Web Apps

Web Apps in Azure App Service provide a scalable, reliable, and easy-to-use environment for hosting web applications. Select from a range of frameworks and templates to create a web site in seconds. Use any tool or OS to develop your site with .NET, PHP, Node.js or Python. Choose from a variety of source control options including TFS, GitHub, and BitBucket to set up continuous integration and develop as a team.

How can we improve Azure Web Apps?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  1. WebApp custom DNS with private DNS Name

    Custom DNS HostName for a WebApp is working exactly in the same way in both Azure and Azure Stack, with both ownership and record check against a public Internet DNS server. That's pretty cool for public facing web applications, but represents a security issue for :
    1)Intranet applications.(hosted on Azure or AzureStack)
    - Custom Domain Names makes sence not only for Internet but Intranet too.
    - We don't want to expose intranet application names publicly to the wild...
    2)Multi-tenant AzureStack
    - Each customer would like to have it's own custom domain for its applications, and not use the *.appservice.local.azurestack.external or…

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
    • Aggregated logs for Linux App Service instances

      To access logs for my Linux App Service instance i have to go to myapp.scm.azurewebsites.net/api/logs/docker and it lists all the instances i have running with a link to the log file for each node. This is cumbersome when trying to debug an issue. Could we have an option under diagnostic logs to target a storage Table and have these aggregated as one source

      6 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Flag idea as inappropriate…  ·  Admin →
      • Enable "Always On" feature for HTTPS-only web apps

        When I select "Always On" setting in my web app configuration, I assume, that my app will be active even if it supports only HTTPS protocol (not HTTP). This HTTPS-only requirement is common for most web applications, especially if they use authentication. But as I know, "Always On" feature generates HTTP request to the root of application. And if I configure redirect from HTTP to HTTPS for example like here https://blogs.msdn.microsoft.com/benjaminperkins/2014/01/07/https-only-on-windows-azure-web-sites/, "Always On" request receives "301 Moved Permanently" response and does not reach the app and it is going to idle state. So, "Always On" setting is useless for…

        10 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
        • Display slots should list their full name in the resource lists.

          When you are viewing resources in the "All Resources" blade or in the "Resource Group" blade all slots are just listed using only their slot name, if you have many different web apps that all use slots you will see the same name repeated several times (see "Example Resource Group.PNG").

          I suggest you display the name from the resources blade the same way you display it in the delete menu if you are deleting the base web app "BaseName-SlotName" (See "delete example.PNG")

          6 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
          • DNS resolution is not working in Azure Web App for Containers (linux)

            DNS resolution is not working in Web App for Containers (linux) when using custom docker image. The DHCP generated resolv.conf is broken. After using SSH to log in to the container trying nslookup google.com also fails with DNS resolution error.

            See my sample project for more details:

            https://github.com/henkosch/azure-webapp-dnstest

            The problem is also mentioned in the comments section on this page:

            https://docs.microsoft.com/en-us/azure/app-service/containers/app-service-linux-faq

            Does anyone have an idea how to fix this?

            32 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              2 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
            • REST API shouldn't return 0 when it doesn't have the actual data

              Calling the REST API to get CPU or memory usage of an app service plan, if you ask for it in the last minute it can return 0 to you, when a few minutes later it will return the actual value for the same time, it seems it takes a while for the real data to be available to the API, however I think it's wrong to return incorrect data, it should not return a value until it has the real value.

              1 vote
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
              • Improve deployment slot naming for web app service

                I don't know if this is already planned or under review but I couldn't find anything about it when I searched. So here it goes...

                When creating deployment slots for a web app service the name you enter does not correctly transfer consistently across Azure, which I see can become confusing if you run multiple apps. I have a web app service called "cx-botbook-web" which have two additional deployment slots called "dev" and "test". And just for fun I also made another web app service called "example-app99" with the same additional deployment slots "dev" and "test". If you go to…

                6 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                • Cannot remove file in persistent volume

                  I cannot remove a big logfile in /home/Logfiles.

                  1. Use XXXXi.scm.azurewebsites.net/webssh/host to access the SSH
                  2. cd /home/LogFiles
                  3. rm foo.log

                  I do not get any error, but the file is not removed.
                  If I try to tail the log file (or do anything els with the file), I get following error:
                  tail: cannot open 'foo.log' for reading: No such file or directory

                  All other files in the LogFile directory are working, it is only this specific log file that are broken.

                  4 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
                  • Web Apps should not return 500 error when attacker appends MS-DOS devices to URLs

                    If an attacker is trying to fingerprint your web server, perhaps looking for https://nvd.nist.gov/vuln/detail/CVE-2007-2897

                    He may try https://yourSite.azurewebsites.net/AUX or https://yourSite.azurewebsites.net/PRN

                    or any of the MS-DOS devices:

                    https://support.microsoft.com/en-us/help/74496/ms-dos-device-driver-names-cannot-be-used-as-file-names

                    Rather than return a 40x error, it returns a 500, and also leaks the server header "Server:Microsoft-IIS/8.0"

                    This is a bad situation to be in - throwing 500 errors, and leaking the server technology. Throwing 500 errors makes our sites more susceptible to DoS attacks? If an attacker sends 1000s of requests that throw 500 errors, the site will go offline in a short period of time?

                    0 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →

                      Hi there,

                      Thanks for bringing this up!

                      We will look into the leaked server header, but based on some testing, it is not trivial fix.

                      The internal server error responses are not harming your application in any way and cannot be used for DoSing the site (your site will not go down because of these). Unfortunately, fixing the response itself to 4xx type of response might be more challenging and there is currently no timeline for that and it is in our backlog.

                      We will update when there is work deployed to address the above.

                      Thanks,
                      Oded

                    • Option to migrate windows WebApp to linux WebApp

                      I would like to migrate my existing azure app service web app (running on windows) to new app service Web App on Linux. Now I try to do it through backup and restore and the contents are not copied to the linux web app.

                      3 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Flag idea as inappropriate…  ·  Admin →

                        Thanks for that suggestion, can you please submit a support request to investigate why backup and restore didn’t copy the contents to the new linux web app.
                        Note that backup and restore doesn’t move the *.azurewebsites.net hostname.

                        Ahmed,
                        App Service Team

                      • App Service Environments Architecture and Cost

                        I love using App Service Environments; however, the cost is shocking. We like that our App service can communicate over our express route to our data center. I gained some new understandings with how these services work on the back-end and it seems confusing. I have an understanding that normal App Service Plans operate such that a fault tolerant pair is available in a different part of the data center and in the event of a failure, your code is moved to the other pair. This is great and I love that. With ASE's the architecture changes and the use…

                        6 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          under review  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                        • HTTPS only without redirect

                          This feature has been requested multiple times (like here: https://feedback.azure.com/forums/169385-web-apps/suggestions/6868536-provide-require-ssl-setting-for-azure-websites), but has been closed time after time with the same workaround. The workaround consists of adding a redirect rule to web.config.

                          We however want a way to disable insecure HTTP requests completely.

                          Think of an API that gets called by a React or Angular app. Calling the HTTP endpoint of the API would be a bug and might lead to sensitive information like the access token being send over HTTP. It would appear to work, because the request gets redirected to HTTPS, so the bug would be harder to…

                          28 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                          • Add "Allow access to Azure services" in Azure App Service IP restrictions

                            Re this thread

                            https://www.yammer.com/azureadvisors/#/Threads/show?threadId=945875058

                            I'd used PowerShell to manually add IP restrictions a couple of weeks ago. Right away my App Insights availability tests started failing so I narrowed the test location down to Dublin IE and allowed those IP/Subnets.

                            Add an option similar to SQL Server "Allow access to Azure services" That white lists Azure App insights availability tests for selected regions.

                            Thanks

                            Luke

                            12 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                            • Optionally stop the web app while backing up

                              Some of my web apps have embedded databases that block the files they use. That prevents the backup from storing them (well, it actually stores a 0 byte file instead). This is not a big handicap if I make the backups manually, because I know the issue and I stop the web apps manually, but if I want to automate the backup I can't because almost always these files are locked...

                              One possible solution would be to add an option in the backup configuration to stop the web app before running and start it again after it has finished.

                              Thanks!

                              3 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                              • Give Linux web apps same deployment options as Windows based apps

                                Linux based web apps have 3 deployment options (GitHub, BitBucket, Local Git repo) whereas Windows based apps have 7 deployment options (including the "External Repository" which is what I was looking for).

                                This request is to bring the options for Linux based apps up to speed, and perhaps until then, provide documentation and/or UI verbiage as to why there are differences. I spent an hour or two trying to hook up GitLab as a deployment option (including trying to use the Azure CLI) in vein.

                                BTW the CLI gives a cryptic error message when trying to add an external repository.…

                                2 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                • PrivateFontCollection is not working

                                  The PrivateFontCollection is required for PDF and other renderings that need to measure text and prepare glyphs with the customers custom (not installed font) for layout purposes.

                                  The PrivateFontCollection internally uses the GDI API calls like NtGdiAddFontResourceW that is blocked by the AppServices backend. This is confirmed by Azure representative.

                                  Without the PrivateFontCollection in Azure AppServices only installed fonts can be used for rendering with Telerik Reporting and I suppose with many other similar products.

                                  Thank you.

                                  6 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                  • azure service environment (ASE) needs container support

                                    You recently announced general availability for the new azure App Service in Linux and Web Apps for Containers. However, I can't get them to work inside my Azure Service Environment V2.0, I found a menu item to allow me to add an Azure App Service in Linux to my ASE, and I initially specified a docker container, but looking at the construct after that reveals the container is gone and the thing was neutered to a generic webapp.
                                    Please enable your azure web apps with containers in ASE. These are, after all, just another variant of a webapp, and ASE…

                                    5 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Linux Static Site on Nginx

                                      One of the most common web techniques today is static generated web sites. Ideally, there would be an option along with Node, Php etc for Static HTML. This would allow configuration for just running Nginx web servers to host static sites.

                                      33 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Provide an interface for dictating logic to the load balancer, or allow us to nuke instances

                                        The load balancer for an App Plan is extremely simple minded in that it will always distribute load evenly.

                                        This doesn't work in a production environment with real users.

                                        e.g. if a webjob running on one machine picks up an intensive task from a queue, consuming all of the machine's resources, the load balancer will still forward users/requests to the affected machine.

                                        Please provide some sort of control over the load balancer. Even just a basic interface to provide basic rules.

                                        If you won't provide that, then at least instead allow us to nuke instances ourselves and provide us with…

                                        4 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Flag idea as inappropriate…  ·  Admin →

                                          For heterogeneous workloads, the recommendation is to split the apps apart into separate app service plans. For example, webjobs isolated to in an app service plan separate and apart from the app service plan(s) running web or API applications.

                                          We will keep this item open marked as “under review” because there are plans to onboard the per-worker metrics to the Azure Monitor feature, at which point programmatic scaling decision can be made from those metrics.

                                          Currently worker metrics can be viewed from the UX by clicking into “Diagnose and Solve Problems” link for an app service plan. There will be a link in the UX blade that opens titled “Metrics per instance”. Drilling into that link will pull up another UX blade showing CPU usage (amongst other statistics) broken out by individual worker VMs.

                                        • ad install & node web application is step by step number 4 is missing change the site

                                          ad install & node web application is step by step number 4 is missing change the site page .........

                                          1 vote
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 6 7
                                          • Don't see your idea?

                                          Web Apps

                                          Feedback and Knowledge Base