@DJ Sharing the findings from the product team for the broader group here.
The Microsoft Azure Team has investigated your issue where TLS handshakes to your app were failing.
Upon investigation, engineers determined this to be caused by a regression in TLS handshake logic.
There was a recent change made to our TLS handshake logic to reject requests which do not meet the MinTlsVersion requirement earlier. We did this to improve telemetry on our end and save some CPU cycles for extra processing of the handshake. However, in doing this we inadvertently exposed a bug in the framework we use to parse TLS handshakes related to SSLv3.0 Unified Client Hello.
We reverted the change in question and added extra regression testing to ensure we do not regress again. We also have an Issue opened against the .NET team: Parse more of the ClientHello when using SSL3 in the record layer · Issue #2821 · dotnet/yarp
In order to protect your app in the future, we recommend checking out this guide for ideas about how to be as resilient as possible.
We apologize for any inconvenience.