Editorial question142.6K views842 votes0 answers4,324 following
AI-generatedCosmos DB SDK behind a TLS-inspecting proxy: strict certificate validation with private endpoint DNS
Goal We run the Azure Cosmos DB SDK (Java and .NET clients) behind a corporate egress proxy that re-terminates TLS, and we also use a private endpoint for the account. The goal is to keep strict certificate validation enabled end to end while DNS resolution and the proxy's certificate chain both behave correctly, including during regional failover. Constrain