Maintained with ☕️ by
IcePanel logo
Microsoft Azure logo
Original post

General availability: Domain fronting update on Azure Front Door and Azure CDN

Share

Services

As part of [Microsoft’s commitment ](https://www.microsoft.com/en-us/security/blog/2021/03/26/securing-our-approach-to-domain-fronting-within-azure/)to secure our approach to domain fronting within Azure, Azure Front Door (including classic) and Azure CDN Standard from Microsoft (classic) have blocked domain fronting for newly created resources since November, 2022\. Based on customer feedback and security considerations, Azure Front Door and Azure CDN Standard from Microsoft (classic) have revised the domain fronting blocking restrictions effective from September 25, 2023\. Instead of blocking a request when the TLS SNI extension and the host header do not match, Azure Front Door will allow the mismatch if both values are added as domains in the same Azure subscription. For more information, please refer to the [Azure Front Door - Frequently asked questions](https://docs.microsoft.com/en-us/azure/frontdoor/front-door-faq#how-does-front-door-handle--domain-fronting--behavior--) document. * Azure Front Door (classic) * Content Delivery Network * Features * Services * [ Content Delivery Network](https://azure.microsoft.com/en-gb/products/cdn/) * [ Azure Front Door (classic)](https://azure.microsoft.com/en-gb/products/frontdoor/)