Azure Front Door

In the Ultra Transcenders books

AZ-305AZ-700SC-500ALZ

Each book explains Azure Front Door in context, with comparison tables and the common traps.

Terms in this definition

• AGDLP

  Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.

• OVER

  Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.

• TLS

  Transport Layer Security, the encryption protocol for traffic like HTTPS and Bastion sessions over port 443. On a storage account, minimumTlsVersion fixes the oldest accepted version without opening any network access.

• URL

  The web address of a resource, on which URL-based routing relies.

• PATH

  Parent-child hierarchies in DAX rely on this function. For each row it builds one delimited text value listing the IDs of the row's ancestors, top level first and ending with the row's own ID, which PATHITEM, PATHLENGTH and friends can then pick apart.

• APPLY

  Evaluates a table-valued expression for every row on its left, inside FROM. Think of OUTER APPLY as a left outer join and CROSS APPLY as an inner join.

• Web Application Firewall

  Protection at layer 7 from OWASP Top 10 threats like XSS and SQL injection, available on Application Gateway or Front Door.

Related terms

• Front Door (classic)

  The first-generation Azure Front Door tier, built around frontend hosts, backend pools and routing rules. It cannot use Private Link origins or accept new domains, and it retires on 31 March 2027.

• Front Door Premium

  The Azure Front Door tier that builds on Standard by adding bot protection, managed WAF rule sets and Private Link origins.

• Front Door Standard

  Lower Azure Front Door tier, with support for routes, custom domains, rule sets and your own WAF rules. Managed WAF rule sets and Private Link origins are only available after upgrading to Premium.

• Global WAF policy

  Azure Front Door's kind of WAF policy, linked to a profile, a route or a domain. Associating it with an application gateway is not possible.

• Rule set

  Azure Front Door's rules engine, which runs after the WAF and can redirect, rewrite URLs, change headers and override caching or routing. Rate limiting is not among its actions.