Press enter to see results or esc to cancel.

Azure app service – Securing Microservices using HTTPS

Reading Time: 1 minute

Microsoft Azure App Service provides PaaS (Platform as a Service) model for hosting web applications. Azure supports wildcard based SSL certificates for every App Service we create. Communication to this website is encrypted by using wildcard SSL’s.

Wildcard SSL – Free

Azure URL

All the Azure App services have a default website URLs that looks something like.

https://{your-app-service-name}.azurewebsites.com

For example

If your App Service name is “tomatoes-service” then your azure website url is

http://tomatoes-service.azurewebsites.com

And

https://tomatoes-service.azurewebsites.com

To profit from the free Azure SSL certificates you can use HTTP to HTTPS redirection extension. This enforces SSL on all the incoming traffic automatically.

All the HTTP traffic will be permanently redirected to your HTTPS.

By using a combination of security measures, we can make our websites and API secure without paying extra for SSL.

Microservices can be secured by using token based authentication on top of wildcard SSL. They can also be secured by whitelisting tenant applications.

Redirect HTTP to HTTPS using extensions:

Azure conveniently allows us to install extensions on our app services. We can achieve the HTTP to HTTPS redirection by installing an extension instead of writing code.

Step 1: Navigate to your App Service and search for “Extension”.

Step 2: On the right side corner, click on “Add”.

Screen-Shot-2017-05-23-at-9.22.17-PM-2768763031-1495593412417.png

Step 3: Under “Choose Extension” select “Redirect HTTP to HTTPS” extension by gregjhogan.

Screen Shot 2017-05-23 at 9.23.55 PM

Step 4: Select “OK” — 2 times.

That’s it.

All the HTTP traffic to your website will be automatically redirected to https.

Comments

Leave a Comment

Leave a Reply

Architect | Lead | Mentor | Blogger | Tech Enthus

Sagar

Sagar

I help in automation of business processes in Cloud. I'm a Lead Full Stack .Net Developer with over 12+ years of experience in developing web applications. My core expertise is in web applications designing, programming, implementing, automating, and monitoring.

Verified Services

View Full Profile →