It is still in preview, but mTLS support is finally coming to Azure Front Door.

First, here is the link to the documentation.

As a reminder, mTLS provides enhanced security by authenticating both the client and the server. The client must therefore present a valid certificate to access the asset exposed by the server.

For clarity, here is what this looks like in a diagram (thanks to Cloudflare for the diagram):

Why this is good news is that it is now possible to expose a global asset like Front Door and add stronger security with mTLS. The PaaS solutions available on Azure today are limited to Azure Application Gateway and Azure API Management. As you know, both of these components are regional, which therefore requires significant work on resilience and high-availability concerns.

Pour les limitations de la preview que je vois, et qui j’espère seront corrigées ou améliorées avant une probable mise à disposition en GA.

• La rotation de certificat qui n’est pas opérationnelle.
• Un seul certificat autorisé, ce qui impacte le rollover surtout sur un asset global comme le Front Door. Pas de délai annoncé sur les mise à jour de ce type de configuration.