Can I Use Azure Front Door Inside a VNET?

[arschles]

I was looking at the Azure Front Door Docs and couldn't find a way to have FD route to an IP inside of a VNET?

Specifically, I want to have FD route to the IP of an internal load balancer in my VNET. I am trying to route to my AKS cluster

If it is possible, can you tell me where to find it in the documentation?

Thank you very much! 😄

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: dbadca96-7341-36d0-8a38-1c6a5c96b22d
• Version Independent ID: 2fad91dc-25f8-0c7a-c21d-93986ec51145
• Content: Azure Front Door Service
• Content Source: articles/frontdoor/front-door-overview.md
• Service: frontdoor
• GitHub Login: @sharad4u
• Microsoft Alias: sharadag

[YutongTie-MSFT]

@arschles Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@sharad4u Hi, can you please take a look? Thanks a lot!

[unsafecode]

Any updates on this?

[YutongTie-MSFT]

@sharad4u Hi, do you have any idea? Thanks!

[alert101]

Any update on this? We also wish to use Azure Front Door and keep our AKS cluster private.

[BartVanBerkel]

This doesn't seem to be on the roadmap.

AFD can only route to public VIPs/FQDNs and cannot route to private IP spaces and thus also doesn’t support VNET integration. This is by design and we do not plan to add this support any time int he near future. One of the ways you can achieve this is by routing traffic from AFD to an Application Gateway/Standard Load Balancer tied to your VNET.
Source: https://feedback.azure.com/forums/217313-networking/suggestions/36232873-vnet-integration-front-door

[sharad4u]

@YutongTie-MSFT - This isn't supported and now documented here - https://docs.microsoft.com/en-us/azure/frontdoor/front-door-faq#can-azure-front-door-load-balance-or-route-traffic-within-a-virtual-network

#please-close