Web Apps

Web Apps in Azure App Service provides a scalable, reliable, and easy-to-use environment for hosting web applications. Select from a range of frameworks and templates to create a web site in seconds. Use any tool or OS to develop your site with .NET, PHP, Node.js, Python and more. Choose from a variety of source control options including TFS, GitHub, BitBucket and others to set up continuous integration and develop as a team.

More details about the services are available in the App Service documentation. If you have a technical issue, please open a post on the developer forums through Stack Overflow or MSDN.

Products that we listen to in this space include: App Service, Web Apps, API Apps and Web App for Containers.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add support for free tls/ssl certificates

    I want to create a tls/ssl binding to a custom host-name with a free certificate

    7,864 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    201 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Enable users to create custom error pages for 403 and 503 service unavailable messages

    Currently 503 errors (service unavailable) present a blank white page with "service unavailable" to the users which is far from professional for us. It would be far better if we could provide a custom 503 page which would include a logo etc., and some text along the lines of "We apologise for the inconvenience, we are working on it. These issues usually resolve in about five minutes. please contact support for further help if required." or something similar.... This error might be caused by Azure network issues, so away from the web app instance.

    It would also be helpful if…

    1,212 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    41 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Add static IP address for outbound traffic without the use of App Service Environment

    There are many reasons you may want to have a static IP address for outbound connections. For example, you may be accessing a system which requires you to whitelist IP address in a firewall, such as SQL Database or an external service.

    Currently, the only way to get a static IP address for outbound connections is to use App Service Environment. App Service Environments are quite complex, and has a very high price tag. You need at least 4 instances, 2 of which must be P2, meaning you'll pay at least 1000 EUR/month. Paying 1000 EUR/month just because you want…

    1,167 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    35 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Provide a real support for integrating Web Apps with resources inside a virtual network

    The current implementation of Vnet integration with Web Apps is nowhere near good enough.
    1. ASE's: ASE's are fine, but the extreme cost makes it completely unrealistic to use the feature except for very large sites.
    2. Point-to-Site Vnets: If my vnet is an Expressroute vnet then I have no way to connecto to it using this feature

    We need a well-working and easy way of integrating webapps with vnets. The optimal solution would be a simple "yes/no" for giving the web app an ip address inside the virtual network.

    605 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    27 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add button to copy Prod to Staging slot instead of swap

    When we deploy by using 'swap' the deployment slot will have an old version of the website. Since we want to use the deployment slot as a staging website, it would be great if we could copy the primary website to a deployment slot, without performing a swap.

    591 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    29 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Enable 'client certificate authentication' per directory

    I have a site that only part of it needs to be secured with client certificate authentication, it is able to be enabled on the site level but not the directory level as per this article.

    https://docs.microsoft.com/en-us/azure/app-service-web/app-service-web-configure-tls-mutual-auth

    452 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    13 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Hi,
    thanks for the feedback. This is not currently possible as client cert auth on App Service is in require mode and as such cannot be delegated to folder level.

    We will review this item and your feedback, we may look to implement this capability based on customer prioritization.

    Thanks

    Andrew

  7. Support Double Wildcard Custom Domains

    For multi-tenant applications, we require the ability for Azure to support double wildcard custom domains.

    Single wildcard custom domains are currently well supported, i.e.

    *.mydomain.com

    catches all unmapped, single subdomain urls e.g. level1ex.mydomain.com, level2ex.mydomain.com etc

    The issue (which isn't documented: see forum post below) is that secondary level wildcards are not supported at all by Azure:

    e.g. www.level2.mydomain.com will result in a 404 error.

    Why is this important? in a multi tenant environment, with lots of customers on different subdomains, it is best from an end-user perspective to support a www. subdomain prefix, as that's what 99% of non-technerati do…

    420 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    20 comments  ·  Flag idea as inappropriate…  ·  Admin →
  8. Provide .NET language packs on Web Apps

    I'm working on a website that uses System.ComponentModel.DataAnnotations

    On my local machine, model validation messages are displayed in french but they are in english when I deploy the website to Azure.

    Please install .NET language packs on Azure Web Apps so we don't have to create .resx files and messy code to override .NET built-in messages...

    341 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    19 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Antimalware feature on Web Apps (App Service)

    Cloud Services and Virtual Machines have an antimalware feature to protect themselves from viruses.
    However, Web Apps only protects their platform, and there is no customer-facing antimalware service now.
    If we develop an application which receives files from anonymous users with an upload form, we can't detect and get rid of the viruses.
    We strongly request the antimalware feature like that Cloud Services and Virtual Machines do.

    312 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    11 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Add a web hook to get notified of completed auto-swaps

    Deployment slots with the auto-swap feature are useful to warm up the application before making it visible. Unfortunately, it is not possible to get feedback from the operation.

    It would be nice to have a web hook that is invoked with the result of the operation (success/failure).

    252 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    11 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Add Application Initialization Support for Scale Up/Down

    The application initialization/warmup feature works great when scaling out/in, but when scaling up/down requests are immediately routed to the new instances before the application is warmed up. It would be great if the new instances could be warmed up before rerouting requests to them.

    248 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  12. Scale Out wait for WarmUp complete before being added to LoadBalancer

    When adding new instances to the LoadBalancer, scale out mechanism doesn't wait for those application instances to fully warm up.

    Availability checker, via AppInsights, logs these responses, with the header:
    'X-AppInit-WarmingUp: 1'

    Which means that IIS knows that the application is in it's WarmUp cycle, but the LoadBalancer is already trying to serve requests.

    N.B. we _can_ add a rewrite rule to redirect the user to the original request, and hope that the LoadBalancer sends the user to a ready instance - but this feels like a hack.

    242 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    14 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  13. Make OData a first class citizen.

    Apparently OData (Microsoft's flagship REST data protocol) isn't fully supported.

    More info:

    https://social.msdn.microsoft.com/Forums/azure/en-US/7363e392-86d8-4b60-99fd-af98e128ab06/whats-the-odata-story?forum=AzureAPIApps

    quote
    "If you can manually create Swagger 2.0 metadata to describe your REST API, it will work perfectly."
    /quote

    Assuming it's true that swagger can't do OData, I would think that fact alone would've precluded swagger as an option.

    Additionally, whatever the reason swagger cannot create metadata for a WebAPI OData project should have been addressed before launch.

    Regardless, please fix this.

    217 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  API Apps  ·  Flag idea as inappropriate…  ·  Admin →
  14. Allow Azure App Service IP Restriction configuration by PowerShell Script

    At the moment an Azure App service has the ability to white list IP addresses through the Networking > IP Restriction blade. It would be useful if this could be configured through PowerShell.

    207 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    23 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Custom request headers in web server logs

    This is generally useful, but my usecase if with Cloudflare:

    When a web app is behind Cloudflare, all visitor IPs come Cloudflare's IPs. Cloudflare does forward the original visitor IP with a custom request header. I want to log this value in my web server logs. In IIS this is achieved with Advanced Logging, but this capability does not seem available in Azure web apps.

    https://support.cloudflare.com/hc/en-us/articles/200170666-How-do-I-correct-visitor-IP-with-Microsoft-IIS-

    188 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    10 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. Online Certificate Status Protocol (OCSP) Stapling

    We are seeing some delays in Time To First Byte because OCSP stapling is not active on Azure Web Apps SSL endpoints.
    This causes our clients' browsers to call the issuing CA's endpoint before SSL negotiation can really begin.

    Stapling would save the client browser from having to make an extra request to the CA checking if the certificate has been revoked.

    There is also a potential privacy issue for our clients that the CA will be able to log these requests. If the web server takes care of OCSP on the other hand no requests will be sent from…

    185 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    15 comments  ·  Flag idea as inappropriate…  ·  Admin →

    We’ve started deploying the feature to a small set of stamps. We’ll continue to monitor the stamps for performance and validate if the feature is working as expected. Once we are confident there are no issues, we will roll out to all regions.

    Thanks,
    Oded

  17. Ability to incrementally create/update AppSettings & ConnectionStrings

    Actual problem:
    Today if we don't provide all of the existing AppSettings or ConnectionStrings, the ones we omit are removed.

    Feature:
    A little bit like the ARM deployment mode, add the ability to specify an Incremental & Complete mode when pushing settings. To ensure compatibility, Complete would be the default, keeping the behavior we have today. If we set the mode to Incremental, only the provided settings would be created/updated, leaving existing settings untouched.

    Use cases:
    This would be very useful in cases where we want to sync AppSettings or ConnectionStrings for resources directly in our ARM templates for only…

    175 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  18. Azure App Service Backup Alerts

    Could email notifications please be added to the Azure App Service Backups. It would be nice to be notified on a daily/weekly basis if the backups of my App Services and completing successfully, partially successfully or failing.

    161 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    14 comments  ·  Notifications  ·  Flag idea as inappropriate…  ·  Admin →
  19. Enable 'Connect', 'Log Stream', 'Console' etc for App Service Environment

    When you deploy an App Service into an App Service Environment behind an ILB, much of the UI is greyed out. Examples of this is the 'Connect' button, 'Log Stream', 'Console' etc.

    I have to manually construct a URL to get to the kudu endpoint right now in order to use the console.

    158 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  20. Make certificate deployment idempotent

    When including a Microsoft.Web/certificates resource in an ARM template, the deployment will fail with "Another certificate exists with same thumbprint XXXXXXXXXXXXXXXXXXXX at location xxxx in the Resource Group xxxxxx." if the certificate already exists.

    The deployment should be idempotent like all of the other resource types and not fail if the resource already exists.

    Otherwise, the certificate has to be deployed manually and cannot be included in an ARM template used for CI/CD deployments (ie: from VSTS)

    153 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 18 19
  • Don't see your idea?

Feedback and Knowledge Base