Networking

The Networking forum covers all aspects of Networking in Azure, including endpoints, load-balancing, network security, DNS, Traffic Manager, virtual networks, and external connectivity.

Virtual Network:

  • Service overview

  • Technical documentation

  • Pricing details
  • Traffic Manager:

  • Service overview

  • Technical documentation

  • Pricing details
  • Network Watcher:

  • Service overview

  • Technical documentation

  • Pricing details
  • If you have any feedback on any aspect of Azure relating to Networking, we’d love to hear it.

    • Hot ideas
    • Top ideas
    • New ideas
    • My feedback
    1. CDN for root-DNS entry

      Actually it is by design not possible, to add a cname entry for the root-Level DNS entry. But a cname is needed to provide a CDN. I dont want to publish all my Websites with WWW, just to use a CDN.
      Some Providers already have the Workaround and provide a ANAME.

      Please provide also a Workaround, to provide a CDN for the root-Domain.

      Thanks, Martin

      4 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →

      Thanks for the valid suggestion. Your feedback is now open for the user community to upvote which allows us to effectively prioritize your request against our existing feature list and also gives us insight into the potential impact of implementing the suggested feature

    2. provisioning a certificate should not take hours

      there isn't much to it. when a domain change or when moving an app to azure we're forced to set up the cname first and then the endpoint https next, so that users are immediately redirected to the endpoint but the endpoint won't serve it's proper certificate until 6+ hours later.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    3. Add exclusion feature in CDN profile to be able to exclude certain user IPs for country filter rule

      Team, please consider to add this feature in future roadmap as we have customer use case that they need to whitelist certain user IPs as the users could be working outside of the country or travel abroad temporarily.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    4. access key vault in another subscription

      Currently As per the below doc, we can't access the KeyVault in another subscription.

      https://docs.microsoft.com/en-us/azure/cdn/cdn-custom-ssl?tabs=option-2-enable-https-with-your-own-certificate


      • My certificate + Keyvault is in another subscription. Hence while creating/updating CDN endpoints, I can't select the certificate/KeyVault that is in another subsId.

      • Can you please enable this request, so that we can access the Keyvault in another subscription.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    5. Verizon's CDN to prioritize compression scheme based on service response

      Verizon's CDN offering prioritize other compression schemes over Brotli. However, if a client can support Brotli (listed in Accept-Encoding request header) and the backend service treats Brotli as priority and actually uses it (Content-Encoding header in response is "br"), CDN should honor the will of the application and use Brotli as the mean to compress the responses. That in fact, can be applied as a general rule. The compression scheme supported and requested by the client and enforced by the service should take priority. Otherwise, the CDN would always have to decompress/recompress the resources. This is wasteful and inefficient.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    6. Add support for TeleSec / T-Systems CA SSL certificates on Azure CDN

      TeleSec / T-Systems is the biggest CA available in Germany. If a company, like our own, does not like to use foreign CAs for security reasons or for conformance with GDPR, it would be most helpful to support this one. (Plus, they once ran Azure in your name in Germany - perhaps that's why you forgot to add them?)

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  1 comment  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    7. CDN akamai cache hit rate

      Hello CDN PG,

      Please work with Akamai to make cache hit logs available via the Azure portal/CDN Core Analytics.

      We would like to have visibility of our cache hit rates for this service.

      3 votes
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    8. Azure CDN should have the possibility to rewrite response code from origin

      Azure CDN should have the possibility to rewrite response code in case of error (404,500 response) from origin like AWS CloudFront has:

      "You can choose the HTTP status code CloudFront returns along with a custom error page for a given HTTP status code. For example, if your origin returns a 500 status code to CloudFront, you might want CloudFront to return a custom error page and a 200 status code (OK) to the viewer."

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    9. Domain verification in Azure CDN should not require production breaking DNS changes

      Azure CDN: Doing TLS bindings for custon CDN endpoints requires CNAME DNS entries that point to the CDN endpoint. If the email verification is not possible, we need to have the DNS CNAME record to point to the endpoint for a long time, redirecting the traffic to the endpoint, which can be prepared with the content in advance, however, the certificate check will be giving all users a warning about the mismatch between the domain requested (custom vanity domain) and the CDN endpoint's FQDN

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    10. CDN full code deployment

      Currently it doesn't seem possible to deploy a CDN through the CLI tool for the purpose of serving static web content from blob storage.

      Missing functionality includes:
      - Creating a CDN endpoint for a Premium_Verizon CDN
      - Creating Rules e.g. (HTTP -> HTTPS redirect)

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →

      Thanks for the valid suggestion. Your feedback is now open for the user community to upvote which allows us to effectively prioritize your request against our existing feature list and also gives us insight into the potential impact of implementing the suggested feature

    11. Can you reduce the configuration time for Azure CDN(Verizon & Akamai) to turn on https?

      Can Azure'Verizon and Akamai CDN turn on https less time, after all, not every customer is willing to let his environment without access to https for 6-8 hours
      Plus Azure Microsoft CDN capabilities are expected to be finished, after all, better than Azure Verizon and Akamai in terms of performance

      1 vote
      Vote
      Sign in
      (thinking…)
      Sign in with: Microsoft
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      triaged  ·  0 comments  ·  Content Delivery Network  ·  Flag idea as inappropriate…  ·  Admin →
    • Don't see your idea?

    Feedback and Knowledge Base