Skip to content

Commit 38e9b34

Browse files
authored
CSS-Networking: Add clarification to what the Origin host header does when PLS is enabled.
Added a line to help clarify what the Origin Host Header does when Private Link Service is used. Also added under Common Mistakes to avoid to state that those fields will not change the NAT behavior of that flow.
1 parent aafc23f commit 38e9b34

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

articles/frontdoor/standard-premium/how-to-enable-private-link-internal-load-balancer.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ In this section, you map the Private Link service to a private endpoint created
4646
* **Name** - Enter a name to identify this origin.
4747
* **Origin type** - Select the **Custom** origin type.
4848
* **Host name** - The host name is used for SNI (SSL negotiation) and should match your server side certificate. |
49-
* **Origin host header** | The origin host header can be the private link private IP for the internal load balancer or a valid domain name.
49+
* **Origin host header** | The origin host header can be the private link private IP for the internal load balancer or a valid domain name. When Private Link Service is enabled, this field is used only for the HTTP Request Header.
5050
* **Certificate subject name validation** - Select the checkbox to enable certificate subject name validation. This validation checks the certificate subject name against the host name. If the certificate subject name doesn't match the host name, the connection is rejected. **This validation is required if private link is enabled.**
5151
* **HTTP port** - 80 (default)
5252
* **HTTPS port** 443 (default)
@@ -79,6 +79,7 @@ In this section, you map the Private Link service to a private endpoint created
7979
The following are common mistakes when configuring an origin with Azure Private Link enabled:
8080

8181
* Adding the origin with Azure Private Link enabled to an existing origin group that contains public origins. Azure Front Door doesn't allow mixing public and private origins in the same origin group.
82+
* Private Link changes how the Host name and Origin host header fields operate. It does not change the NAT behavior of the flow to the Private Link Service Origin.
8283

8384
## Related content
8485

0 commit comments

Comments
 (0)