In one of our Azure roles we have a log that is accumulating a lot of HTTP 404 errors as a result of regular HTTP requests (Get / ) coming from an IP address belonging to MS.
Is this "traffic" part of the Azure role health monitoring? We don't have a controller/action to respond to that request. I would prefer not to open that door unnecessarily, but if I could unambiguously identify it as Azure health monitoring, then I could at least filter them out when logging.
If your requests come from more than one security principal, your limit across the subscription or tenant is greater than 12,000 and 1,200 per hour. These limits apply to each Azure Resource Manager instance.
You can use the Network Security Groups(NSG) to block some IPs. You can add different rules in one NSG and config this NSG to your cloud service's VNet. Firstly, you need to have a NSG with rules that can block the target IPs. You can use portal to create the NSG and add rules in it.
The 5 minutely requests to HTTP GET /
are caused by the "AlwaysOn" feature of Azure Web Apps.
Since it is not possible to customize the endpoint AlwaysOn checks, your options are;
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With