Azure 应用服务 URL 不安全

Question

我的 azure 应用程序服务有时显示安全，有时显示浏览不安全。我已上传 CA 颁发的 SSL 证书以获取专用入站 IP。不确定，但似乎当负载增加时，应用程序服务显示为浏览不安全。另外还存在性能问题并且响应缓慢。请建议如何始终显示它是安全的并具有更好的性能。

Answer 1

我的最佳猜测是，您在 Azure 中配置了负载均衡器，并且接收连接的第二个节点未分配您的 ssl 证书。我猜您只在重负载下看到问题的原因是，当第一个节点达到足够高的事件连接时，您的负载平衡正在使用加权连接算法将新连接路由到新创建的或已配置的节点数数。

如果这是您的问题，并且您发现自己有内部负载平衡器 (ILB)，请参阅 Microsoft 的指南 Using an Internal Load Balancer with an App Service Environment .

1. Go to ASE UI after ASE is created ASE -> Settings -> ILB Certificates
2. Set ILB certificate by selecting certificate pfx file and provide password. This step takes a little while to process and the message that a scaling operation is in progress will be shown.
3. Get the ILB address for your ASE (ASE -> Properties -> Virtual IP Address)
4. Create a web app in ASE after creation
5. Create a VM if you don't have one in that VNET (Not in the same subnet as the ASE or things break)
6. Set DNS for your subdomain. You can use a wildcard with your subdomain in your DNS or if you want to do some simple tests, edit the hosts file on your VM to set web app name to VIP IP address. If your ASE had the subdomain name .ilbase.com and you made the web app mytestapp so that it would be addressed at mytestapp.ilbase.com then set that in your hosts file. (On Windows the hosts file is at C:\Windows\System32\drivers\etc\ )
7. Use a browser on that VM and go to http://mytestapp.ilbase.com (or whatever your web app name is with your subdomain)
8. Use a browser on that VM and go to https://mytestapp.ilbase.com You will have to accept the lack of security if using a self-signed certificate.