Web Apps

Web Apps in Azure App Service provides a scalable, reliable, and easy-to-use environment for hosting web applications. Select from a range of frameworks and templates to create a web site in seconds. Use any tool or OS to develop your site with .NET, PHP, Node.js, Python and more. Choose from a variety of source control options including TFS, GitHub, BitBucket and others to set up continuous integration and develop as a team.

More details about the services are available in the App Service documentation. If you have a technical issue, please open a post on the developer forums through Stack Overflow or MSDN.

Products that we listen to in this space include: App Service, Web Apps, API Apps and Web App for Containers.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Allow Web Sites join to a Cloud-Only Virtual Network

    So Web Sites can securely communicate with other Web Sites, Cloud Services e VMs.

    Other ideas like this were marked as complete, but the actual solution is for Hybrid Connections, not Cloud-Only Virtual Networks...

    244 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Calling this completed but would love more feedback.
    We support 3 ways of connecting to a virtual network (including Hybrid Connections):
    1. Hybrid connections – http://azure.microsoft.com/en-us/documentation/articles/integration-hybrid-connection-overview/
    2. VPN point to site – http://azure.microsoft.com/blog/2014/09/15/azure-websites-virtual-network-integration/
    3. App Service Environments – http://aka.ms/appservicease
    Options 2 and 3 allow for interacting with Virtual Networks on Azure (Classic). Option 2 allows “dialing” into a network while Option 3 allows creating a new one or joining an existing one.

  2. Support Linux for PaaS

    Currently when I start up a PaaS web site, it runs on Windows. This isn't necessarily ideal and would be better if I could choose between Windows or Linux for the actual environment.

    Would be nice if this Linux environment used nginx and php-fpm instead of Apache too.

    231 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Add ability to use API Key authentication

    It would be nice to be able to protect API apps with a set of API Keys instead of requiring a user to manually log in. This would be especially helpful for backend APIs that don't require user authorization or are accessed primarily by other servers.

    227 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  API Apps  ·  Flag idea as inappropriate…  ·  Admin →
  4. Make certificate deployment idempotent

    When including a Microsoft.Web/certificates resource in an ARM template, the deployment will fail with "Another certificate exists with same thumbprint XXXXXXXXXXXXXXXXXXXX at location xxxx in the Resource Group xxxxxx." if the certificate already exists.

    The deployment should be idempotent like all of the other resource types and not fail if the resource already exists.

    Otherwise, the certificate has to be deployed manually and cannot be included in an ARM template used for CI/CD deployments (ie: from VSTS)

    226 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    15 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Hello everyone,

    Please see the article below for instructions to address this error message. The solution is to specify the name of the certificate in your CI/CD workflow (instead of relying on the auto-generated certificate name). The deployment is idempotent if the ARM template specifies the certificate name.

    https://dotnetdevlife.wordpress.com/2020/02/08/common-errors-when-uploading-certificates-to-azure-app-service/

    Best,
    Jason

  5. Support optional client certificates for TLS mutual auth

    Client certificat optional

    In IIS the client certificat may be:
    - ignored
    - accepted (certificat optional)
    - asked (certificat mandatory)

    But on app service it can't be "accepted".

    222 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    41 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. static IP addresses - inbound and outbound - for Azure Websites

    Need a way to know where communication is coming from when solution is hosted on an Azure Websiite. Outbound IP communication from Azure Websites is difficult to secure as it can change addresses without notice.

    211 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    27 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Transfer websites and other assets from one subscription to another.

    Often websites, databases, and other assets are being developed on a free subscription, then the project grows and there's no way to transfer these to a paid subscription. The website has to be taken offline (so the prefix can be re-used), then has to be re-created in the new subscription.

    There should be an easy way to move things from one subscription to another.

    205 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  8. Disable TLS1.0

    Please let us choose what Cipher to use and Disable/Enable TLS versions in Azure Web Apps.

    191 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    26 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Allow Azure Web Sites to connect to a Virtual Network

    The Azure Web Sites are a great place to host web sites. The Azure Virtual Machines are a great place to host database servers. But currently, the connection between those two requires that the virtual machine and the database have a public endpoint.

    It would be great if we could create an (reserved?) Azure Web Site, which could be connected to a virtual network. This way, the web site and the virtual machine could be connected together without having to create a public endpoint.

    190 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Azure webapps, sort the application settings

    I would like the application settings section of the Azure webapp (and any other Azure resource) to have a default alphabetical sort, or even better, to be able to configure the order of the key/value pairs displayed.

    This would improve application management where keys need to be readily identified (e.g. Client secret keys which need to be renewed).

    The current portal simply appends the last created setting to the bottom, which means that developers and sysadmins have to be very fastidious around knowing the full extent of app settings to begin with.

    Thanks!

    181 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    12 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Support deployment from Mercurial DVCS

    Many Microsoft shops use Mercurial source control. It would be handy if you could support this as well as GIT.

    177 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  5 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. 1 record to verify domain ownership instead of 1 for every single hostname.

    Right now to add a custom domain you have to create a CNAME to verify ownership of the domain, but you have to do it for every single record you create. Incredibly inefficient and unnecessary. If I can create one record for the domain, I can create any number. Requiring a CNAME for every single DNS record is absolutely pointless, and creates a bunch of unnecessary back and forth with DNS providers. One record to verify the root of the domain should be enough. Once it's been verified I should be able to add any number of custom subdomains under…

    170 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. Add azure commandlets

    There is a possibility to run windows powershell scripts in Azure websites but if developers were able to run the Azure powershell commandlets they can unlock the Power of Azure powershell!

    170 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. Support Perl

    Perl is very stable on Windows.( Activestate Perl , Strawberry Perl )
    and now has great frameworks for cloud( Plack PSGI ,Catalyst .. )

    164 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Offer Extra Small Instance for Azure Websites

    Currently the cheapest Azure website, ie Standard mode, is about $75 a month. This is unaffordable as many casual sites don't garner a value or revenue of anywhere near $75 a month.

    Shared Mode can't be used for production sites as one buggy site will cause all 200 sites in the user's subscription to lock up until 24 hours is up. So even if I need a web site that consumes 4 CPU hours a day, I have no choice but to use the expensive Standard mode.

    Alternatively, modify Shared mode to lock up only the site that has exceeded…

    158 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    16 comments  ·  Flag idea as inappropriate…  ·  Admin →
    completed  ·  Erez Benari responded

    Last week we have introduced an option called “Basic”, which offers many of the features of the Standard tier, but at a lower price point. We also added some stuff to Standard, which might make it more sensible to you. We hope the options are more suitable for your needs now.

  16. Add Ruby on Rails to Azure Web Sites ( http://www.windowsazure.com/en-us/documentation/services/web-sites/ )

    Azure Web Sites only supports C#, Node.js, PHP, and Python. Please add support for Ruby (and Ruby on Rails).

    149 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    10 comments  ·  Flag idea as inappropriate…  ·  Admin →
  17. Make Application Gateway WAF services available for non-ASE App Service plans

    The Application Gateway and specifically WAF are useful even for simpler apps because of the OWASP and general security protections afforded.

    App Service Environments are extremely costly compared to a loaded Standard S1 or Premium P1 App Service plan and the Application Gateway/WAF cannot be used without the ASE.

    While there are WAF solutions provided by 3rd parties it would be great if the Azure solution used for ASE's was also available for standard App Service plans.

    Thanks

    139 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Hello everyone,

    Thank you for voting on this ticket and providing all the feedback. Application Gateway can now be used with multi-tenant App Service. Also, you can now use Service Endpoints to further restrict access to your multi-tenant App Services. Please see the documentation below for more information.

    https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-web-app-overview

    https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions

    Thank you,
    Jason

  18. Support Web Jobs running locally on the Storage Emulator

    Currently you can't run Web Jobs locally against the Storage Emulator. It complains with the following exception, at run time:

    I really need to be able to do this to run my stack locally.

    {"Failed to validate Microsoft Azure WebJobs SDK Storage account. The Microsoft Azure Storage Emulator is not supported, please use a Microsoft Azure Storage account hosted in Microsoft Azure."}

    I'm using storage Emulator 3.4.0.0.

    138 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. Increase the size limitation of backups from 10GB to the max size of the webapp

    We have standard S3 webapps which allow you to have 50 GB of local storage. However our backups continue to fail because our site uses 14 GB. Even after adding filters, it's almost impossible to get under the 10 GB limit, rendering backups useless for us

    135 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    15 comments  ·  Flag idea as inappropriate…  ·  Admin →
  20. Better support for wildcard domain mappings

    I have a web site with a separate subdomain for each client:

    client1.domain.com
    client2.domain.com

    To add a new client in azure websites at the moment I have to
    1. Go to my DNS provider and add a mapping for awverify.client3.domain.com (I already have *.domain.com mapped - this is only needed for verification)
    2. Wait patiently for that to propagate
    3. Add a domain name mapping to the web site configuration
    4. Map the new subdomain onto the same wildcard certificate used for every other client sibdomain

    If I have a control of awverify.domain.com then surely I will always have control…

    133 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    24 comments  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base