Permit only accesses from Azure Front Door at Azure App Service

source: https://techcommunity.microsoft.com/t5/azure-architecture-blog/permit-only-accesses-from-azure-front-door-at-azure-app-service/ba-p/2000173

Some customer asked me about the following topic.

“We use App Service for hosting applications and Azure Front Door as global L7 load balancer. We would like to permit access only from Azure Front Door to Azure App Service as simply as possible. Could you please share good solution with us?”

By default, each App Service has a public IP address and is accessible via FQDN from across the globe. If you simply deploy App Service(s) behind Azure Front Door, everyone can access App Service directly without using Azure Front Door. Therefore, we have to configure permit only access from Azure Front Door at App Service. If you were me, what do you think is a good solution?

Read More..