Is it possible to disable HTTP on an azure app service, not just redirect it to HTTPS

Question

In azure app services you are able to redirect HTTP traffic to HTTPS either via the web.config file or through the custom domains blade in azure portal. Is it possible to disable HTTP completely without doing a redirect?

Answer 1

Here is a way to achieve this:

• Go to Kudu console for the Web App
• Go into the D:\home\site folder

• Create a file called applicationhost.xdt in that folder, with the following content (you can drag/drop it from your local machine):

  <?xml version="1.0"?>
  <configuration xmlns:xdt="http://schemas.microsoft.com/XML-Document-Transform">
    <location path="%XDT_SITENAME%" xdt:Transform="InsertIfMissing" xdt:Locator="Match(path)">
      <system.webServer xdt:Transform="InsertIfMissing">
        <rewrite xdt:Transform="InsertIfMissing">
          <rules xdt:Transform="InsertIfMissing">
            <rule name="Disable HTTP" enabled="true" stopProcessing="true">
              <match url="(.*)" ignoreCase="false" />
              <conditions>
                <add input="{HTTPS}" pattern="off" />
                <add input="{WARMUP_REQUEST}" pattern="1" negate="true" />
              </conditions>
              <action type="CustomResponse" statusCode="401" />
            </rule>
          </rules>
        </rewrite>    
      </system.webServer>
    </location>
  </configuration>
  

This will make http requests fail with 401 (you can customize the response in the <action> tag).