Azure Front Door

Azure Front Door is Microsoft’s modern cloud Content Delivery Network (CDN) that provides fast, reliable, and secure access between your users and your applications’ static and dynamic web content across the globe. Azure Front Door delivers your content using Microsoft’s global edge network with hundreds of global and local points of presence (PoPs) distributed around the world close to both your enterprise and consumer end users.

Note

For web workloads, we highly recommend utilizing Azure DDoS protection and a web application firewall to safeguard against emerging DDoS attacks. Another option is to employ Azure Front Door along with a web application firewall. Azure Front Door offers platform-level protection against network-level DDoS attacks. For more information, see security baseline for Azure services.

Why use Azure Front Door?

Azure Front Door enables internet-facing application to:

Build and operate modern internet-first architectures that have dynamic, high-quality digital experiences with highly automated, secure, and reliable platforms.
Accelerate and deliver your app and content globally at scale to your users wherever they're creating opportunities for you to compete, weather change, and quickly adapt to new demand and markets.
Intelligently secure your digital estate against known and new threats with intelligent security that embrace a Zero Trust framework.

Key Benefits

Global delivery scale using Microsoft’s network

Scale out and improve performance of your applications and content using Microsoft’s global Cloud CDN and WAN.

Leverage over 118 edge locations across 100 metro cities connected to Azure using a private enterprise-grade WAN and improve latency for apps by up to 3 times.
Accelerate application performance by using Front Door’s anycast network and split TCP connections.
Terminate SSL offload at the edge and use integrated certificate management.
Natively support end-to-end IPv6 connectivity and the HTTP/2 protocol.

Deliver modern apps and architectures

Modernize your internet first applications on Azure with Cloud Native experiences

Integrate with DevOps friendly command line tools across SDKs of different languages, Bicep, ARM templates, CLI and PowerShell.
Define your own custom domain with flexible domain validation.
Load balance and route traffic across origins and use intelligent health probe monitoring across apps or content hosted in Azure or anywhere.
Integrate with other Azure services such as DNS, Web Apps, Storage and many more for domain and origin management.
Move your routing business logic to the edge with enhanced rules engine capabilities including regular expressions and server variables.
Analyze built-in reports with an all-in-one dashboard for both Front Door and security patterns.
Monitoring your Front Door traffic in real time, and configure alerts that integrate with Azure Monitor.
Log each Front Door request and failed health probes.

Simple and cost-effective

Unified static and dynamic delivery offered in a single tier to accelerate and scale your application through caching, SSL offload, and layer 3-4 DDoS protection.
Free, autorotation managed SSL certificates that save time and quickly secure apps and content.
Low entry fee and a simplified cost model that reduces billing complexity by having fewer meters needed to plan for.
Azure to Front Door integrated egress pricing that removes the separate egress charge from Azure regions to Azure Front Door. Refer to Azure Front Door pricing for more details.

Intelligent secure internet perimeter

Secure applications with built-in layer 3-4 DDoS protection, seamlessly attached Web Application Firewall (WAF), and Azure DNS to protect your domains.
Protect your applications against layer 7 DDoS attacks using WAF. For more information, see Application DDoS protection.
Protect your applications from malicious actors with Bot manager rules based on Microsoft’s own Threat Intelligence.
Privately connect to your backend behind Azure Front Door with Private Link and embrace a zero-trust access model.
Provide a centralized security experience for your application via Azure Policy and Azure Advisor that ensures consistent security features across apps.

How to choose between Azure Front Door tiers?

For a comparison of supported features in Azure Front Door, see Tier comparison.

Where is the service available?

Azure Front Door Classic/Standard/Premium SKUs are available in Microsoft Azure (Commercial) and Azure Front Door Classic SKU is available in Microsoft Azure Government (US).

Pricing

For pricing information, see Front Door Pricing. For information about service-level agreements, See SLA for Azure Front Door.

What's new?

Subscribe to the RSS feed and view the latest Azure Front Door feature updates on the Azure Updates page.

Next steps

Learn about Azure Front Door routing architecture
Learn how to create an Azure Front Door profile.
Learn module: Introduction to Azure Front Door.

In this article