We currently block something like:
param1": "domain_fronting",
"param2": "pod01-prot2.eus.backup.windowsazure.com:443 != pod01-prot2.eus.backup.windowsazure.com:"
Here the port is not present. We might better tweak the logic so that if port is not set and it is the HTTPS connection - set the 443 as default - this will allow such connections and do NOT trigger the domain fronting block.
We currently block something like:
param1": "domain_fronting",
"param2": "pod01-prot2.eus.backup.windowsazure.com:443 != pod01-prot2.eus.backup.windowsazure.com:"
Here the port is not present. We might better tweak the logic so that if port is not set and it is the HTTPS connection - set the 443 as default - this will allow such connections and do NOT trigger the domain fronting block.