Need some help for Azure Front Door issue.

Question

Need some help for Azure Front Door issue.

Eric Gao 25

Hi,

My website is using AFD. Recently AFD returns 504 error and I need to find the reason. Can anyone help me address the problems?

Thanks,

Eric

Venkatesan S 6,435 Reputation points Microsoft External Staff Moderator

2026-03-26T21:40:40.1766667+00:00
Hi Eric Gao,

Thanks for reaching out in Microsoft Q&A forum,

When your site uses Azure Front Door and suddenly starts returning 504 errors, it means that AFD is routing traffic to your backend (for example an App Service, VM, or AKS), but the backend either takes too long to respond or doesn’t respond at all. The 504 is essentially AFD saying, “I asked the server, but I didn’t get a proper answer in time, so I’m giving up and returning this error.”

Where to look first

Check backend performance Bypass Front Door and hit the backend directly (use the backend URL or IP). If it’s slow or hangs, AFD will time out and return 504. Look at logs from your app, database, or any downstream APIs to see if requests are taking longer than 30 seconds.

Check backend health in AFD In the Azure portal, go to your Front Door profile → Backend pools → see if the backend shows as Unhealthy or intermittent health. If health probes fail, AFD may stop routing traffic or fall back to a slower path, which can also cause 504s.

Review AFD timeout settings The default origin response timeout is 30 seconds. If your backend realistically needs more time (for example 60–120 seconds), you can increase the Origin response timeout in the Front Door profile (Standard/Premium SKUs) up to 240 seconds. This reduces 504s without changing your app code.

Check network and security Make sure NSG rules, firewalls, WAF, or load balancers are not blocking or delaying traffic from AFD’s POPs. If AFD is routed through a private link or VNet, ensure the Private Endpoint is approved and connected.

Use logs and ErrorInfo Look at AFD’s diagnostics / Front Door Analytics logs and filter for 504 responses plus the ErrorInfo field. If it shows OriginTimeout, you know the backend simply took too long and you either need to optimize the backend or increase the timeout.

Reference:

Troubleshoot common issues - Azure Front Door | Microsoft Learn

Configure Azure Front Door Logs | Microsoft Learn

Kindly let us know if the above helps or you need further assistance on this issue.

Please “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Venkatesan S 6,435 Reputation points Microsoft External Staff Moderator

2026-03-28T00:20:28.5466667+00:00

Hi Eric Gao,

We haven’t heard back from you regarding our last response and wanted to check if you had the opportunity to review our previous post.

Please “up-vote” if the information helped you. This will help us and others in the community as well.
Eric Gao 25 Reputation points

2026-03-28T13:21:30.1466667+00:00

Hi,

I have the AFD’s diagnostics / Front Door Analytics logs. Can anyone in Microsoft help me to find the reason of 504?

Thanks,

Eric
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Venkatesan S 6,435 Reputation points Microsoft External Staff Moderator

2026-03-30T01:34:07.2366667+00:00

Hi Eric Gao,

Could you please share the requested details via private message?
Sina Salam 28,361 Reputation points Volunteer Moderator

2026-03-30T09:43:48.5333333+00:00
Hello Eric Gao,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you are in need of help for Azure Front Door issue.

Since no response yet from moderator, and actual problem-solving never happened publicly. A 504 in Azure Front Door typically means the origin exceeded the response timeout; this is confirmed when ErrorInfo = OriginTimeout in logs. - https://dori-uw-1.kuma-moon.com/azure/frontdoor/troubleshoot-issues#504-gateway-timeout. However, . Firewall or Network Blocking, SNAT Port Exhaustion (Intermittent Failures), Health Probe Misconfiguration, and TLS / Connection Handshake Issues could be major contributed issue.

The below are the holistic actions you can take to resolve it:

Check ErrorInfo, BackendLatency, and TotalLatency to determine whether the delay is backend or network related. - https://dori-uw-1.kuma-moon.com/azure/frontdoor/monitor-front-door

If BackendLatency is high, the backend is slow; if near zero, the request never reached the backend successfully. Use log patterns like:

ErrorInfo=OriginTimeout BackendLatency=0

Run a direct request to confirm backend responsiveness and isolate AFD from origin issues.

curl -v https://backend-url

Ensure NSGs, firewalls, and WAF rules allow inbound traffic from AFD infrastructure without silent drops. Reference: https://dori-uw-1.kuma-moon.com/azure/frontdoor/front-door-faq#network-security

Monitor CPU, memory, and connection limits to detect saturation or thread exhaustion causing slow responses. Reference: https://dori-uw-1.kuma-moon.com/azure/app-service/overview-diagnostics

Only increase timeout if backend processing legitimately requires more time; do not use it to mask failures. Reference: https://dori-uw-1.kuma-moon.com/azure/frontdoor/front-door-timeout

Ensure probe path, protocol, and interval correctly reflect backend health to prevent routing to unhealthy instances. Reference: https://dori-uw-1.kuma-moon.com/azure/frontdoor/health-probes

Verify certificates, DNS resolution, and handshake completion to rule out connection-level failures.

openssl s_client -connect backend-url:443

I hope this is helpful! Do not hesitate to let me know if you have any other questions or clarifications.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful.
Eric Gao 25 Reputation points

2026-03-30T13:22:44.5533333+00:00

@Sina Salam Great. Let me try your suggestion.
Ganesh Patapati 11,835 Reputation points Microsoft External Staff Moderator

2026-03-30T15:16:39.07+00:00

Hello Eric Gao

Thanks for the reply!

I have Initiated a private message with you. Kindly provide the necessary details in the private chat to connect over privately 1:1 to troubleshooting the issue.

1 answer

Your answer

Venkatesan S 6,435 Reputation points Microsoft External Staff Moderator

2026-03-28T00:20:28.5466667+00:00

Hi Eric Gao,

We haven’t heard back from you regarding our last response and wanted to check if you had the opportunity to review our previous post.

Please “up-vote” if the information helped you. This will help us and others in the community as well.
Eric Gao 25 Reputation points

2026-03-28T13:21:30.1466667+00:00

Hi,

I have the AFD’s diagnostics / Front Door Analytics logs. Can anyone in Microsoft help me to find the reason of 504?

Thanks,

Eric
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Venkatesan S 6,435 Reputation points Microsoft External Staff Moderator

2026-03-30T01:34:07.2366667+00:00

Hi Eric Gao,

Could you please share the requested details via private message?
Eric Gao 25 Reputation points

2026-03-30T13:22:44.5533333+00:00

@Sina Salam Great. Let me try your suggestion.
Ganesh Patapati 11,835 Reputation points Microsoft External Staff Moderator

2026-03-30T15:16:39.07+00:00

Hello Eric Gao

Thanks for the reply!

I have Initiated a private message with you. Kindly provide the necessary details in the private chat to connect over privately 1:1 to troubleshooting the issue.

Answer 1

Yutaka_K_JP 1,645

I think the core is that an AFD 504 means the origin can’t open even a tiny conn‑slot to send its first byte, and u can see it by running curl --http1.1 --connect-timeout 2 -v once and noting where SYN, ACK, or that first byte stops.

0 comments

Share via

Need some help for Azure Front Door issue.

1 answer

Your answer