Azure Frontdoor Classic rules engine configuration to Premium - azure

I have to migrate an azure Front door classic configuration to Premium sku profile, however there are some differents between this two versions.
This is my rule engine configuration on Classic:
And this is my rule engine configuration on Premium:
How should I complete this form to have the same configuration on my Premium Profile?
Thanks for your help.

• Switching between tiers or migrating between two different SKUs is not supported until now in Azure Front Door, thus you will have to recreate the profiles accordingly as per the below documentation: -
https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/tier-comparison#feature-comparison-between-tiers
Also, do note that zero downtime migrations from Azure Front Door (Classic) to Azure Front Door (Premium) is in the roadmap for new feature improvement according to Microsoft. Thus, as you are trying to reconfigure the rule configuration in Azure Front Door (Premium) profile likewise that in Standard, I would suggest you refer the below snapshots for your understanding: -
Azure Front Door (Classic) rule configuration: -
Azure Front Door (Premium) rule configuration: -
• In the above screenshot, you want to configure route type as ‘Forward’ to the backend pool for ‘HTTPS’ requests as well as enable the URL rewrite in ‘Classic’ profile of Azure Front Door. To configure the similar rule in ‘Premium’ profile of Azure Front Door, please find the above screenshot. In that, to perform the similar functions accordingly, I have set the ‘Override origin group’ to ‘Yes’ which implies that the configuration specified in the Front Door endpoint route will be overrided by this rule set condition and will be forwarded to the origin group that you specify/select in the origin group. Along with it, since you have enabled the URL rewrite to be enabled in ‘Classic’ profile, you will have the privilege of mentioning the detailed ‘Source’ and ‘Destination’ path rewrites in ‘Premium’ profile of Azure Front Door.
Thus, ‘Premium’ profile of the Azure Front Door has more granular features compared to ‘Classic’ one and in this way, you can recreate the rule set in it. Also, find the below documentation link for more detailed understanding: -
https://learn.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions?pivots=front-door-standard-premium&tabs=portal#RouteConfigurationOverride

Related

Azure Front Door Rule Regex

I am trying to create a rule in Azure Front Door to match the first folder in the request path and then use that to set a request header to the back-end origin group.
https://myfd.azurefd.net/**config**/some1/some2/some3/test.html
https://myfd.azurefd.net/**identity**/some1/some2/some3/
I was able to do this in Application Gateway and get it to work as follows:
App Gateway Config
However, I cannot get this to work in FD as per the following config:
Azure Front Door Config
Azure Front Door is offering 3 tiers of services; the feature and optimization "Regular expression in the rules engine" is not available in the Classic tier. It was the root of the problem here. Consider the Standard or Premium tiers. Please see the screenshot below.
Step1:
Front Door created with Premium tier
Step2:
Created a rule engine with Regular expression
hope this helps!

Azure API Management - Availability Tests - How to get the HealthCheck url of APIM

I'm working on creating the Availability Tests (a feature of App Insights) to monitor the availability of the API Management Service.
My initial question was "How to get the health check URL of the APIM instance?". After some research, I came to know that the availability tests is created automatically when you select the "Add availability Monitor" checkbox while linking the Application Insights to API Management as shown below.
When I go and check the URL that is used in the Availability Tests, below is what it is.
The URL has the APIM endpoint and then the "status-0123456789abcdef" segment. What is this segment? I don't this endpoint anywhere in the APIM instance.
Could someone shed some light on whether we can use this safely to create the Availability Tests?
Thanks in advance
Thanks,
Praveen
The official documentation (https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-integrate-internal-vnet-appgateway#step-6) talks about this particular path as a default health endpoint.
It should be safe to use it for your purposes.

Azure availability zone for web api App service

How does Azure availability zone work? For example I have set up 3 web api as app service, I need to ensure that whenever 1 of the API was down, It will redirect to the next available service.
Ex:
Main API - Down
Secondary API - Up
Tertiary API - Up
Expected: Calls to Main API will be redirected to next available (Secondary, or Tertiary if Secondary was also down)
AZ support for App Services (the multi tenant offering) is actually just offered since yesterday: https://azure.github.io/AppService/2021/08/25/App-service-support-for-availability-zones.html
Follow that guide how to enable it. Basically you need to run at least 3 instances in the app services plan and the platform will make sure those are spread out over different Zones.

Azure Traffic Manager support with Azure Function Apps

I am trying to use Azure Traffic Manager (GTM) to geographically distribute load to function apps in each region.
I have tried adding an 'app service endpoint' and an 'external endpoint' (including adding the GTM name as a custom CNAME to the function app), but both result in "Error 404 - Web app not found.". The custom CNAME also never adds correctly.
According to the last comment on this post, the ability to do this should now be supported:
Setting up a custom domain with an Azure Function app
I am unable to comment back on the post as I am a new user.
I have tried adding an 'app service endpoint' and an 'external endpoint' (including adding the GTM name as a custom CNAME to the function app)
Azure Traffic Manager is only eligible for use with App Services at the 'Standard' level or above as mentioned here. If your function isn't host in an app plan at the 'Standard' level or above, Azure Traffic Manager will not work.
If you are not using 'Standard' or higher level app plan, Azure Functions Proxies would be a workaround for you. Please check following thread which discuss the similar problem.
Azure Functions Traffic Manager
Here is the quick reference from the answer provided by Dakota Kincer.
So the answer I arrived to after Traffic manager didntsupport Azure functions was to overall build 3 Azure functions. I built an East and a West that has my azure function code on it. Then I built a main Azure Function that has 0 code. It only has Azure proxies on it that route to my 2 other Azure Functions. The route is controlled by a variable in the proxy string that is help in the main API app settings. Using %myvariable% you can set part of the url. When I need to publish I switch the variable to the secondary URL location. Update the Primary and then switch the URL to its original primary location. This will have to work for now till traffic manager is integrated into functions or a better solution arises.
I am unable to comment back on the post as I am a new user.
You could modify your post if you want to provide more information.
Traffic Manager supports Azure functions monitoring. You can enable this by going to TM settings -> endpoints -> add endpoint -> choose Azure endpoint type -> App Service for Target resource type -> under Target Resource choose Function app which you want to monitor.
Most likely you want to be able to access function apps under specific domain domain, for example my-domain.com. For that under Custom Header Settings specify host:my-domain.com. You'll need to setup custom domain in function apps configuration too.

Azure Mobile Service deployed to Azure Websites

Because of the limited region availability of deploying Azure Mobile Services, I am investigating deploying the service to Azure Websites. I can deploy the service to a website using the deployment profile easy enough and everything seems to work.
I was just wondering if anyone has had any experience in doing so? Limitations compared to the official Mobile Service hosted deployment? And any specific required changes to typical code?
Having implemented this and using it for the past few months, these are the results I found.
Minimal changes are needed except manually specifying config values as app settings vs the mobile services configuration. I am using Azure AD authentication and the required keys to be configured in Azure websites app settings were
MS_MobileServiceName
MS_MobileServiceDomainSuffix
MS_MasterKey
MS_ApplicationKey
MS_AadClientId
MS_AadTenants
MS_AadAudience
I wrote about the changes here https://pontifex.azurewebsites.net/azure-mobile-services-hosted-in-azure-websites/

Resources