how can i configure Web.config file in azure java app deployed by azure app service portal UI

Question

Hello i have a Java Servlet(Jersey2 + Jax-rs)Api App deployed by Azure portal not from marketplace.

So now i am trying to configure my server or container to restrict IPs and HTTP requests, However, from azure guidelines in the websites are talking about setting web.config file to do that right?

but there is no web.config file in my directories.

does it mean that i need and can make a web.config file by myself and ftp to wwwroot folder?

or just as usual, put servlet filter into my app?

Answer 1

@MyoungsoKang, there are many ways to restrict IPs or HTTP requests for Azure App Services, please see below.

1. Configuring web.config for IIS on Azure which you can create in the wwwroot by yourself like the answer for the SO thread Azure website IP restriction .
2. Using filter for Java servlet container to flexibly control the inbound requests.
3. Adding Web Application Firewall ModSecurity on Azure website, please see the blog and refer to the reference manual to know how to use it.