Merge pull request #312576 from MicrosoftDocs/main

learn-build-service-prod[bot] · web-flow · commit 423e3bdc818c · 2026-03-04T12:24:22.000Z
Auto Publish – main to live - 2026-03-04 12:00 UTC
diff --git a/articles/container-apps/how-to-integrate-with-azure-front-door.md b/articles/container-apps/how-to-integrate-with-azure-front-door.md
@@ -1,6 +1,6 @@
 ---
-title: Access an Azure container app using an Azure Front Door
-description: Learn how to access an Azure container app using an Azure Front Door.
+title: Access an Azure container app using an Azure Front Door with Private Link
+description: Learn how to access an Azure container app using an Azure Front Door with Private Link
 services: container-apps
 author: craigshoemaker
 ms.service: azure-container-apps
@@ -17,7 +17,7 @@ zone_pivot_groups: azure-cli-or-portal
 
 # Create a private link to an Azure Container App with Azure Front Door
 
-In this article, you learn how to connect directly from Azure Front Door to your Azure Container Apps using a private link instead of the public internet. In this tutorial, you create an Azure Container Apps workload profiles environment, an Azure Front Door, and connect them securely through a private link. You then verify the connectivity between your container app and the Azure Front Door.
+In this article, you learn how to connect directly from Azure Front Door to your Azure Container Apps using a private link instead of the public internet. In this tutorial, you will create an Azure Container Apps workload profiles environment, an Azure Front Door, and connect them securely through a private link. You then verify the connectivity between your container app and the Azure Front Door.
 
 > [!IMPORTANT]
 > There are [additional charges](./private-endpoints-with-dns.md#billing) for enabling private endpoints in both the Dedicated and Consumption plans.
@@ -419,6 +419,9 @@ az group delete --name $RESOURCE_GROUP
 
 ::: zone-end
 
+> [!NOTE]
+> Zone-redundant Container Apps environments with an internal Virtual IP use internal load balancers (ILB) with IP-based backend pools. Because Private Link Service does not support ILBs with IP-based backend pools, a Front Door → Private Link Service → ILB topology is unavailable for zone-redundant environments. Instead use a private endpoint to connect Azure Front Door to your Container Apps environment like the method mentioned in this article. This method is compatible with both zone-redundant and non-zone-redundant configurations.
+
 > [!TIP]
 > Having issues? Let us know on GitHub by opening an issue in the [Azure Container Apps repo](https://github.com/microsoft/azure-container-apps).
 
diff --git a/articles/defender-for-iot/organizations/TOC.yml b/articles/defender-for-iot/organizations/TOC.yml
@@ -387,7 +387,7 @@
         displayName: shell, login, cli, command-line, commands, users, user
         href: references-work-with-defender-for-iot-cli-commands.md
       - name: OT sensor CLI reference
-        displayName: shell, login, cli, command-line, commands, users, user
+        displayName: shell, login, cli, command-line, commands, users, user, capture filter, capture filters
         href: cli-ot-sensor.md
   - name: API reference
     items:
diff --git a/articles/defender-for-iot/organizations/cli-ot-sensor.md b/articles/defender-for-iot/organizations/cli-ot-sensor.md
@@ -1,6 +1,6 @@
 ---
 title: CLI command reference from OT network sensors- Microsoft Defender for IoT
-description: Learn about the CLI commands available from Microsoft Defender for IoT OT network sensors.
+description: Learn about the CLI commands available from Microsoft Defender for IoT OT network sensors, including capture filters.
 ms.date: 12/19/2023
 ms.topic: reference
 ---
@@ -9,6 +9,9 @@ ms.topic: reference
 
 This article lists the CLI commands available from Defender for IoT OT network sensors.
 
+> [!TIP]
+> To reduce alert fatigue and focus your network monitoring on high priority traffic, you may decide to filter the traffic that streams into Defender for IoT at the source. For more information, see [Traffic capture filters](#traffic-capture-filters).
+
 [!INCLUDE [caution do not use manual configurations](includes/caution-manual-configurations.md)]
 
 ## Prerequisites
diff --git a/articles/defender-for-iot/organizations/how-to-control-what-traffic-is-monitored.md b/articles/defender-for-iot/organizations/how-to-control-what-traffic-is-monitored.md
@@ -214,13 +214,11 @@ If you're working with dynamic networks, you need to handle IP addresses changes
 
 1. Select **Save** to save your changes.
 
-## Configure traffic filters (advanced)
+## Configure traffic capture filters (advanced)
 
 To reduce alert fatigue and focus your network monitoring on high priority traffic, you may decide to filter the traffic that streams into Defender for IoT at the source. Capture filters are configured via the OT sensor CLI, and allow you to block high-bandwidth traffic at the hardware layer, optimizing both appliance performance and resource usage.
 
-For more information, see:
-
-- [Defender for IoT CLI users and access](references-work-with-defender-for-iot-cli-commands.md)
+For more information, see [Traffic capture filters](cli-ot-sensor.md#traffic-capture-filters).
 
 ## Next steps
 
diff --git a/articles/expressroute/TOC.yml b/articles/expressroute/TOC.yml
@@ -299,22 +299,6 @@
           href: customer-controlled-gateway-maintenance.md
     - name: Support for working remotely
       href: ../networking/working-remotely-support.md?toc=/azure/expressroute/toc.json
-- name: Troubleshoot
-  items:
-    - name: Troubleshoot gateway migration
-      href: /troubleshoot/azure/expressroute/gateway-migration-error-messaging
-    - name: Obtain correlation ID
-      href: /troubleshoot/azure/expressroute/get-correlation-id
-    - name: Verifying ExpressRoute connectivity
-      href: /troubleshoot/azure/expressroute/expressroute-troubleshooting-expressroute-overview
-    - name: Resolving network performance issues
-      href: /troubleshoot/azure/expressroute/expressroute-troubleshooting-network-performance
-    - name: Reset a failed circuit
-      href: /troubleshoot/azure/expressroute/reset-circuit
-    - name: Getting ARP tables
-      href: /troubleshoot/azure/expressroute/expressroute-troubleshooting-arp-resource-manager
-    - name: Questions & answers
-      href: /answers/tags/225/azure-expressroute
 - name: Reference
   items:
     - name: Monitoring data reference
@@ -377,3 +361,6 @@
         - name: Configure ExpressRoute and S2S coexisting connections
           href: expressroute-howto-coexist-classic.md
         - name: Change circuit from classic to Resource Manager
+          href: expressroute-howto-move-arm.md
+- name: Support and troubleshooting for ExpressRoute
+  href: expressroute-support-help.md
diff --git a/articles/expressroute/expressroute-support-help.md b/articles/expressroute/expressroute-support-help.md
@@ -0,0 +1,64 @@
+---
+title: Azure ExpressRoute support and help options 
+description: How to obtain help and support for questions or problems when you create solutions using Azure ExpressRoute. 
+author: duongau
+ms.author: duau
+ms.service: azure-expressroute
+ms.topic: troubleshooting
+ms.date: 03/03/2026
+ms.custom: support-help-page
+
+# Customer intent: As a network engineer or cloud solutions architect, I want to access troubleshooting resources and support options for Azure ExpressRoute, so that I can efficiently resolve connectivity issues and ensure reliable hybrid network connectivity.
+---
+
+# Support and troubleshooting for Azure ExpressRoute
+
+Here are suggestions for where you can get help when developing your Azure ExpressRoute solutions.
+
+## Self help troubleshooting
+
+Various articles explain how to determine, diagnose, and fix issues that you might encounter when using Azure ExpressRoute. Use these articles to troubleshoot connectivity problems, performance issues, circuit configuration, and more. 
+
+For a full list of self help troubleshooting content, see [Azure ExpressRoute troubleshooting documentation](/troubleshoot/azure/expressroute/welcome-expressroute).
+
+
+## Post a question on Microsoft Q&A
+
+For quick and reliable answers on your technical product questions from Microsoft Engineers, Azure Most Valuable Professionals (MVPs), or our expert community, engage with us on [Microsoft Q&A](/answers/products/azure), Azure's preferred destination for community support. 
+
+If you can't find an answer to your problem using search, submit a new question to Microsoft Q&A. Use the [azure-expressroute](/answers/tags/225/azure-expressroute) tag when asking your question.
+
+## Create an Azure support request
+
+Explore the range of [Azure support options and choose the plan](https://azure.microsoft.com/support/plans) that best fits, whether you're a developer just starting your cloud journey or a large organization deploying business-critical, strategic applications. Azure customers can create and manage support requests in the Azure portal.
+
+- If you already have an Azure Support Plan, [open a support request here](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/newsupportrequest).
+
+- To sign up for a new Azure Support Plan, [compare support plans](https://azure.microsoft.com/support/plans/) and select the plan that works for you. 
+
+
+## Create a GitHub issue
+
+If you need help with the language and tools used to develop and manage Azure ExpressRoute, open an issue in its repository on GitHub.
+
+| Library | GitHub issues URL|
+| --- | --- |
+| Azure PowerShell | https://github.com/Azure/azure-powershell/issues |
+| Azure CLI | https://github.com/Azure/azure-cli/issues | 
+| Azure REST API | https://github.com/Azure/azure-rest-api-specs/issues | 
+| Azure SDK for Java | https://github.com/Azure/azure-sdk-for-java/issues | 
+| Azure SDK for Python | https://github.com/Azure/azure-sdk-for-python/issues | 
+| Azure SDK for .NET | https://github.com/Azure/azure-sdk-for-net/issues | 
+| Azure SDK for JavaScript | https://github.com/Azure/azure-sdk-for-js/issues | 
+| Terraform | https://github.com/Azure/terraform/issues | 
+
+
+## Stay informed of updates and new releases
+
+Learn about important product updates, roadmap, and announcements in [Azure Updates](https://azure.microsoft.com/updates/?product=expressroute).
+
+News and information about Azure ExpressRoute is shared at the [Azure blog](https://azure.microsoft.com/blog/).
+
+## Next step
+
+Learn more about [Azure ExpressRoute](index.yml)
diff --git a/articles/expressroute/media/reset-circuit/refresh-circuit.png b/articles/expressroute/media/reset-circuit/refresh-circuit.png
diff --git a/articles/frontdoor/TOC.yml b/articles/frontdoor/TOC.yml
@@ -271,22 +271,10 @@
     href: understanding-pricing.md
   - name: CDN and Front Door price comparison
     href: compare-cdn-front-door-price.md
-- name: Troubleshoot
-  items:
-  - name: Troubleshoot with RefString
-    href: /troubleshoot/azure/front-door/refstring
-  - name: Troubleshoot Front Door issues
-    href: /troubleshoot/azure/front-door/troubleshoot-issues
-  - name: Troubleshoot Front Door performance issues
-    href: /troubleshoot/azure/front-door/troubleshoot-performance-issues
-  - name: Troubleshoot file compression
-    href: /troubleshoot/azure/front-door/troubleshoot-compression
-  - name: Allowed certificate authorities
-    href: https://ccadb.my.salesforce-sites.com/microsoft/IncludedCACertificateReportForMSFT
   - name: Subscription offers and bandwidth throttling
     href: standard-premium/subscription-offers.md
-  - name: Questions & answers
-    href: /answers/tags/96/azure-front-door
+- name: Support and troubleshooting
+  href: support-help.md
 - name: CDN and Front Door (classic)
   items:
   - name: Get started
@@ -514,6 +502,8 @@
       href: https://azure.microsoft.com/pricing/calculator/
     - name: Service updates
       href: https://azure.microsoft.com/updates/?product=frontdoor
+    - name: Allowed certificate authorities
+      href: https://ccadb.my.salesforce-sites.com/microsoft/IncludedCACertificateReportForMSFT
   - name: CDN
     items:
     - name: Azure Content Delivery Network billing
@@ -532,3 +522,4 @@
       href: /shows/Inside-Azure-for-IT/?products=azure-cdn
   - name: Networking blog
     href: https://techcommunity.microsoft.com/category/azure/blog/azurenetworkingblog
+
diff --git a/articles/frontdoor/support-help.md b/articles/frontdoor/support-help.md
@@ -0,0 +1,69 @@
+---
+title: Support and Troubleshooting
+titleSuffix: Azure Front Door
+description: How to obtain help and support for questions or problems when you create solutions using Azure Front Door. 
+author: halkazwini
+ms.author: halkazwini
+ms.service: azure-frontdoor
+ms.topic: troubleshooting
+ms.date: 03/03/2026
+ms.custom: support-help-page
+
+# Customer intent: As a network engineer or cloud solutions architect, I want to access troubleshooting resources and support options for Azure Front Door, so that I can efficiently resolve connectivity issues and ensure reliable hybrid network connectivity.
+---
+
+# Support and troubleshooting for Azure Front Door
+
+Here are suggestions for where you can get help when developing your Azure Front Door solutions.
+
+## Self help troubleshooting
+
+Various articles explain how to determine, diagnose, and fix issues that you might encounter when using Azure Front Door. Use these articles to troubleshoot connectivity problems, performance issues, circuit configuration, and more. 
+
+For a full list of self help troubleshooting content, see [Azure Front Door troubleshooting documentation](/troubleshoot/azure/front-door/welcome-front-door).
+
+
+## Post a question on Microsoft Q&A
+
+For quick and reliable answers on your technical product questions from Microsoft Engineers, Azure Most Valuable Professionals (MVPs), or our expert community, engage with us on [Microsoft Q&A](/answers/products/azure), Azure's preferred destination for community support. 
+
+If you can't find an answer to your problem using search, submit a new question to Microsoft Q&A. Use one of the following tags when asking your question:
+
+| Area | Tag |
+| --- | --- |
+| Azure Front Door | [azure-front-door](/answers/topics/azure-front-door.html) |
+| CDN Standard from Microsoft (classic) | [azure-cdn](/answers/topics/azure-cdn.html) |
+
+## Create an Azure support request
+
+Explore the range of [Azure support options and choose the plan](https://azure.microsoft.com/support/plans) that best fits, whether you're a developer just starting your cloud journey or a large organization deploying business-critical, strategic applications. Azure customers can create and manage support requests in the Azure portal.
+
+- If you already have an Azure Support Plan, [open a support request here](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/newsupportrequest).
+
+- To sign up for a new Azure Support Plan, [compare support plans](https://azure.microsoft.com/support/plans/) and select the plan that works for you. 
+
+## Create a GitHub issue
+
+If you need help with the language and tools used to develop and manage Azure Front Door, open an issue in its repository on GitHub.
+
+| Library | GitHub issues URL|
+| --- | --- |
+| Azure PowerShell | https://github.com/Azure/azure-powershell/issues |
+| Azure CLI | https://github.com/Azure/azure-cli/issues | 
+| Azure REST API | https://github.com/Azure/azure-rest-api-specs/issues | 
+| Azure SDK for Java | https://github.com/Azure/azure-sdk-for-java/issues | 
+| Azure SDK for Python | https://github.com/Azure/azure-sdk-for-python/issues | 
+| Azure SDK for .NET | https://github.com/Azure/azure-sdk-for-net/issues | 
+| Azure SDK for JavaScript | https://github.com/Azure/azure-sdk-for-js/issues | 
+| Terraform | https://github.com/Azure/terraform/issues | 
+
+
+## Stay informed of updates and new releases
+
+Learn about important product updates, roadmap, and announcements in [Azure Front Door Updates](https://azure.microsoft.com/updates/?filters=%5B"Azure+Front+Door"%5D).
+
+News and information about Azure Front Door is shared at the [Azure blog](https://azure.microsoft.com/blog/).
+
+## Next step
+
+Learn more about [Azure Front Door](index.yml)
diff --git a/articles/iot-operations/deploy-iot-ops/concept-production-guidelines.md b/articles/iot-operations/deploy-iot-ops/concept-production-guidelines.md
@@ -45,6 +45,8 @@ Consider the following measures to ensure your cluster setup is secure before de
 * Use [user-assigned managed identities](./howto-enable-secure-settings.md#set-up-a-user-assigned-managed-identity-for-cloud-connections) for cloud connections.
 * Keep your cluster and Azure IoT Operations deployment up to date with the latest patches and minor releases to get all available security and bug fixes.
 
+[!INCLUDE [aks-imds-restriction](../includes/aks-imds-restriction.md)]
+
 ### Networking
 
 If you use enterprise firewalls or proxies, add the [Azure IoT Operations endpoints](./overview-deploy.md#azure-iot-operations-endpoints) to your allow list.
diff --git a/articles/iot-operations/deploy-iot-ops/howto-enable-secure-settings.md b/articles/iot-operations/deploy-iot-ops/howto-enable-secure-settings.md
@@ -201,3 +201,7 @@ Some Azure IoT Operations components, like data flow endpoints, use a user-assig
    ```
 
 Now you can use this managed identity in data flow endpoints for cloud connections.
+
+## Block pod access to the Azure Instance Metadata Service
+
+[!INCLUDE [aks-imds-restriction](../includes/aks-imds-restriction.md)]
diff --git a/articles/iot-operations/deploy-iot-ops/overview-deploy.md b/articles/iot-operations/deploy-iot-ops/overview-deploy.md
@@ -65,6 +65,8 @@ To deploy Azure IoT Operations with secure settings, follow these articles:
 1. Start with [Prepare your Azure Arc-enabled Kubernetes cluster](./howto-prepare-cluster.md) to configure and Arc-enable your cluster.
 1. Then, follow the steps in [Deploy Azure IoT Operations to a production cluster](./howto-deploy-iot-operations.md).
 
+[!INCLUDE [aks-imds-restriction](../includes/aks-imds-restriction.md)]
+
 ## Required permissions
 
 The following table describes Azure IoT Operations deployment and management tasks that require elevated permissions. For information about assigning roles to users, see [Steps to assign an Azure role](../../role-based-access-control/role-assignments-steps.md).
diff --git a/articles/iot-operations/includes/aks-imds-restriction.md b/articles/iot-operations/includes/aks-imds-restriction.md
@@ -0,0 +1,10 @@
+---
+ms.topic: include
+ms.custom: include file
+author: dominicbetts
+ms.topic: include
+ms.date: 01/06/2026
+ms.author: dobett
+---
+
+When you deploy Azure IoT Operations with secure settings on AKS, Microsoft recommends blocking pod access to the Azure Instance Metadata Service endpoint. To learn how to enable this feature, see [Block pod access to the Azure Instance Metadata Service (IMDS) endpoint](/azure/aks/imds-restriction).
diff --git a/articles/route-server/configure-route-server.md b/articles/route-server/configure-route-server.md
@@ -293,9 +293,37 @@ az network routeserver peering show --name 'myNVA' --resource-group 'myResourceG
 
 
 ---
+## View routes that Route Server learns
 
+Navigate to **Effective Routes** under **Routing** to see the list of effective routes that Route Server learns from ExpressRoute connections, VPN connections, NVA BGP peers, and spoke virtual networks. 
 
-## View advertised and learned routes
+### <a name="output"></a>View output
+
+The page output shows the following fields:
+
+* **Prefix**: Address prefix known to the current entity (learned from Route Server)
+* **Next hop type**: Can be VPN, HubBgpConnection (NVA BGP peers), Virtual Network Connection, or ExpressRoute.
+* **Next hop**: This is the IP address of the next hop (This will be "on-link" for Virtual Network connections)
+* **Origin**: Link to the resource ID of the next hop (This will be empty for Virtual Network Connections)
+* **AS Path**: BGP Attribute AS (autonomous system) path lists all the AS numbers that need to be traversed to reach the location where the prefix that the path is attached to, is advertised from.
+
+
+### <a name="example"></a>Example
+
+The values in the following example table imply that Route Server has learned the route of 10.2.0.0/24 (a branch prefix). It has learned the route due to the **VPN Next hop type** VPN with **Next hop** VPN Gateway IP address. **Origin** points to the resource ID of the originating VPN gateway/Connection. **AS Path** indicates the AS Path for the branch.
+
+Use the scroll bar at the bottom of the table to view the 'AS Path'.
+
+| **Prefix** |  **Next hop type** | **Next hop** |  **Origin** |**AS Path** |
+| ---        | ---                | ---          | ---               | ---         |
+| 10.2.0.0/24| VPN |10.0.2.14|/subscriptions/`<sub id>`/resourceGroups/`<resource group name>`/providers/Microsoft.Network/virtualNetworkGateways/vpngw| 20000|
+
+
+> [!NOTE]
+> If a spoke VNet is peered with "use remote gateway" disabled, the spoke VNet's address range may still get advertised to on-premises even if the prefix does not appear in the **Effective Routes**.
+
+
+### <a name="view-advertised-and-learned-routes"> View advertised and learned routes to BGP peers
 
 In this section, you learn how to view the routes that your route server advertises to BGP peers and the routes it learns from those peers. This information is useful for troubleshooting routing issues and understanding traffic flow.
 
diff --git a/articles/route-server/troubleshoot-route-server.md b/articles/route-server/troubleshoot-route-server.md
