App Service refuses connections with error: “No connection could be made because the target machine actively refused it”

This post was most recently updated on December 7th, 2020.

This blog post describes a very specific fix to a very specific issue. In a software project that consisted of a desktop client application and some APIs hosted on Azure, we ran into an error where some connections to APIs would fail with an error like this:

No connection could be made because the target machine actively refused it.

What gives?

Description

Imagine this: You’re connecting to an API hosted by an Azure App Service (“Web App”, if you wish) using an application or a DLL built on .NET Framework. Your code managing the connection looks something like this:

private string YourMethod()
{
	var httpClient = new HttpClient();

	string url = [restApiUrl];

	var response = httpClient.GetAsync(url).Result;
        response.EnsureSuccessStatusCode();

	if (response.IsSuccessStatusCode)
	{
		// Omitted for clarity
	}
	else
	{
		// This is where we ended up in
	}
}

That’s all clean and kosher, but it still generates an error somewhat like in the title. Your stacktrace can vary GREATLY, because you might get this from multiple different calls and libraries. It is, in fact, the server responding to your request (whether that’s the server you’re aiming for, or something along the way, is pretty tough to know), but just refusing to handle it properly.

Note: Depending on the library you’re using, you could also get an Exception with a pretty generic message that’s something like “An error occurred while sending the request.“

Reason

There’s plenty of different reasons why you could run into this. The target server being down, an intermediate host refusing to connect you or something like a firewall blocking your access. But sometimes, it’s something a bit more weird!

Like in our particular case: it was the minimum required TLS version causing the issue. Since we were using an older version of .NET Framework, our HttpClient didn’t support TLS versions later than 1.0.

Any new App Service deployed after 6/30/2018 has had minimum TLS version requirement set to 1.2. See below for a bit if documentation by Microsoft.

Starting June 30, all new apps in Azure App Service will be created with TLS 1.2 by default.

Although we don’t recommend it, you can select TLS 1.1 or 1.0. The update can take place through the Azure portal and Azure CLI. For details on how to make your selection, see the documentation.

https://azure.microsoft.com/en-in/updates/new-app-service-apps-deployed-with-tls-1-2-as-default-from-june-30/

Okay. So how do we go about fixing this?

Solutions

2 different options here, an easy one, and a smart one :)

Let’s check out the smart one first, as that’s nice and proper.

Update to later versions of .NET

There’s a very real risk you’re not going to want to do this, but I’m going to say it anyway. Upgrade your app to use a later version of .NET Framework (or Core).

I don’t have steps for this, as each case is different. Sorry, but you’ll need to figure it out by yourself.

However, there’s always the easy option…

Enable TLS 1.0 for your Azure App Service

Well, this is definitely easy, but generally speaking not recommended. 1.2 is safer, and there’s no telling when Microsoft will disable 1.0 completely!

Anyway, for now you can follow the steps below.

With that, you’re done. If your issue was caused by this configuration, whatever you’re developing should run without a hitch now! Or at least produce a different error… :)

• Author
• Recent Posts

Antti K. Koskela

Developer / Speaker / Consultant at Koskila / Precio Fishbone / Norppandalotti Software Co / Alter - Experience Ideas Ltd

Antti Koskela is a proud digital native nomadic millennial full stack developer (is that enough funny buzzwords? That's definitely enough funny buzzwords!), who works as Solutions Architect for Precio Fishbone, building delightful Digital Workplaces.

He's been a developer from 2004 (starting with PHP and Java), and he's been working on .NET projects, Azure, Office 365, SharePoint and a lot of other stuff. He's also Microsoft MVP for Azure.

This is his personal professional (e.g. professional, but definitely personal) blog.

Latest posts by Antti K. Koskela (see all)

• How to output all Environment Variables in Azure DevOps with PowerShell? - April 9, 2024
• CSOM suddenly throwing exceptions when trying to access list contents in SharePoint? A weird fix. - April 2, 2024
• “Predefined type ‘System.Object’ is not defined or imported” and other System namespace stuff missing in your solution? - March 26, 2024