SSL configuration is handled upstream on Azure App Service.
So running an App Service as Docker container and configuring Nginx for server { listen 443 ssl h2; } is not necessary and in fact, will not render a webpage.
How do I modify the configuration on Azure App Service for Linux to run as http2 protocol when SSL w/ customer domain is setup on the service?
Thanks,
Per my experience, I don't think you need to do any special settings to support HTTP2 on Azure WebApps for Linux. Azure WebApps for Linux is a Docker container instance, and HTTP2 protocol is implemented noramlly as a library for programming language or directly supported by HTTP server. According to the implementations listed at http2 offical site, you just need to install the Nginx version 1.9.5+ which can support HTTP2 protocol. If you want to use, only enable it. Please refer to the blog from nginx offical site.
Hope it helps.
This feature now exists for both Linux and Windows and is in the same section of the Azure Portal for Web App Services.
Go to your Web App Service
Go to Settings
Go to Configuration
Select the tab for General Settings
Beneath Platform Settings, choose the "2.0" from the Http version drop down.
See image for details.
Related
Is it possible to remote-connect to an Azure App Service running on Windows with my IIS Manager?
This seems to have been possible according to this blog post by clicking in IIS Manager File -> Connect to a site.
I refer to the steps mentioned in the link shared by you and in the last step I got an error below.
I did some research on it and it looks like managing the App Service from IIS is not supported anymore. I have not got any official link but the below links might give you some information on it.
Microsoft.Web.Configuration.AppHostFileProvider not found after configured Remote IIS Administration for Microsoft Azure Web App
Can no longer manage any Web Apps with IIS Remote Manager - Could not load file or assembly - AppHostFileProvider
I'm not sure for what purpose why you want to. My thoughts is you shouldn't be doing that as it defeat the purpose of PaaS services. Cannot access the iis layer in app service however you can still configure in web.config of your web app.
Within my App Service property in Azure I normally have an option to enable Web sockets. It seems that this option has been very recently removed. Is anyone able to advise if this is no longer supported or if I am doing something wrong?
Additional Information:
Azure App Plan is a B1
Enabling Web Socket has disappeared from App Service configuration
If you have hosted your Web App using Linux OS,
then as per this MS Doc)
Web Sockets are not currently supported for Linux apps on Free App Service Plans.
I have created another App Service with Windows OS with B1 Plan , I am able to see the option of Web Sockets in Configuration section
As MS said, you don't need to enable it because it's always enabled
faqs-app-service-linux
I'm working on a app that is hosted in Azure.
The app is a web-app based on node.js/express.js.
Is it running on/in a IIS server since it is hosted in Azure?
My app does not use the iisnode package. But i wonder if it is inherently running on IIS since it is hosted in Azure?
Also: As i understand at the moment, IIS-express and express.js is two completely different environments for hosting web-servers.....?
Just according to your description, it seems that you were talking about hosting a node App based on express.js to Azure WebApp for Windows.
Yes for hosting Node.js app in IIS on Azure WebApp for Windows, you need to use iisnode (a native IIS module) to host node.js applications with the web.config file in IIS on Windows. For more details, you can refer to the wiki page iisnode wiki of GitHub repo Azure/iisnode to know what iisnode is, and to know how to host it with a web.config file in IIS via the other wiki page Using a custom web.config for Node apps of GitHub repo projectkudu/kudu.
However, No for Azure WebApp for Windows, because you also can use IIS as a reverse proxy server to handle a Node app via the default port %HTTP_PLATFORM_PORT% specified by Azure WebApp like the blog Running java jar file to serve web requests on Azure App Service Web Apps for Java said. But generally, it's not a recommended way.
Meanwhile, No for hosting Node app on other Azure services, such as Azure WebApp for Liunx, Azure VM, or Azure Container services, these services based on Linux do not require IIS, so the iisnode module also be not absolute required.
I'm trying to enable HTTPS on my Azure cloud service.
It doesn't belong to azurewebsites.
I'm using a self-signed certificate, already generated.
Following this guide I encounter a problem: I'm not able to access to the .csdef file to modify WebRole section to create a proper endpoint as described in the guide.
I would like to know if there's any method to enable HTTPS using self-signed certificates through the Azure Portal.
I tried to open the 443 port naming the endpoint HTTPS, using TCP protocol; unfortunately I notice that modifying the .csdef file instead it's possible to apply the https protocol directly.
Can you help me? I'm kind of stuck at the moment.
The Service configuration file and Service package were placed in storage. With Get Package (REST API) you can retrieve cloud service package that used for deployment before.
Also here is a more detailed article: Download Microsoft Azure Cloud Service Package files, hope it do help.
Here´s what we try to do:
We try to run several App Servers with Meteor and Mongo DB Servers on Azure VMs. We have them bundled in one cloud service with Endpoint sets that balance the load.
We setting them up via the Management Console (Ubuntu VMs) and then deploy Meteor and the content via Meteor Up.
Now we want to do HTTPS. Initially we thought that is handled by the LoadBalancer by mapping an external port 443 to the internal port 80 as there are options to upload Certificates.
It seems there is no option to configure that this way except for deployments using Visual Studio (and those seem to have to use at least some Web roles).
Here is where we struggle:
Using HTTPS seems to be tied to deploying an App developed in visual studio and/or on Windows VMs?
That´s the question:
Is it possible to use load balanced HTTPS on szure with Linux VMs?
PS: This is the Article that made me think the Load Balancer might does SSL encryption by itself: https://msdn.microsoft.com/en-us/library/azure/ff795779.aspx
AFAIK, the load balancer of Azure would only spread the traffic to the instances internal endpoint, and do not encrypt the traffic in SSL. (see: https://azure.microsoft.com/en-us/documentation/articles/load-balancer-overview/)
Even for the deployment using Visual Studio, I believe the mechanism behind is also the IIS on each web role encrypting the traffic, but not the load balancer job.
So, you should add SSL on the web server of each VMs such as using nginx.