locked
Azure CDN - https only for clients? RRS feed

  • Question

  • Hi there,

    I am evaluating Azure CDN for my company and I have a question: Is it possible to restrict the client access 
    to an Azure CDN endpoint to https only? In other words, I would like to block http.

    If yes, how can I do it?

    Thank you for your help!

    Thursday, February 23, 2017 8:01 AM

All replies

  • This is possible through the portal UI, see screenshot below.

    Thursday, February 23, 2017 11:10 PM
  • Hi Richard,

    Thank you for the quick reply!

    Do the protocol settings in your answer refer to the communication between origin and Azure endpoint or between a client and the Azure endpoint? The second case is relevant for me.

    Thank you in advance!

    Friday, February 24, 2017 8:09 AM
  • This would be for both. We always use the same communication protocol between CDN and Origin, as is used between Client and CDN.

    Hope that helps.

    Friday, February 24, 2017 7:24 PM
  • Hi Richard,

    Your reply is very helpful. Thanks!

    I have one last thing, which I did not understant in this context: the official documentation (https://docs.microsoft.com/en-us/azure/best-practices-CDN) says

    The CDN can deliver content over HTTPS (SSL) using the certificate provided by the CDN, but it will also be available over HTTP as well. You cannot block HTTP access to items in the CDN. 

    How is it compatible with your reply above? Probably the answer is simple, but I am a beginner in this field ...


    Saturday, February 25, 2017 5:59 PM
  • A short update on the subject:

    After a quick setup of a resource group including an Azure CDN + Endpoint and a Blob Storage, I can confirm the 
    the answers above given by Richard Li. I could even set my Blob Storage Container as private and connect it to the CDN via Shared Access Signature (SAS). 

    However, the aforementioned official documentation is either incorrect or - at least - quite misleading, because one may block the http access to items in the CDN. If my interpretation is incorrect, please let me know.

    Wednesday, March 22, 2017 8:13 AM
  • Good catch, we will update that part of the documentation.
    Wednesday, March 22, 2017 5:23 PM
  • OK! Thanks! I am quite new to the msdn platform. Should I mark any reply as the answer? Indeed, my reply above contains the whole correct information. Just let me know. Thanks in advance!
    Thursday, March 23, 2017 7:51 PM