Article Details

Scrape Timestamp (UTC): 2025-01-03 06:51:59.834

Source: https://thehackernews.com/2025/01/critical-deadline-update-old-net.html

Original Article Text

Click to Toggle View

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption. Microsoft has announced that it's making an "unexpected change" to the way .NET installers and archives are distributed, requiring developers to update their production and DevOps infrastructure. "We expect that most users will not be directly affected, however, it is critical that you validate if you are affected and to watch for downtime or other kinds of breakage," Richard Lander, a program manager on the .NET team, said in a statement last week. The move is the result of the fact that some .NET binaries and installers are hosted on Azure Content Delivery Network (CDN) domains that end in .azureedge[.]net -- dotnetcli.azureedge.net and dotnetbuilds.azureedge.net -- which are hosted on Edgio. Last month, web infrastructure and security company Akamai acquired select assets from Edgio following its bankruptcy. As part of this transition, the Edgio platform is scheduled to end service on January 15, 2025. Given that the .azureedge[.]net domains could cease to become unavailable in the future, Microsoft said it's migrating to Azure Front Door CDNs. The Windows maker said it will automatically migrate customers' workloads by January 7, 2025, if no action is taken. However, it's worth noting that automatic migration will not be possible for endpoints with *.vo.msecnd.net domains. Users who plan to migrate to Akamai or another CDN provider are also required to set the Feature Flag DoNotForceMigrateEdgioCDNProfiles before January 7, 2025, so as to prevent automatic migration to Azure Front Door. "Note you will have until January 14, 2025 to complete your migration to another CDN, but again Microsoft cannot guarantee your services will be available on the Edgio platform before this date," Microsoft said. "Please be advised we will need to halt all configuration changes to Azure CDN by Edgio profiles starting on January 3, 2025. This means you will not be able to update your CDN profile configuration, but your services on Azure CDN from Edgio will still operate until you are migrated or the Edgio platform is shut down on January 15, 2025. If you apply the DoNotForceMigrateEdgioCDNProfiles feature flag before January 3, your configuration will not be frozen for changes." While relying on *.azureedge[.]net and *.azurefd[.]net isn't recommended due to availability risks, users have the temporary option of migrating to Azure Front Door while retaining the domains. "To ensure greater flexibility and avoid a single point of failure, it's advisable to adopt a custom domain as soon as possible," Microsoft warns. Furthermore, to avoid security concerns with a bad actor acquiring the azureedge[.]net domain for malware distribution or poisoning the software supply chain, the tech giant said it has taken control of it. But as for why the old domain names could not be used to resolve to the new servers, it's being said that "this option wasn't being made available." Users are recommended to scan their codebases for references to azureedge[.]net and update them to the following -

Daily Brief Summary

MISCELLANEOUS // Microsoft Urges Update of .NET Domains to Avoid Disruption

Microsoft is relocating .NET installers from Azure Content Delivery Network domains that might shut down after January 15, 2025, due to the bankruptcy of Edgio.

If developers do not update their DevOps infrastructure by January 7, 2025, Microsoft will automatically migrate customers' workloads to Azure Front Door CDNs, except for certain endpoints.

Users intending to switch to a non-Azure CDN must set a specific Feature Flag by January 7, 2025, to avoid automatic migration.

Microsoft cannot ensure service availability on the Edgio platform after January 7, 2025, urging swift migration to another CDN by January 14, 2025.

Starting January 3, 2025, no further configuration updates to Azure CDN profiles on the Edgio platform will be allowed, though services will continue until the shutdown.

Microsoft also controls the azureedge[.]net domain to prevent potential misuse for malware distribution or other malicious activities.

It is recommended to adopt custom domains to minimize dependency and reduce the risk of service disruption and security threats.