Web Apps
Web Apps in Azure App Service provides a scalable, reliable, and easy-to-use environment for hosting web applications. Select from a range of frameworks and templates to create a web site in seconds. Use any tool or OS to develop your site with .NET, PHP, Node.js, Python and more. Choose from a variety of source control options including TFS, GitHub, BitBucket and others to set up continuous integration and develop as a team.
More details about the services are available in the App Service documentation. If you have a technical issue, please open a post on the developer forums through Stack Overflow or MSDN.
Products that we listen to in this space include: App Service, Web Apps, API Apps and Web App for Containers.
-
Connecting WebApp Service and a DBaaS (MS SQL MySQL etc)PaaS through a VNet service
Connecting WebApp Service and a DBaaS (MS SQL MySQL etc)PaaS through a VNet service. We understand that there is a SNAT limitation when a webapp service is connected to a PaaS service that causes error in the application.
We need private endpoint for DB PaaS services for overcoming the SNAT limitation and also to reduce the latency while connected through private IP address.43 votes -
Need a read-only role or operation for Web App Kudu logs.
Developers need to be able to access the KUDU logs for deployment and diagnostic troubleshooting without having contributor access to the web app. Can a read-only role or resource provider operation be created in order to grant this level of access?
37 votesThanks for the valid suggestion. Your feedback is now open for the user community to upvote which allows us to effectively prioritize your request against our existing feature list and also gives us insight into the potential impact of implementing the suggested feature
-
Web Apps vnet integration without ASE
The Web Apps have a VNET Configuration section.
This becomes very useful in consuming database/storage/keyvault via subnet endpoint(s) without employing the expensive App Service environment (ASE).unfortunately it has been in preview since last Aug 2018. I worked with product team to get the bug fixed (~Mar 2019) i.e it could not talk to SQL PaaS DB over endpoint.
Please if you can help release that functionality so we can use this in prod.
9 votes -
IIS limitation to only extract leaf cert (with private key) when passing certificate chain to azure from client.
Azure is built on IIS, so the IIS limitation to only extract the leaf cert severely hinders the possibility to programmatically extract the root certificate and the following certs associated with that root certificate. There is an option to manually add these via the portal, however, this will cause an issue when something is changed on the client side that would require a reupload of the certificate. Would like to request a way or alternative way of passing this certificate chain that will allow for all certs to be passed and not just the root certificate. This chain is passed…
1 vote -
Allow multiple VNET integrations inside an app service plan
Allow multiple VNET integrations inside an app service plan as it affects the existing production loads.
9 votes -
Add support for NetworkWatcher / NSG Flow logs for App Service with Regional Vnet Integration enabled
At the moment, if one uses an App Service with Vnet Integration there is NO way to monitor the traffic that traverses this path. For organizations with requirements to monitor ALL network traffic for integrity / Security / Audit purposes - this presents a significant challenge as ALL traffic that traverses this integration is not able to be monitored. Since the App Service presents itself as on a given subnet within the Vnet - there should be NO reason that NetworkWatcher or NSG flow logs shouldn't be usable.
4 votes -
Webapp - publish web worker's private ip info
Webapp - publish web worker's private ip info
Each web worker has 3 identifiers: server name (like RDxxxx), private ip(like 10.x.x.x) and roleinstance name (like LargeDedicatedWebWorkerRole_IN_n). Customer can easily find server name but can't see its corresponding private ip. Request to publish private ip of web workers as well.1 vote -
Assign users or groups per virtual application
It would be great to configure assigned users or groups per virtual application in a web app instead of on the whole web app level. because in our case, we have to have different users for different virtual applications.
1 vote -
Support to disable Basic Auth in App Service
The support to disable Basic Auth is highly important in App Service from security point of view.
The reason is very simple, any one access to have Basic Auth credential can be disastrous and is providing the weakest link to peep into your environment.
It might be helpful in many ways but at the same time can be highly dangerous if not handled properly.
3 votes -
Support KeyVault out of box in App Services Environment
Currently ASE allows uploading of ILB certificates through script/portal.
Provision to autopick certificate from Azure KeyVault using thumbprint should be made possible through script/portal
13 votes -
About access control for Hybrid Connections
I want to configure RBAC (IAM) individually for Web App with hybrid connection, but I can only configure it per Web App.
Also, although the actual status of the hybrid connection should be Service Bus, it can not be set because it is not displayed in the list.
I would like to be able to configure RBAC (IAM) separately for Web App with hybrid connections.
8 votes -
Divert with a custom error page when an app service configured with IP Restrictions
When an App Service is configured with an IP Restriction, only whitelisted IP's can access the App service URL/site. Other users cant access the URL. By default the blacklisted IP's or denied IP's will receive
Error 403 - This web app is stopped. Many SR's can been be seen with this requirement to divert or return custom error message instead of 403 error. It would be great if we have a feature in portal to divert with custom message when the IP restrictions are configured for a web app.12 votes -
Hive ODBC
We have webapps that is querying Hive on HDInsight which is working fine when hosted on on-prem IIS. We need Hive ODBC driver installed on the VM to get it works.
But when we deploy on Azure App Service it's failing due to missing driver.
Can Microsoft® Hive ODBC Driver installed on Azure App Service Environment & Azure Function please?
9 votes -
Metrics on Outbound connections from Azure
We are seeing intermittent exceptions while making outbound calls from Azure to other system on our application hosted on Azure App Service. We talked to the Azure support team they provided some good feedback on how to reduce it but we are not provided any logs i.e. what happens on back end on network level so that we can establish some bench marking for our performance testing. We have seen the issue couple of times and not getting consistent root cause of the issue backing up by logs etc. This makes this issue very unpredictable and only option to solve/reduce…
6 votes -
Advanced application restart gated by Delete lock
At the moment, if there is a Delete lock applied to an App Service, it prevents the Advanced application restart feature from working. Reference ticket 119060721001994.
It appears that Advanced application restart is an older feature implemented before locks were exposed, and it issues a DELETE HTTP request to perform the Advanced application restart, which is denied due to the Delete lock being in place for the app service.
This is inconsistent with other actions that effectively do the same thing - via Restart, Scale Out/In, Scale Up/Down, and Kudu process kills. Note that Kudu is the only way to…
1 vote -
add warning for hyphens in connectionstring in setup for webapps for containers
cfr. https://twitter.com/IBruyninckx/status/1121082148067401728?s=20
I’d love to see a warning - at least - in the azure portal that connectionStrings with hyphens are a bad idea... that would prevent a lot of wasted debugging hours for others.
5 votes -
Detection when singleton lock is reset in Web Job timer trigger
When the singleton lock is reset, the job may start in parallel, and I would like to detect, to able to distinguish whether the singleton lock has been reset.
8 votes -
Use Azure Active Directory sign-in to protect a virtual directory in web app.
Currently, the Authentication / Authorization blade for azure web apps does not have a specific configurations for protecting virtual directories. however, many business cases need to have the main site available for public but some pages (like admin pages) need to be protected by Azure AD
Therefore, it will be great to use Azure Active Directory sign-in to protect a virtual directory in web app.
Thank you,
Raed Alahmad3 votes -
Issue in accessing code execution logs on console in linux python azure functions 2.x
It would be great if python azure function apps hosted on linux do display code execution logs real time on the console.Currently we have been facing issue in generating the logs for the same on console.
1 vote -
Throttling when creating web apps
can we have a way to increase throttling limits when creating deleting web apps, specially when using operations such as HostNameBinding. And documentation that shows the hard limits.
1 vote
- Don't see your idea?