Web Apps

Web Apps in Azure App Service provides a scalable, reliable, and easy-to-use environment for hosting web applications. Select from a range of frameworks and templates to create a web site in seconds. Use any tool or OS to develop your site with .NET, PHP, Node.js, Python and more. Choose from a variety of source control options including TFS, GitHub, BitBucket and others to set up continuous integration and develop as a team.

More details about the services are available in the App Service documentation. If you have a technical issue, please open a post on the developer forums through Stack Overflow or MSDN.

Products that we listen to in this space include: App Service, Web Apps, API Apps and Web App for Containers.

We welcome user feedback and feature requests!

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. in ASE disable TLS 1.1

    Allow for the disablement of TLS 1.1 protocols from ASE in a similar method as TLS 1.0. This would help secure systems further for ISVs building new API Apps and help with additional security concerns and compliance for PCI and others.

    Allowing for the same method but adding an additional JSON in cluster settings to actually trigger the TLS 1.1 disablement would be good.

    "clusterSettings": [
    {
    "name": "DisableTls1.0",
    "value": "1"
    },
    {
    "name": "DisableTls1.1",
    "value": "1"
    }
    ],

    https://docs.microsoft.com/en-us/azure/app-service-web/app-service-app-service-environment-custom-settings#disable-tls-10

    14 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
    • Outbound ip addresses as an environment variable

      We can get web app outbound ip addresses as a environment variable. It s too much simplier to get ip adresses from application.

      Environment.GetVariable("OUTBOUND_IP_ADDRESS")

      13 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        1 comment  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
      • App Service Environments Architecture and Cost

        I love using App Service Environments; however, the cost is shocking. We like that our App service can communicate over our express route to our data center. I gained some new understandings with how these services work on the back-end and it seems confusing. I have an understanding that normal App Service Plans operate such that a fault tolerant pair is available in a different part of the data center and in the event of a failure, your code is moved to the other pair. This is great and I love that. With ASE's the architecture changes and the use…

        12 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          under review  ·  2 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
        • App Service Environment End-to-End Encryption

          Hi - Could you add a feature which enables the end-to-end encryption of traffic within an App Service whereby communication between the frontend and worker roles can be secured using customer controlled TLS certificates.

          6 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
          • Azure App Service Environment ILB - Support for Internal Certificate Authorities

            Currently the documentation for Azure App Service Environment with ILB claims it supports internal certificate authorities.

            Per - https://docs.microsoft.com/en-us/azure/app-service/environment/create-ilb-ase#post-ilb-ase-creation-validation

            As part of the documentation it is recommended that a user bundles their server auth certificate with the full certificate chain - thus producing a PFX file or base64 encoding it and uploading through powershell.

            However when testing with OpenSSL or on an iOS device, the first request never sees the full certificate chain and fails with "invalid server certificate". It is on a subsequent request the full chain is delivered - leaving users to hit refresh once in their browser…

            4 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
            • Automatically rebind SSL Certs that have Auto-Renew

              Right now there is a way to purchase and Auto-Renew SSL-Certs for Web Apps. Unfortunately, the Auto-Renew does _NOT_ also bind the new cert to the WebApps where the cert it is replacing is currently bound to.

              This makes Auto-Renew more or less useless, as one still has to manually bind the new cert once it becomes available.

              A cert with Auto-Renew should automatically bind to all WebApps where the cert it replaces is used.

              4 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                3 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →

                Hi Thomas,

                Some feedback from our team:

                We do not update the SSL binding on rare cases, and we do have the code working just that it happens on a different task. This is definitely a bug we will be fixing as soon as we can. Most likely will be dealt with in June.

                Thanks,
                Oded

              • Generate internally-issued certificates

                There should be a way to generate internally-issued certificates for ASE so ASE's have no legacy-dependency. Currently one has to have CA running in a VM to generate that for the domain.

                3 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
                • Notification hook for manual scaling on an ASE

                  Scaling within an ASE is unreliable and often takes hours (although support maintains that it should only take 30-45min). We need a way of being notified on the status of the scaling operations. For example, an email notification, web hook, etc.

                  2 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →

                    The hours of scaling you’re describing, is that on ASE v1 or v2? v2 should have much faster scaling operations. If you encounter an issue on v2, please open a support ticket.

                    For the option of receiving notification for completed deployment, we will respond later after reviewing.

                    Thanks,
                    Oded

                  • Provide acceptable scale out time for instances in ASE Isolated instance types

                    Scaling is a core feature of App Services. We used ASE for the additional features however it means we are stuck with 40 mins scale out time to add an instance. Per support this is by design, however this is not documented anywhere in public domain.
                    Scaling is supposed to help us get customers on to Azure, if it takes 40 mins to add an instance, it will not meet the business needs, we abandoned ASE only due to this issue. Kindly document current scale out time in public documentation so that user know this before hand.
                    Ultimate goal should…

                    1 vote
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →

                      Thanks for the feedback!

                      You’re right that ASE scaling operations take longer than the common plans on multi-tenant App Service. We are looking at ways to decrease the time so it will on par with multi-tenant but this means a new infrastructure is needed with managing a pool or pre-assigned VMs to the ASEs.

                      This is documented here, though without a time frame mentioned as it depends on a numbers of factors: https://docs.microsoft.com/en-us/azure/app-service/environment/using-an-ase#how-scale-works.

                      We will update when there is more information here.

                      Thanks,
                      Oded

                    • Enable application logging in ILB ASE

                      Currently there is no way to access our applications trace logs in an ILB ASE environment. I understand the Log Stream button is greyed out in the portal, but even using Kudu, FTP, blob, or streaming in VS, none of these are working in ILB ASE, and support tells us this is a known issue. This is a huge downside for us because we depend on our customized application log messages for troubleshooting.

                      1 vote
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  App Service Environment  ·  Flag idea as inappropriate…  ·  Admin →
                      • Don't see your idea?

                      Web Apps

                      Feedback and Knowledge Base