Repository navigation
Support for Azure Front Door CDN #967
Description
Activity
Mike Jarosch (@a60915) you can find a past discussion on the same topic: #567.
I'm sure you know you can enable the private endpoint on your App Configuration store so you can access it from within your vNet.
For public access, we currently do not support client IP restrictions. However, we are working on a Networking Security Perimeter feature that will include client IP restriction and many other security capabilities.
Zhenlan Wang (@zhenlan) Thank you for your response. I had seen topic #567 and read through it. I'm not sure how he setup Frontdoor, but I'm assuming he was keeping the App Config public and was doing this more for availability.
Yes, we are aware of, and using, private endpoints. With public access disabled and private endpoints enabled, I have not found a way to expose the App Configuration using a Front door. There isn't an option for App Configuration when adding an Origin for the Front door. Is there something I am missing or is this not supported?
Right, we don’t officially support Azure Front Door yet. However, we are working on a feature that will enable you to add App Configuration as an Origin for the Front Door CDN. If everything goes as planned, a preview will be released in the next couple of months.
Zhenlan Wang (@zhenlan) Any updates on supporting App Configuration as an Origin for the Front Door CDN?
mikejarosch-aw we ran into a few challenges (technical reasons), so we have revised our design, but we've made good progress. I hope we will have something to share in the next three months.
Hi Zhenlan Wang (@zhenlan), checking back in. Still on track for releasing something?
mikejarosch-aw thanks for checking. Yes, we are on-track to add Azure Front Door CDN support by next month.
- changed the title
[-]Is it possible to put Azure App Configuration behind Azure Front Door?[/-][+]Support for Azure Front Door CDN[/+]on May 15, 2025 Hi Zhenlan Wang (@zhenlan), checking back in. Any updates on a release date?
mikejarosch-aw thank you for checking. We've been actively working on this, but the release has been slightly delayed due to a change in implementation and a few blocking issues we've encountered. We're making good progress, and at this point, we're optimistically targeting a release next month.
Hi Zhenlan Wang (@zhenlan) checking back in. Sorry to keep bugging you about this, but we are excited to be able to use this in our environment.
Hi Zhenlan Wang (@zhenlan) checking back in. Any updates on when this will be available?
Reacted by Zhenlan WangHey, mikejarosch-aw
Sorry for the late response. We sincerely apologize for the delay in AFD support. Due to some security considerations, we had to make a few iterations and updates to both our service backend and client SDK. We also went through some team transitions recently, which affected our bandwidth for a while. The AFD support has been postponed to November. It is now our team’s highest priority, and we’re working hard to deliver it as soon as possible. Thank you so much for your patience and understanding.Reacted by Zhenlan WangHello mikejarosch-aw, we’re excited to announce that Azure Front Door is now supported with Azure App Configuration!
You can find detailed setup instructions in our announcement post here: Azure/AppConfiguration-Announcements#46We’d love your feedback and any suggestions to help us improve.
- moved this from In progress to Preview in Azure App Configuration Roadmap
on Nov 26, 2025
Does Azure App Configuration support being exposed by an Azure Front Door? We have a security requirement where we must use private networking and a Front Door if we would like to publicly expose a resource.
We have an external resource that we would like to get its configuration from the App Configuration. We have dedicated IPs that would be white-listed in the Front Door.
I did not see a way to restrict access when using public networking.