hands-on lab

Implementing Azure Front Door with App Service Origin Host

Up to 1h 30m
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.


Azure Front Door is a PaaS offering by Microsoft Azure that lets you serve your global customer and enterprise application to a broader audience through the Azure network. Azure Front Door Standard/Premium is one of the fast and reliable CDN solutions that run on Microsoft's backbone network secured with intelligent threat protection. Azure Front Door also allows integration with other security and networking services such as Azure CDN and Azure Web App Firewall (WAF) enabling it to serves as a single secure CDN platform.

You can use Azure Front Door Standard/Premium to reach your global customer and audience to deliver high-performing modern applications while ensuring the platform's security. Azure Front Door is a layer 7 technology that integrates with WAF, Bot Protection, and Built-in DDoS protection. You can also leverage private back-ends with private link service and get the best out of security features in Azure.

If you are looking to accelerate your application performance, perform intelligent health probe and load balancing, offload SSL management, enable Web App Firewall, and secure the backend using the private link, Azure Front Door Standard/Premium is a perfect choice.

In this hands-on lab, you will be introduced to Azure Front Door along with how to set up origin groups and configure health probes and load balancing for the backend.

Learning Objectives

Upon completion of this intermediate-level lab, you will be able to:

  • Configure Azure Front Door Standard Instance
  • Create and Update Origin Hosts for Azure Front Door
  • Understand the Azure Front Door Routes
  • Understand Health Probe and Load Balancing in Azure Front Door

Intended Audience

  • Candidates for Azure Network Engineer Exam (AZ-700)
  • Cloud Architects
  • Network Engineers
  • DevOps Engineers


Familiarity with the following will be beneficial but is not required:

  • Azure App Services
  • General Azure Network Services

The following course and lab can be used to fulfill the prerequisite:


May 26th, 2023 - Resolved an issue that caused the lab to fail periodically

April 3rd, 2023 - Updated the instructions and screenshots to reflect the latest UI

May 9th, 2022 - Updated the instructions and screenshots to reflect the latest UI

Environment before

Environment after

About the author

Learning paths

Parveen is an Azure advocate with previous experience in the professional consulting services industries. He specializes in infrastructure and DevOps with a wide range of knowledge in security and access management. He is also an Azure Certified - DevOps Engineer Expert, Security Engineer, Developer Associate, Administrator Associate, CompTIA Certified - Network+, Security+, and AWS Cloud Practitioner.
Parveen enjoys writing about cloud technologies and sharing the knowledge with the community to help students upskill in the cloud.

Covered topics

Lab steps

Logging in to the Microsoft Azure Portal
Reviewing Existing Infrastructure to use with Azure Front Door
Configuring Azure Front Door Instance
Updating Front Door Origin Groups
Reviewing Front Door Route Rules
Validating Azure Front Door Configuration and Traffic Distribution