and I need to fix it without issuing a new validation token. What worked on…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door continues health probing an unassociated Origin Group
Hi, I'm using Azure Front Door Standard/Premium. My DR Origin Group was removed from all routes on Friday and now shows Unassociated in the portal. The only active route is associated with the Production Origin Group. However, today I received an…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Origin response timeout configured at 240s but requests still timing out at 60s (OriginTimeout)
I'm on the Developer support plan and have a Front Door Standard profile where originResponseTimeoutSeconds is confirmed set to 240 (via JSON view), but requests are consistently failing with OriginTimeout at almost exactly 60.0 seconds — the default…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.