Azure CDN SSL3.0 Disabled?

Does Azure CDN Server end point has SSL3.0 disabled after the poodle attack vulnerability?
We are having users who just have SSL3.0 checked on their IE browser and are not able to view CDN content. Once they check TLS 1.0 they are able to see the content.

Hi,
SSL 3.0 Protocol is by default enabled for Azure Websites, Roles, and Windows Virtual Machines.
However, due to an industry-wide vulnerability affecting the SSL 3.0 protocol, it is possible to disable it.
It is also possible to disable SSLv3 on a server.
This ensures that all connections use the stronger TLS protocols.
Please note that users on legacy browsers, which only support SSL 3.0, will no longer be able to connect to the server.
You could refer the following link to disable SSL 3.0.
http://azure.microsoft.com/blog/2014/10/19/how-to-disable-ssl-3-0-in-azure-websites-roles-and-virtual-machines/
Regards,
Malar.

Similar Messages

Azure CDN for Azure Website

I have an Azure Website and I would like to serve some of it via an Azure CDN. Apparently, this used to be possible by using a /cdn folder in an Azure Hosted Service however, you cannot create these any more.
If I try and create a Cloud Service (which replaced the Hosted Service), I just end up creating an Azure Web Site and you cannot connect a CDN to it.
So, my question is: How can I connect an Azure CDN to an Azure website?

Hi,
CDN in general has not been changed. Some old tutorials such as
http://blog.smarx.com/posts/using-the-windows-azure-cdn-for-your-web-application would still work. Please note it does not stand by website yet. It has to use web role. When you creating a cloud service, it works as a container. You can upload your
web roles to it. Cloud service is not website. In addition, at the moment it is needed to use the old Silverlight to manage CDN. We're in the progress to enable CDN management in the new portal, as described in the old portal:
Windows Azure CDN management experience will be available in the new Windows Azure Management Portal in the next couple months. Once this experience has been moved over, sometime this summer, the Silverlight Portal will be decommissioned. At that point,
you will no longer be able to use this Portal to manage your CDN assets and will only be able to do so through the new Portal.
Best Regards,
Ming Xu
Ming Xu
MSDN Community Support | Feedback to us
Develop and promote your apps in Windows Store
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Azure CDN Endpoint URL not Resolving

My objective is to deliver a payload via Azure CDN.Created a storage account> Created a Container > Uploaded the exe file(payload) using Azure Explorer. The Direct URL works.
I createad a CDN using the quick create option.It shows CDN is enabled. But on clicking the URL,It does resolve.
Can someone help me.

Hi rainbowerxtreme,
Could you please check the following ?
a) The CDN is created on the same storage account you have uploaded the exe to.
b) Please check if the Container to which the file is uploaded is a Public Container. Only blobs that are publically available can be cached with the
Azure CDN. To make a blob publically available for anonymous access, you must denote its container as public. Once you do so, all blobs within that container will be available for anonymous read access.
Please refer http://msdn.microsoft.com/en-us/library/azure/ff919703.aspx
Angshuman Nayak
Cloud Integration Engineering

Read XML from Azure CDN Marshalled error

I would like to load an XML file stored in Azure CDN in a Windows 8.1 App. This code throws Marshaling error:The application called an interface that was marshalled for a different thread. (Exception from HRESULT:
0x8001010E (RPC_E_WRONG_THREAD))
public async Task<XDocument> LoadXmlFromCDNAsync()
var url = new Uri("http://azXXXXXX.vo.msecnd.net/cdn/Data.xml");
var handler = new HttpClientHandler() { AutomaticDecompression = DecompressionMethods.Deflate | DecompressionMethods.GZip };
var client = new HttpClient(handler);
XDocument doc = new XDocument();
using (var stream = await client.GetStreamAsync(url))
doc = XDocument.Load(stream);
return doc;
Thanks.
FS

Hi,
I test your codes. And the result below:
I can successfully load the XML file. I think there is no problem in the codes which you used to load an XML file.
And as the error says, the problem is the thread on which the call occurs: the app cannot manipulate UI elements from non-UI threads. That error usually means you are calling something that requires the UI thread from a different thread. You can
call Dispatcher.RunAsync to marshall a task back to the UI thread.
See
http://msdn.microsoft.com/en-us/library/windows/apps/windows.ui.core.coredispatcher.runasync.aspx
And see the thread below:
https://social.msdn.microsoft.com/Forums/en-US/f1fe027f-2c6c-4a22-9418-566fcf67cebe/the-application-called-an-interface-that-was-marshalled-for-a-different-thread?forum=winappswithcsharp
Best Wishes!
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. <br/> Click <a
href="http://support.microsoft.com/common/survey.aspx?showpage=1&scid=sw%3Ben%3B3559&theme=tech"> HERE</a> to participate the survey.

Azure CDN IP Ranges

What are the IP ranges for Windows Azure CDN, so that QoS rules on a router can be configured? I've reviewed the Data Center IP ranges here: http://msdn.microsoft.com/en-us/library/windowsazure/dn175718.aspx, but those are only for Compute instances
and do not include CDN.

Hi Robert,
Thanks for posting!
Base on my experience, Windows azure CDN IP range is in the Data Center IP range. And you could view it from this page (Windows Azure Datacenter IP Ranges ). I suggest you could
try to trace the CDN IP address from your location. It may be confirmed by ping CDN URL.
Each section specifies the geographic region and the IP address ranges associated with that region.
Please try it.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Media URL expiration and IP restriction when using Azure CDN

Hi
Is anyone tried to use Azure CDN mapped to storage used for media streaming?
In my media account I have IP restiction for my org + I am setting timeout for the URL to be public.
Will those rules still going to work for accessing the media via the CDN?
If not - are those features availabe for the Azure CDN?

hi,
Currently, seamless CDN integration is not a feature of Microsoft Azure Media Services, but you can utilize one of the CDN providers on the market (see this link
http://msdn.microsoft.com/en-us/library/dn610353.aspx ).

Azure CDN vs Storage vs Media Services and Streaming Units

Hello,
Quite new to Azure and these services and after much poking around cannot quite find the answer to my question so I'm writing it here. I have a video that I have uploaded under storage but one cannot access that through the listed URL. So under
Media Services I created a new Media Service and if you look under Content you can find the URL for the video which I have published.
So, I then under configuration for this Media Service went under Streaming Capacity and turned it up to streaming capacity 1 unit = 200mbps at $4.50 per day. Which seems expensive for just wanting one video to be available on demand.
So I'm needing some help. I created some CDNs but not sure what they do and if they should be connected to my video. All I know is that it is costing me over $5 day to have one 47MB be available to play as soon as the user clicks on the link on
my page. This seems ridiculous. What am I doing wrong? How do I use the CDN, or the Media Services and if I'm just serving up one video do I need the 200mbps? I understand the idea of guaranteed bandwidth.... but some discussion on
this would help greatly. Thanks in advance for any discussion on this.

Hi Paul,
Streaming capacity doesn't only provides guaranteed bandwidth, but also enabled additional features such as dynamic packaging and dynamic encryption. If your intent is only stream one video file and just use progressive download, I would recommend you to
use directly storage SAS URLs and bypass streaming end-point. Streaming-end point with streaming capacity will provide you adaptive streaming and the additional feature.
To use storage URLs directly, you can just upload your video file using Azure portal and publish which will create a storage SAS URL. The URL should include blobcore in the URL. To integrate CDN for this URL, you should use CDN tab and integrate CDN
for the corresponding storage account.
Thanks,
Cenk

Azure CDN very slow from Indonesia

We've a solution that we've deployed using Azure compute instances and CDN. It has been working really well for customers in the US.
Now we've a customer in Indonesia who is experiencing really slow responses from the CDN (taking about 1.5 mins to download 650KB).
We asked the customer to run the test from http://azurespeedtest.azurewebsites.net/ to start determining a possible cause, this is the result of that test:
The CDN is showing to be 10 times slower that getting the same content from Brazil's data center.
Is this an expected behavior? how could I better diagnose what the issue is? should I create an additional CDN for South East Asia?
Thanks in advance
Reymarx Gereda

Thanks for the answers,
I understand that the first request is always expected to be slower, but when I perform subsequent requests they're still very slow, and the test output I pointed to initially should cache the content of the response in the CDN after the first request.
This is the output from tracert:
USA:
Tracing route to cs1.wpc.v0cdn.net [93.184.215.200]
over a maximum of 30 hops:
1 2 ms 4 ms 3 ms router.asus.com [192.168.200.1]
2 17 ms 13 ms 15 ms 73.103.24.1
3 15 ms 18 ms 17 ms te-0-1-0-4-sur03.bellevue.wa.seattle.comcast.net [68.85.241.249]
4 16 ms 16 ms 16 ms ae-40-0-ar03.seattle.wa.seattle.comcast.net [69.139.164.6]
5 16 ms 18 ms 17 ms he-1-3-0-0-10-cr01.seattle.wa.ibone.comcast.net [68.86.93.165]
6 17 ms 71 ms 18 ms he-0-12-0-0-pe04.seattle.wa.ibone.comcast.net [68.86.82.226]
7 16 ms 45 ms 15 ms 50-242-149-114-static.hfc.comcastbusiness.net [50.242.149.114]
8 17 ms 15 ms 15 ms 93.184.215.200
Trace complete.
Indonesia
Tracing route to cs1.wpc.v0cdn.net [192.229.145.200]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.88.1
2 3 ms 5 ms 2 ms 10.66.1.1
3 133 ms 109 ms 114 ms 192.168.8.234
4 101 ms 84 ms 54 ms 192.168.13.2
5 104 ms 65 ms 106 ms giga-0-0.openixp.net [218.100.27.129]
6 119 ms 97 ms 84 ms telkom.openixp.net [218.100.36.56]
7 78 ms 104 ms 119 ms 180.250.81.129
8 103 ms 99 ms 123 ms 180.250.81.130
9 * 85 ms 104 ms 192.229.145.200
In this last one the GeoIP information for the 192.168... addresses are in
Italy, could that be the issue of the slowness?
Reymarx Gereda

Azure CDN Slow Response time

We are having weird issue:
While accessing CDN (tied to blob images) we get this occasional slowness in images loading between 8:00AM to 9:00AM EST. Also we have SiteGuardian tool setup to monitor our page which has CDN Images which reports slowness in getting images.
Sometimes we get slow response:
URL
https://xxxxx.vo.msecnd.net/xxxxxx/629120870.jpg
Content-Type
application/octet-stream
Element Type
image
Resolve host time
1.032823 seconds
Request connect time
0.012877 seconds
Request transmit time
25.593073 seconds
Response server time
0.337203 seconds
Response receive time
0.002101 seconds
Total time
26.98s
Response
200 - OK
Size
23 K
When things are fine we get a quick response:
URL
https://xxxxx.vo.msecnd.net/xxxxxx/629120870.jpg
Content-Type
application/octet-stream
Element Type
image
Resolve host time
0.012714 seconds
Request connect time
0.035204 seconds
Request transmit time
0.294088 seconds
Response server time
0.254342 seconds
Response receive time
0.006517 seconds
Total time
603ms
Response
200 - OK
Size
23 K
And sometime it just times out.
What is the best way to trouble shoot such scenario? Is there any logging available if a request fails or if there is slowness in response time? Also, anyway to find out which CDN nodes things are cached at etc?
Thanks in advance.

Hi - Our issue is not yet resolved.
We have CDN connected to Azure Blob Storage Account. We let CDN Heuristics control the caching as our images (blobs) do not have any cache control policy set at this time.
We enabled log and we are seeing such entries, one is below:
1.0;2014-03-07T14:35:43.8958635Z;GetBlob;AnonymousClientOtherError;304;4;4;anonymous;;containername;blob;"http://XXXX.blob.core.windows.net/image1087175937.jpg";"/containername/image1087175937.jpg";abcc2dd9-cf8d-42c5-9e54-7dd9d96a3177;0;65.54.81.147:23347;2009-09-19;696;0;116;0;0;;;;;"If-None-Match=Tuesday,
04-Mar-14 00:22:58 GMT";"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; BRI/2; EIE10;ENUSWOL)";"REFERRER URL";
Are such entries getting logged because of CDN or why do we get these? The IP address is a Microsoft IP.
Based on documentation it seems:
AnonymousClientOtherError
Indicates that the anonymous requests failed precondition checks (like If- Modified etc.) for GET requests.
Examples: Conditional GET requests that fail the check.
Thanks in advance.

Azure vs. AWS questions (CDN and other services)

Hi all,
We are currently migrating from AWS to Azure and we have a bunch of different questions mostly related to CDN (in comparison to AWS) that we couldn't find online:
What is the right way to have a CDN that returns static content (Storage) and fallbacks to a virtual machine when the content is not available? Think about a service that automatically creates images when you ask it to, and
saves them on a Storage bucket for later reuse. On AWS we could do this using CloudFront + 404 handling.
Is it there something similar enough to CloudFront? That can reroute queries based on paths and/or different http codes?
When hitting a CDN that reroutes to a VM we get "504 Gateway Timeout" on some requests, that same resources return fine if we ask the resource for a second time. What we are doing on that request is asking the Storage
service for some image and returning a 302 redirect if it's not there. Perhaps the first request takes too long and that's why the CDN throws that error? A fresh example of this was on this URL: http://az3.hinchas.co.uk/t/4/h/f/4hfaQHaZbRfvPSjsQVe4nH_768x768yz.jpg
What's the recommended or fastest way to access public Storage from a VM? We are currently using the public DNS.
There is still no way to have nodejs deamons that need some compilation, right? Versioning the compiled objects is not a option for us now, as we only develop on Linux and Mac and it would make our current build process way
more complex.
When using Azure's API service, can we customize API routes based on paths or parameters and proxy some requests to amazon in order to ease the migration ?
Are there any recommended/official solutions to autoscale cassandra or elasticsearch clusters?
Any help will be greatly appreciated.
Thank you!

Hi,
Did you talk about azure CDN? If yes, When you enable CDN access for a storage account, the Windows Azure portal provides you with a domain name of the following
format: http:/ /<guid>.vo.msecnd.net/. This domain name can then be used to access blobs in a public container. When a request is made using the Windows Azure CDN URL, the request is redirected to the CDN endpoint closest to the location from which the
request was made to provide access to the blob. If the blob is not found at that endpoint, then it is retrieved from the Blob service and cached at the endpoint, where a time-to-live (TTL) setting is maintained for the cached blob. The TTL specifies that the
blob should be cached for that amount of time in the CDN until it is refreshed by the Blob service. The CDN attempts to refresh the blob from Windows Azure Blob service only once the TTL has elapsed. For more detail information about azure CDN, you could refer
to:http://azure.microsoft.com/blog/2009/11/05/introducing-the-windows-azure-content-delivery-network/
If using azure CDN, we could not get the Gateway Timeout error.Fastest
way to access public Storage, you may consider the file sharing service:http://blogs.msdn.com/b/windowsazurestorage/archive/2014/05/12/introducing-microsoft-azure-file-service.aspx
For the Azure API related issue, I suggest you ask in Azure API Management forums:https://social.msdn.microsoft.com/Forums/en-US/home?forum=azureapimgmt
For the autoscaling, you could use the Azure Management API to achieve, more detail information, you could ask in Azure API forums as mentioned.
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

CDN not available

Hi,
As per my information I read in blogs, CDN was disabled for new users. Has it been activated now? Still I can not see it in Azure portal.
Sandeep Bhutani

"We’re in the process of building out our next generation Windows Azure Content Delivery Network (CDN) architecture, and during
this time we are no longer accepting new CDN customers.
With the
CDN functionality having recently transitioned to the new Azure management portal, we have enabled it automatically only for customers who were using
CDN in the old management portal, so they can continue to manage their
CDN configurations. For everyone else, the
CDN feature is not enabled in the new portal.
We highly encourage you to wait until we’re ready building our next generation Azure
CDN service."
Thanks
Pradeep M G
<THE CONTENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS OR IMPLIED>
Please remember to "Mark as Answer" the responses that resolved your issue. It is a common way to recognize those who have helped you, and makes it easier for other visitors to find the
resolution later.

CDN Endpoint not working anymore

Since 14 hours our cdn is not working.
We have not changed anything in the portal, and everthing reports OK.
How can I troubleshoot this?
http://*id*.vo.msecnd.net/500/5300032-600.jpg (not working)
http://*storageaccount*.blob.core.windows.net/500/5300032-600.jpg (working)
Best regards,
Peter Larsson
/Peter Larsson

Hi Peter,
As the source URL
http://*storageaccount*.blob.core.windows.net/500/5300032-600.jpg worked fine for you, the problem should be related with the CDN or the network between you computer and the CDN, here are steps for your reference to troubleshoot:
1.Make sure CDN is righted enabled as http://msdn.microsoft.com/en-us/library/ee795176.aspx
2.After creating a CDN endpoint, it need some hours to apply, so please wait for some time(no more than 24 hours) to test it again.
3.If after 24 hours, CDN still fails but original storage works, please check the internet routing from the your end to the CDN by:
ping *id*.vo.msecnd.net to see if it can be resolved
tracert http://*id*.vo.msecnd.net/500/5300032-600.jpg to see how the request will be routed
4.Make sure IE cache is cleared.
5.Test from a different machine.
6.Check the origin to look for any obvious problems. Look for storage analytics logs.
7.Test a different geographic region. Like test from an Azure VM in a different geographic region.
if from above, there is no obvious clue on the CDN connectivity, please create a support ticket from your Azure management portal, then support team in Windows Azure will assist you quickly.
currently new generation of CDN is hosted by Verizon EdgeCast, then if the problem CDN is related with EdgeCast provisioning, Azure support team will involve EdgeCast to resolve very soon. if you are using elder version of Azure CDN, then azure support team
could directly troubleshoot and fix. by the way, CDN created from azure management portal after April 2nd, 2014 should be all from EdgeCast.
let me know if there is any question.
Jian Wu

CDN and SSL

Evaluating Azure CDN vs. Amazon Cloudfront. Simple question I can't seem to find a clear answer on: does Azure CDN support SSL ? With or without a custom domain name ? Thanks.

Hi - yeah
I asked this question previously.
the answer basically is -
1) custom domain names don't support HTTPS
2) your *.blob.core.windows.net - does support
Of course, you need to maintain consistency for caching purposes. So basically, if you want HTTPS - and want blobs - you always must use the *.blob.core.windows.net.
If you want to use custom domain name - you have to include logic/scripts/files in your package for HTTPS and use HTTP for custom domain names. Yes, this means 2 separate requests for same files.
Hope this helps.

Azure RemoteApp Issue

The same error appear the account is not in the correct state, when I'm trying to create a new service (remote app collection, upload template,..).
any ideas.

Hi Mohamed
What is the state of your Azure subscription (enabled ,disabled) and also your RemoteApp status - is in trial, trial expired, active?
Thanks
Pavithra.

Where did CDN go?

I was wondering if Azure offered a CDN. I searched the 'net for "Azure CDN" and found that it does. For example:
http://msdn.microsoft.com/library/azure/ff919703.aspx
Sure enough, there is a CDN icon in my Azure management portal.
But where do I find pricing info and features?
Not here:
http://www.windowsazure.com/en-us/pricing/calculator/?scenario=full
And there is no listing for it under Features on the Azure web site.
Is CDN a deprecated offering, or...?

Hi,
Azure CDN is not deprecated.
To understand CDN refer to the link -
http://sanganakauthority.blogspot.com/2011/09/what-is-azure-cdn-azure-content.html
To understand how to use it follow the link -
http://sanganakauthority.blogspot.com/2011/09/using-windows-azure-content-delivery.html
The link of usage of CDN is about sdk1.4 and old however the concept still remains the same and should be helpful.
Azure CDN pricing information is provided in below link -
http://www.windowsazure.com/en-us/pricing/details/cdn/
Hope this helps.
Mark As Answer if it helps you |
My Blog

Azure CDN SSL3.0 Disabled?

Similar Messages

Maybe you are looking for